F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

ecce's avatar
ecce
Icon for Cirrostratus rankCirrostratus
Jun 20, 2017

Disable Echo reply on virtual address

Hi,   I just started to do my first labs on BIG-IP VE, using 12.1.1. I have configured a standard virtual server for 0.0.0.0/0 on VLAN "INSIDE" directing traffic to a firewall (The firewall interf...
application delivery
LTM
gsharri's avatar
gsharri
Icon for Altostratus rankAltostratus
Jun 26, 2017

The virtual address arp/icmp settings affect only traffic destined for the virtual address itself. It does not stop icmp traffic from flowing through the virtual server to a remote destination. You could setup packet filtering on bigip, Network>Packet Filters, to block icmp but note this will block all icmp attempts not just those for your 0.0.0.0/0 VS.

 

I am guessing your 0.0.0.0/0 VS Protocol setting is set to "*All Protocols". This is what is allowing the VS to process icmp. If you desire TCP/UDP only you could create two 0.0.0.0/0 VS, one for Protocol:TCP and the other for Protocol:UDP.