Forum Discussion

emilio_104458's avatar
emilio_104458
Icon for Nimbostratus rankNimbostratus
May 15, 2012

f5 snat list translation and issue with telnet and wget

hi all,

 

i've this situation:

 

server as01 -> f5 -> external system

 

 

 

- only the f5 has visibility of external system (10.193.91.198)

 

- f5 is the default gateway on internal vlan of server as01

 

- a snat translation list is made with the ip 10.193.91.198

 

 

from the f5 the external system is reachable:

 

 

 

[root@f5:Active] config tcptraceroute 10.193.91.198 -p 80

 

traceroute to 10.193.91.198 (10.193.91.198), 30 hops max, 40 byte packets

 

1 (10.193.37.1) 0.613 ms * (10.193.37.1) 0.992 ms

 

2 * * *

 

3 * * *

 

4 * * *

 

5 (10.193.91.198) 15.436 ms 15.296 ms 15.325 ms

 

[root@f5:Active] config telnet 10.193.91.198 80

 

Trying 10.193.91.198...

 

Connected to 10.193.91.198 (10.193.91.198).

 

Escape character is '^]'.

 

^]

 

telnet> quit

 

 

but from the server as01 i've a strange issue:

 

- ping works

 

- tcptraceroute with specific port 80 works

 

- telnet (or wget) to specific port 80 doesn't work

 

 

[root@SC-MUC-tgepreas01 ~] ping 10.193.91.198

 

PING 10.193.91.198 (10.193.91.198) 56(84) bytes of data.

 

64 bytes from 10.193.91.198: icmp_seq=1 ttl=255 time=0.205 ms

 

64 bytes from 10.193.91.198: icmp_seq=2 ttl=255 time=0.160 ms

 

64 bytes from 10.193.91.198: icmp_seq=3 ttl=255 time=0.210 ms

 

 

--- 10.193.91.198 ping statistics ---

 

3 packets transmitted, 3 received, 0% packet loss, time 2000ms

 

rtt min/avg/max/mdev = 0.160/0.191/0.210/0.027 ms

 

[root@SC-MUC-tgepreas01 ~] tcptraceroute 10.193.91.198 -p 80

 

traceroute to 10.193.91.198 (10.193.91.198), 30 hops max, 40 byte packets

 

1 sctgepreextservitds (10.193.91.198) 0.561 ms 0.542 ms 0.530 ms

 

[root@SC-MUC-tgepreas01 ~]

 

[root@SC-MUC-tgepreas01 ~]

 

[root@SC-MUC-tgepreas01 ~] telnet 10.193.91.198 80

 

Trying 10.193.91.198...

 

telnet: connect to address 10.193.91.198: Connection refused

 

telnet: Unable to connect to remote host: Connection refused

 

[root@SC-MUC-tgepreas01 ~]

 

 

 

any ideas?

 

can anyone help me please?

 

 

thanks in advice

 

 

 

  • Hi,

     

     

    I think that you should also create a network forwarding vs on the f5. all vlan should enabled for the server vlan and destination ip should set 0.0.0.0 and net mask 0.0.0.0 .

     

     

     

  • hi Rise,

     

    thanks for ur support. with this virtual server (also configured to auto map the snat pool) all works.

     

     

    thanks a lot