For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Nov 23, 2015

Disable Virtual Server but still can ping Virtual Server IP Address....Is it normal ?

Hi Folks,

 

I want to know that why I can ping my virtual server IP address even I disable it ? Is it normal in BIG-IP LTM that even Virtual Server is disable. We can ping Virtual Server IP ?

 

Thanks

 

application delivery
LTM

7 Replies

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Nov 23, 2015

    Yes, You would have to disable the associated Virtual Address to prevent it from responding to a ping. Your virtual server is not the object responding to the ping. Your virtual server only responds on the port its configured for.

     

  • Tabish_Mirza_12's avatar
    Tabish_Mirza_12
    Icon for Nimbostratus rankNimbostratus
    Nov 23, 2015

    @ Brad....For testing I changed the Virtual Server IP and now I am unable to ping even though I can see old IP under Virtual IP Address List. I didn't delete from there. Why any idea?

     

    • Brad_Parker's avatar
      Brad_Parker
      Icon for Cirrus rankCirrus
      Nov 23, 2015
      That's because there are no associated virtual servers with that virtual address anymore. If you go look at that virtual address you will most likely see it disabled with a red diamond on it. That virtual address will not be auto deleted anymore since you changed your virtual server that it was related to. If you would have just deleted that virtual server the virtual address would have been auto deleted as well.
    • Tabish_Mirza_12's avatar
      Tabish_Mirza_12
      Icon for Nimbostratus rankNimbostratus
      Nov 23, 2015
      @ Brad. Yes I have checked it shows disabled with red diamond after changing the IP address with new IP. Moreover, I need advise about migration. Actually we are migrating the services from old BIG-IP LTM applinaces to New BIG-IP LTM appliance. We have configured the services (VIP, Pool, Pool Members, Nodes, Monitor & Persistance) on New BIG-IP LTM appliances according to existing Old BIG-IP configuration with test Virtual Servers IP. We have tested the services with New test VS IP's & its works fine. Now we want to move VS IP from old BIG-IP to New BIG-IP without deleting the VS from Old BIG-IP. Could you please advise how we can achieve this ?
    • Brad_Parker's avatar
      Brad_Parker
      Icon for Cirrus rankCirrus
      Nov 23, 2015
      You can go into each virtual address and disable ARP so it no longer advertises to the switch that it owns that IP address.
  • Tabish_Mirza_12's avatar
    Tabish_Mirza_12
    Icon for Nimbostratus rankNimbostratus
    Nov 23, 2015

    Brad as you said we need to delete or disable the IP from Virtual Address List but I just changed the Virtual Server IP Address & it stop responding ping reply even though old IP still I can see under Virtual Address List.