Forum Discussion
NimbostratusClient request not hitting the VIP.
If you could post your configs, that would help. Please see if you are using SNAT or two arm deployment? If using SNAT, make sure the SNAT IP can reach the backend servers. If not using SNAT, snat exception, make sure to check the servers are configured with F5 as gateway.
Check the routes F5 is taking to servers. ip route get serverip
issue telnet from F5 telnet serverip port
I you run capture with -s0 option it would capture the backend traffic and you can see if the TCP handshake is completing or not.
Hey Dayesh
I'm afraid ping is not a sufficient tool to test this. You could have a global policy that allows ping but blocks HTTP to that particular VS. That way you can ping the VS but you will not be able to access the VS or generate statistics.
The best way to actually make sure routing and firewall policies are correct, run telnet to the VS and define the port 80. For instance:
telnet [VS IP] 80If it's not successful, then you'll know that there is something is not allowing the traffic to the VS. If it's successful you will know that traffic reaches the VS and it should generate statistics. In this case there is something on the BIG-IP that prohibits the traffic.
Also, you can perform a tcpdump on the BIG-IP while doing it and see the traffic hitting the VS in real time. Just log on to SSH of the BIG-IP and run the following command:
tcpdump -i 0.0 host [VS IP]I hope this helps!
Let us know how it goes. 🙂
