Forum Discussion
Config of Generic host with multiport.
We have to configure generic host with multiple ports. If any one port goes down that generic host should not respond. How can we achieve this. Do we need to configure multiple generic host with separate ports or we can configure only one Generic host with all ports configured under it and with multiple health monitors.
- Kevin_Stewart
Employee
I guess the answer depends on the definition of "multiple ports". Is it a specific set of ports, or any/all ports?
If it's any/all ports, you can simply create a VIP with a wildcard port (*), disable port translation, and send to a pool that also uses wildcard ports. A request coming in to IP:1414 will get sent to the pool on port 1414, and hopefully there will be a server there listening on port 1414 to receive this.
If it's a specific set of ports, you cannot define a single VIP this way. You can allow all ports and then limit what's accepted in an iRule (blocking everything else).
On the monitor question, you'd want to use a port-agnostic monitor, like an ICMP 'ping'.
- youssef1
Cumulonimbus
it's depending,
the best solution, if you only had a few ports to manage is to create a specific HOST / VS for each port.
That will allow you to monitor independently the differents ports/service. And to do a specific configuration for each Host if needed...
Hope it's clear.
- tushar2k_312391
Nimbostratus
Its a specific set of Port i.e. port 21 and 22. So I have to allow all ports for this VIP then I can assign moniter of port 21 and 22 on this VIP. Is this right? But is it feasible to allow all ports by considering security.
- Kevin_Stewart
Employee
You really have two choices:
-
Allow all ports and disable non-accepted ports via iRule or LTM policy
-
Create two separate VIPs, one per port
-
- tushar2k_312391
Nimbostratus
Thanks Kevin
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com