Block ICMP (Ping) on a specific VS

Hi Alfy,

 

 

You could use a packet filter that drops ICMP for specific virtual addresses. I think you could use a packet filter rule like:

 

 

( proto ICMP ) and ( dst host 10.1.1.1)

 

 

where 10.1.1.1 is your virtual server address. The action would be drop.

 

 

You can check the config guide for your version for details. Here's the manual section for 11.1:

 

 

TMOS concepts - 11.1

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-concepts-11-1-0/tmos_packet_filters.html

 

 

TMOS Implementations - 11.1

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-1-0/14.html

 

 

Aaron