For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swjo_264656's avatar
swjo_264656
Icon for Cirrostratus rankCirrostratus
Nov 14, 2016

default Health check port ranges & how exclude using some port

Hi   In LTM 11.5.4, I want to know BIGIP`s healch check port ranges, when configure default TCP monitor.   cause of my client`s security policy, port 4444 is blocked in L3. and can not change i...
application delivery
LTM
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Nov 14, 2016

As Odaah said, should be high ports (1024-65535). I could't find any way to change that, neither via monitor or db keys for bigd.

 

However, if you disable port reuse for bigd, the monitor should fail only once (when uses the blocked port). As the default monitor settings (and F5 recommendation even if you change), is to have 3 fails before the member is marked down, it should not mark the pool member down.

 

Solution about socket reuse:

 

https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13820.html