Forum Discussion
Mattia_59070
Nimbostratus
NimbostratusF5 LTM Sending ACK to a RST,ACK on its own with only routing+nat configured
Hi, we have seen this strange behavior when troubleshooting a network problem.
We have a F5 acting only as router-nat for a particular flow, the LTM has 2 interfaces, the source is in a subnet and we...
If you are using a Forwarding-IP Virtual server or a FastL4 Virtual server, then the F5 is generally not going to be generating any packets.
You should look at the Source MAC of the incoming packet and trace which device is generating it.
Not sure what a "SPAN" is, but if you sit at the F5 and run an appropriate capture (filter for target IP only, and capture on all interfaces) and you don't see the packet leaving the F5, then think about the devices that are between the F5 and the target server, and see if any one of them is proxying the connection.
One way to detect proxied connections is to send establish a connection, capture it at the point of origin, and compare the TCP parameters there with the TCP parameters at the destination. If they are unchanged, then it's likely not proxied.
