Forum Discussion

Altostratus

Sep 10, 2024

Help configuring NAT64 on a BIG-IP LTM

I have been trying to implement NAT64 in our network in order for IPv6 only clients can reach our IPv4 only servers. Ive create an IPv6 VIP and enabled the nat6to4 option and port and address trans...

Altostratus

Sep 11, 2024

HI brother im able to see the connection in the connection table once i changed the type of the VIP from {standard} to { performance layer 4}.

But unfortunately another issue appeared where the website is not loading. But im able to see the connection table

client IPaddress VIP ip address floating ip address node

2a:45:33.xxx 2a:66:x.x.x.xx 172.16.1.1 172.16.2.3

I thought the issue might be related to SSL certificate. If there a way i can assign ssl on the performance layer 4 VIP. i didnt find an option for assigning ssl certificate to it.

Mohamed_Ahmed_Kansoh

MVP

Sep 12, 2024

Hey,

Performance l4 VS like the router , it just routs traffic from outside to inside,
you can't assign a ssl profile in performance L4 because you haven't any L7 visibility to parse the http Traffic.

have you added a IPv6 selfip address in the external VLAN ?
Take a packet capture and show it to me and revert back to standard virtual server.

Review the Routing on F5 Bigip specially the back route for IPv6 Clients or enable "auto-last hop" feature in the virtual server.

seems you have a missing route in F5 Bigip so auto last hop can help in this.