For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Clem_Clem_32994's avatar
Clem_Clem_32994
Icon for Nimbostratus rankNimbostratus
Aug 09, 2017

HTTPS load balancing

Am a newbie to F5 LTM and trying to load balance two HTTPS servers that are using port 443 i created the pool i.e. x.x.x.x 443, x.x.x.x 443 and the VS with https and also set VS to the default pool I...
application delivery
LTM
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
Aug 09, 2017

Hi Clem_Clem,

 

You have to configure a SSL client and server profile if you need to terminate SSL connection on the F5 device.

 

You can check if ICMP is allowed for that VS by checking the corresponding Virtual Address.

 

You may also have some network issues. You can run a tcpdump command to sniff packets on the F5 device and check if you see your icmp request and response.

 

Did you configured a default route ? What are the source and destination subnet ?

 

Yann

 

  • Clem_Clem_32994's avatar
    Clem_Clem_32994
    Icon for Nimbostratus rankNimbostratus
    Aug 09, 2017

    how do I check the ICMP allowed on the VS? I did configure a default route with a source and destination subnet.

     

  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    Aug 09, 2017

    It's on the virtual address not the virtual server

     

  • Clem_Clem_32994's avatar
    Clem_Clem_32994
    Icon for Nimbostratus rankNimbostratus
    Aug 09, 2017

    OK, when I check the iApp, on the diagram of my VS, it display icmp with an icon with other items.. i.e. pools, tcp-lan-optimized etc

     

  • Clem_Clem_32994's avatar
    Clem_Clem_32994
    Icon for Nimbostratus rankNimbostratus
    Aug 09, 2017

    I believe this is what I need to do, K14822: Virtual address ICMP Echo and ARP-enabled settings may not be honored when loading a configuration. Using the tmsh utility to enable ICMP Echo and ARP

     

    Log in to the Traffic Management Shell (tmsh) by typing the following command: tmsh

     

    Configure the desired ICMP Echo setting for a virtual address by using the following command syntax: modify ltm virtual-address icmp-echo enabled|disabled

     

    For example, to enable ICMP Echo for virtual address 10.10.10.0, type the following command: modify ltm virtual-address 10.10.10.0 icmp-echo enabled

     

    Configure the desired ARP setting for a virtual address using the following command syntax: modify ltm virtual-address arp enabled|disabled

     

    For example, to enable ARP for virtual address 10.10.10.0, type the following command: modify ltm virtual-address 10.10.10.0 arp enabled

     

    Save the change by typing the following command: save /sys config

     

    Using the Configuration utility to enable ICMP Echo and ARP

     

    Log in to the Configuration utility. Navigate to Local Traffic > Virtual Servers. Click the Virtual Address List tab. Select the name of the affected virtual address. Select the ARP Enabled check box. Select the ICMP Echo Enabled check box. Click Update.