For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kirit_Patel_521's avatar
Kirit_Patel_521
Icon for Nimbostratus rankNimbostratus
Dec 30, 2009

disable arp not working

We had a situation where we have virtual servers defined and pools. If the backend servers lets say ip 172.16.34.2 and 172.16.34.5 listening on port 80 were down     But we are still able ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 04, 2010
Hi Kirit,

 

 

See this post for details:

 

 

vserver ALWAYS replies to ping

 

http://devcentral.f5.com/Default.aspx?tabid=53&forumid=32&tpage=1&view=topic&postid=5593055932

 

 

As long as you have a TCP profile added to a VIP, LTM will still answer a TCP handshake before the CLIENT_ACCEPT event is triggered and the connection is reset. So telnet or any other type of request will show a connection which is immediately closed by LTM with a reset:

 

 

07:03:32.263791 802.1Q vlan4094 P0 client.4235 > vip.http: S 1533083566:1533083566(0) win 64240

 

07:03:32.263808 802.1Q vlan4094 P0 vip.http > client.4235: S 4202135950:4202135950(0) ack 1533083567 win 3711 (DF)

 

07:03:32.292668 802.1Q vlan4094 P0 client.4235 > vip.http: . ack 1 win 64240

 

07:03:32.292718 802.1Q vlan4094 P0 vip.http > client.4235: R 1:1(0) ack 1 win 3711 (DF)

 

 

Aaron