Forum Discussion

Yasir_Irfan_194's avatar
Yasir_Irfan_194
Icon for Nimbostratus rankNimbostratus
Apr 12, 2017

Can't access virtual server IP from browser , however I can ping and telnet on port 80

Hi All,   I am new to f5, I am watching CBT nuggets ( Kieth) and build a topology using f5 VM. I have created 3 nodes with an IP 10.2.0.128,10.2.0.129 & 10.2.0.130(internal network) and mapped the...
application delivery
BIG-IP
  • IainThomson85_1's avatar
    IainThomson85_1
    Apr 12, 2017

    Usually SNAT related,

     

    Use a SNATPool or Snat Automap....

     

sasi60_360261's avatar
sasi60_360261
Icon for Nimbostratus rankNimbostratus

hi Yasir, i would like to remind you to check the default gateway on your web servers. make sure those are set correctly.

 

janholtz's avatar
janholtz
Icon for Altostratus rankAltostratus
May 11, 2018

Default gateway should have no bearing if we are using SNAT.

 

IF:

 

1) Client can connect to virtual server

 

2) F5 can connect to back-end hosts.

 

We should only need correct SNAT, and we'll be happy.

 

Some caveats for condition 2:

 

Remember that when you telnet / curl from the LTM command line, it will ALWAYS use non-floating IP address to get to the back-ends.

 

When you use a client machine, and hit the virtual server with SNAT automap, it will ALWAYS try to use the floating ip address to it's internal VLAN (if assigned), and THEN non-floating.

 

ALL of the above are predicated on the premise that NONE of the traffic is trying to go / get to / from the management interface, in which case all bets are off and reality is guaranteed to get distorted.

 

DO NOT use the management IP / interface for anything besides management. It will not work... you will make yourself unhappy.

 

//Jan