Client request not hitting the VIP.

Hey Dayesh

I'm afraid ping is not a sufficient tool to test this. You could have a global policy that allows ping but blocks HTTP to that particular VS. That way you can ping the VS but you will not be able to access the VS or generate statistics.

The best way to actually make sure routing and firewall policies are correct, run telnet to the VS and define the port 80. For instance:

telnet [VS IP] 80

If it's not successful, then you'll know that there is something is not allowing the traffic to the VS. If it's successful you will know that traffic reaches the VS and it should generate statistics. In this case there is something on the BIG-IP that prohibits the traffic.

Also, you can perform a tcpdump on the BIG-IP while doing it and see the traffic hitting the VS in real time. Just log on to SSH of the BIG-IP and run the following command:

tcpdump -i 0.0 host [VS IP]

I hope this helps!

Let us know how it goes. 🙂