Forum Discussion
cs-server-addr & ss-server-addr are same !
Hi everyone !
when I'm viewing the connections on my LTM it shows both cs-server-addr & ss-server-addr as same IP i.e VIP , we are using route domains and these connections are for VPN traffic i.e we are using F5 to loadbalance DMVPN HUB traffic.
please let me know how i can show which connections are going to backend pool members ? and why its showing like this?
sorry i have mask the IP's but it's showing the same IP's for me
211.x.x.x%7000:any 198.x.x.x%7000:any 211.x.x.x%7000:any 198.x.x.x%7000:any esp 1 (tmm: 0) none
211.x.x.x%7000:500 198.x.x.x%7000:500 211.x.x.x%7000:500 198.x.x.x%7000:500 udp 795 (tmm: 1) none
Thank You
Find the below details, which will help to dril down the output.
CS is Client Side (Client --> F5) SS is Server Side (F5 --> Server) cs-client-addr - Client IP cs-server-addr - VS IP (VIP) ss-client-addr - SNAT IP or Client IP i.e. cs-client-addr ss-server-addr - Server IP address
- Samir_Jha_52506Noctilucent
Find the below details, which will help to dril down the output.
CS is Client Side (Client --> F5) SS is Server Side (F5 --> Server) cs-client-addr - Client IP cs-server-addr - VS IP (VIP) ss-client-addr - SNAT IP or Client IP i.e. cs-client-addr ss-server-addr - Server IP address
- murali_125469Nimbostratus
ss-server-addr is showing the same IP i'e VIP in this case for me
- murali_125469Nimbostratus
something like this
211.x.x.x%7000:any 198.1.1.1%7000:any 211.x.x.x%7000:any 198.1.1.1%7000:any esp 1 (tmm: 0) none
- Samir_Jha_52506Noctilucent
Are you using any NAT on VIP.. ?
- Stanislas_Piro2Cumulonimbus
Hi,
if this connection matches a virtual server with parameter "Translate destination" unchecked, the BigIP route traffic to the destination with the same destination address as the client side destination.
this is the expected behavior for Forwarding IP virtual servers.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com