Forum Discussion

ravi_75510's avatar
ravi_75510
Icon for Nimbostratus rankNimbostratus
Feb 22, 2018

F5 VIP issue while accessing from one of pool member

Hi - I am facing below issue in one of my application: Setup - Its a windows application running on a 4 node cluster. servers are behind a F5 VIP. Application is secured with Active directory authentication. Application works fine if i access it form from user VLAN. But not when I access it one of cluster node. Issue - When I access application using VIP from one of node it keeps asking for authentication and works after 4-5 attempts. But when I access application using sevrer's FQDN from the server it works fine.

 

To test I disabled a node in F5 pool, then accessed the application from that node and it worked.

 

So it looks like if a request is coming a sevrer A and if F5 is directing that request back to Server A behind VIP, its not working but it works if F5 is directing that request to any other pool member.

 

Is it normal behavior of F5, if it was I am missing.

 

Please let me know if you need more information to help me out on this.

 

Thanks, Ravi

 

application delivery
BIG-IP
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Feb 22, 2018

    Does it work at all if you have a single server in the pool?

     

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Feb 22, 2018

    I guess your problem is that the client and server are on the same network, so traffic does not return via the F5.

     

    Add snat automap to the virtual server if that is the case. Also, make sure the virtual server is setup to access traffic from that vlan.