Forum Discussion

Linda_01_162621's avatar
Linda_01_162621
Icon for Nimbostratus rankNimbostratus
Nov 27, 2014

Cannot access the internet using a default gateway virtual server

I am newbie, I am using a BIG-IP 2000 (11.6.0) version.   As a start, I want to create a simple network:   Client PC   10.0.0.1 255.255.255.0 GW: 10.0.0.254 *connected to int VLAN. i.e...
application delivery
BIG-IP Access Policy Manager (APM)
deployment
LTM
security
  • VernonWells's avatar
    VernonWells
    Nov 28, 2014

    You must disable address and port translation on your Virtual Server. These are under the "Advanced" configuration. Without that, all traffic will be forwarded to the pool member using it's IP address as the destination. Moreover, assuming you want to forward more than TCP traffic, you must change the Protocol to "*All Protocols". You almost certainly want to limit the VS to just your internal VLAN (change "VLAN and Tunnel Traffic" to "Enabled on..." and move the internal VLAN to the "Selected" box).

     

    Incidentally, this can be achieved a different way. If you set the BIG-IP default route to 172.16.100.17, you could then use a "Forwarding (IP)" Virtual Server type, which uses the BIG-IP route table to forward traffic.

     

  • Yaree_263546's avatar
    Yaree_263546
    May 12, 2016
    I had the same problem and I found the solution by changing the vmnet0 bridge from automatic to the associated Network Ethernet Adapter. Vmware>Edit>Virtual Network Adapter>vmnet0
Linda_01_162621's avatar
Linda_01_162621
Icon for Nimbostratus rankNimbostratus
Nov 28, 2014

Thank for the response.

 

However, I tried all the suggestions mentioned here.

 

  1. Disabling the address and port translation
  2. Defining a default route using the route object in configuration utility
  3. Use a Forwarding IP virtual server
  4. Enabled all protocols on the virtual server
  5. Enabled the virtual server ONLY on the internal VLAN (as suggested)

None of them are working. Should I be able to ping the Self IPs? How can I troubleshoot to see where the problem is? Tracert shows that the default gateway set in the test PC (self IP address on the internal VLAN - 10.0.0.254) does not know where to forward packets destined for a network that is not directly connected to the system. i.e. does not forward the traffic to the default gateway through the virtual server and the pool members (destination net unreachable).