For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana_52318's avatar
kridsana_52318
Icon for Nimbostratus rankNimbostratus
Sep 22, 2016

F5 11.5.4 SSH issue

Hi

 

Did anyone have a problem with 11.5.4 HF2 ?

 

I've create SSH virtual server and pool member is also port 22

 

But "some" client can't access this virtual.

 

I didn't see known issue about ssh in 11.5.2 HF2 though.

 

Ker

 

11.5.4
application delivery
BIG-IP
LTM
security
ssh

2 Replies

  • tatmotiv's avatar
    tatmotiv
    Icon for Cirrostratus rankCirrostratus
    Sep 23, 2016

    If this affects only some clients, you might want to check if the connection attempts of those clients reach your BigIP at all. I would start by doing a 

    tcpdump -i clientside-vlan host vip-ip and host client-ip and port 22
    . If you can see the connections arrive, the problem is probably in the big-IP config (limited source IPs, VLAN-allow settings, iRules...). If you do not see any packets arrive on your side, I'd check the client and/or intermediate devices (e.g. firewalls).

  • Henry_Chong_154's avatar
    Henry_Chong_154
    Icon for Altocumulus rankAltocumulus
    Sep 23, 2016

    A bit more info to the problem?

     

    i) Are the clients accessing through the same IP ranges/VLAN sections?

     

    ii) Type of software client using possibly