For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

newf5learner's avatar
newf5learner
Icon for Nimbostratus rankNimbostratus
Sep 05, 2016

F5 mac masquerade on traffic group - traffic processing failed

Hi,   I have a standalone LTM and I was testing the HA features, I have configured the MAC masquerade on the ttraffic group1 (only one traffic group is available).. I tried to access the VIPs con...
application delivery
LTM
TMOS
Henrik_S's avatar
Henrik_S
Icon for Nimbostratus rankNimbostratus
Sep 05, 2016

Was it by any chance a virtual LTM? If so, you must configure the port group or equivalent to accept forged MAC transmits, mac address change and promiscious mode.

 

MAC masquerade means in basic that the same virtual MAC address will be shared between two systems in HA. This however requires upstream units as switches, vswitches and port groups to both allow allow a MAC address to change and that a given interface will send "forged" transmits with the mac masquerade address for traffic passing through that traffic group.