Disabled VIP responding to ICMP

Do you have any other virtual servers using the same IP address? You can disable ICMP from the virtual address section

This is an expected behavior Senthil.

Read through this article - K16885: Controlling the BIG-IP ARP and ICMP echo response behavior for a virtual address to know more this.

If you'd like to disable the icmp, you can have the virtual-address properties changed.

tmsh modify ltm virtual-address  icmp-echo disabled

I dont want to disable ICMP completely instead i would like to configure the VIP in such a way that if pool members are down ICMP to VIP should fail because i am calling this VIP address in main core device SLA tracking. IF main code device can ping this VIP then it will inject default route and if pool members are down then ICMP to VIP should not work so that core device will take out default route.

Is this possible ?

Thanks, senthil

When you configure a VIP, big-ip creates a virtual listener which you can find under virtual-address section. This virtual-address is shared across all the VIPs that uses this IP in destination field. When you use ping, you get reply from virtual-address, not from a VIP.

As jaikumar mentioned, If you want to disable icmp for a particular IP you need to do it under virtual-address section.

You have some flexibility with ICMP Selective, but again, if you have several VIPs sharing the same IP, then this become a challenge.

As I explained. Under Virtual Address there is an option "ICMP Echo". Play with it.