Forum Discussion

murali_125469's avatar
murali_125469
Icon for Nimbostratus rankNimbostratus
May 16, 2018

cs-server-addr & ss-server-addr are same !

Hi everyone !

 

when I'm viewing the connections on my LTM it shows both cs-server-addr & ss-server-addr as same IP i.e VIP , we are using route domains and these connections are for VPN traffic i.e we are using F5 to loadbalance DMVPN HUB traffic.

 

please let me know how i can show which connections are going to backend pool members ? and why its showing like this?

 

sorry i have mask the IP's but it's showing the same IP's for me

 

211.x.x.x%7000:any 198.x.x.x%7000:any 211.x.x.x%7000:any 198.x.x.x%7000:any esp 1 (tmm: 0) none

 

211.x.x.x%7000:500 198.x.x.x%7000:500 211.x.x.x%7000:500 198.x.x.x%7000:500 udp 795 (tmm: 1) none

 

Thank You

 

application delivery
LTM
security
TMOS
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    May 16, 2018

    Find the below details, which will help to dril down the output.

      CS is Client Side (Client --> F5)
  SS is Server Side (F5 --> Server)

  cs-client-addr - Client IP
  cs-server-addr - VS IP (VIP)

  ss-client-addr - SNAT IP or Client IP i.e. cs-client-addr
  ss-server-addr - Server IP address
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 16, 2018

    Find the below details, which will help to dril down the output.

      CS is Client Side (Client --> F5)
  SS is Server Side (F5 --> Server)

  cs-client-addr - Client IP
  cs-server-addr - VS IP (VIP)

  ss-client-addr - SNAT IP or Client IP i.e. cs-client-addr
  ss-server-addr - Server IP address
    • murali_125469's avatar
      murali_125469
      Icon for Nimbostratus rankNimbostratus
      May 16, 2018

      ss-server-addr is showing the same IP i'e VIP in this case for me

       

    • murali_125469's avatar
      murali_125469
      Icon for Nimbostratus rankNimbostratus
      May 16, 2018

      something like this

       

      211.x.x.x%7000:any 198.1.1.1%7000:any 211.x.x.x%7000:any 198.1.1.1%7000:any esp 1 (tmm: 0) none

       

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    May 16, 2018

    Hi,

     

    if this connection matches a virtual server with parameter "Translate destination" unchecked, the BigIP route traffic to the destination with the same destination address as the client side destination.

     

    this is the expected behavior for Forwarding IP virtual servers.