For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ricky_paulus_gi's avatar
ricky_paulus_gi
Icon for Nimbostratus rankNimbostratus
Apr 03, 2018

How to use traceroute command from F5 to destination

Hi All,   I have created forwarding Virtual Server. We used source translation ,How do we use traceroute from F5 (Source translation) to the destination?   Regards,   Ricky  
application delivery
LTM
TMSH
traceroute
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Apr 03, 2018

You can't do that, and just to be sure I tested.

 

[root@LABBIGIP1:Active:Disconnected] config traceroute -s 172.16.0.1 8.8.8.8

 

13:41:26.072969 IP 172.16.0.1.54942 > 8.8.8.8.33435: UDP, length 32 out slot1/tmm3 lis= flowtype=130 flowid=56009AFE8780 peerid=56009AFE8680 conflags=626 inslot=63 inport=23 haunit=0 priority=0 peerremote=00000000:00000000:0000FFFF:AC100001 peerlocal=00000000:00000000:0000FFFF:08080808 remoteport=58456 localport=33435 proto=17 vlan=4094

 

172.16.0.1 is my internal self IP, vlan=4094 is my external vlan. I have a forwarding 0.0.0.0/0 virtual server listening on the internal VLAN with automap, and a default gateway via external VLAN.

 

Basically, the traffic is sent out via external VLAN as per default gateway, and using internal source address.

 

When you test from the F5, the unit is just sending the traffic out. When you access from inside, the forward virtual server handles the traffic, and after that routing takes control to send the traffic out.