For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

muruganyash's avatar
muruganyash
Icon for Nimbostratus rankNimbostratus
Nov 23, 2022

Gateway sends VIP ARP request to F5 using F5 interface MAC address instead of broadcast MAC FF:FF..

When i capture the tcpdump i noticed, upstream network device sends virtual server IP's ARP request to F5 using F5's self interface MAC address instead of broadcast MAC FF:FF.. May i know how the ups...
application delivery
muruganyash's avatar
muruganyash
Icon for Nimbostratus rankNimbostratus
Nov 24, 2022

But what am noticing in wireshark output is not a broadcast MAC. Its clearly sending the ARP to F5 interface MAC VMware_83:3f:f4, that is the poing it confusing me.

Example:
231 2022-11-23 13:07:23.402506 Cisco_43:ae:43 VMware_83:3f:f4 ARP 84 IN s1/tmm0 : Who has 10.240.133.130? Tell 10.240.133.2
232 2022-11-23 13:07:23.402568 VMware_83:3f:f4 Cisco_43:ae:43 ARP 84 OUT s1/tmm0 : 10.240.133.130 is at 00:50:56:83:3f:f4