For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mj16othman's avatar
mj16othman
Icon for Altostratus rankAltostratus
Sep 10, 2024

Help configuring NAT64 on a BIG-IP LTM

I have been trying to implement NAT64 in our network in order for IPv6 only clients can reach our IPv4 only servers.   Ive create an IPv6 VIP and enabled the nat6to4 option and port and address trans...
application delivery
cloud
devops
security
mj16othman's avatar
mj16othman
Icon for Altostratus rankAltostratus
Sep 11, 2024

HI brother im able to see the connection in the connection table once i changed the type of the VIP from {standard} to { performance layer 4}.  

 

 

But unfortunately another issue appeared where the website is not loading. But im able to see the connection table 

 

client IPaddress                     VIP ip address     floating ip address    node 

2a:45:33.xxx                         2a:66:x.x.x.xx             172.16.1.1                  172.16.2.3

 

 

I thought the issue might be related to SSL certificate. If there a way i can assign ssl on the performance layer 4 VIP. i didnt find an option for assigning  ssl certificate to it.    

  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Icon for MVP rankMVP
    Sep 12, 2024

    Hey, 

    Performance l4 VS like the router , it just routs traffic from outside to inside, 
    you can't assign a ssl profile in performance L4 because you haven't any L7 visibility to parse the http Traffic. 

     

    have you added a IPv6 selfip address in the external VLAN ? 
    Take a packet capture and show it to me and revert back to standard virtual server.

    Review the Routing on F5 Bigip specially the back route for IPv6 Clients or enable "auto-last hop" feature in the virtual server.

    seems you have a missing route in F5 Bigip so auto last hop can help in this. 

    Try it and let me know