For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana_52318's avatar
kridsana_52318
Icon for Nimbostratus rankNimbostratus
Dec 18, 2015

Did Forwarding VS need to disable ARP and ICMP echo?

Hi   we have config many forwarding VS and many of them is host Forwarding.   Problem is when Node behind F5 is down , Monitor from outside still can ping (or tcp) IP of Node because ICMP echo ...
application delivery
BIG-IP
LTM
kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Dec 21, 2015

Hi Nathan

 

In this case, Customer have monitor server in front of F5 which check ICMP to server. Did this will make monitor fault positive because F5 virtual address will response by ICMP echo even though real server is down. (it's affect only host forwarding vs, not network forwarding vs)

 

And in this case it shown conflict IP after real server reboot, So I think we need to disable arp+icmp echo on host forwarding vs. but I'm not sure if disable it and then we can use host forwarding vs properly

 

Kridsana