For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kyi_Thu_Aung's avatar
Kyi_Thu_Aung
Icon for Altostratus rankAltostratus
Oct 10, 2021

can't reachable external to internal and internal to external network

Please see the attached picture for my lab design in eve. As per design, R6 can't reach and ping the F5 interface (172.16.2.1), R4 can't ping the F5 interface (172.16.1.1). The route configuration is...
BIG-IP
devops
security
chrros95's avatar
chrros95
Icon for Altostratus rankAltostratus
Oct 10, 2021

By default, the Big-IP has a full-proxy architecture that requires that you have a listener matching each request that you want to forward to the "other"-/client-side. This applies to all connections even the interfaces of the Big-IP.

 

So I guess you either need a virtual server or a SNAT.

Do you have already configured one of these?

 

 

  • Kyi_Thu_Aung's avatar
    Kyi_Thu_Aung
    Icon for Altostratus rankAltostratus
    Oct 10, 2021

    Hello  , Thanks for your replying. Do you have configuration or guideline for the virtual server related with my design. If you have, Please share me.