Forum Discussion

F5Team's avatar
F5Team
Icon for Cirrus rankCirrus
Jan 17, 2024

ICMP packets on a TCP monitor

We observed an issue where the pool members are on cloud had ICMP disabled. F5 had route and able to telnet to member but the tcp monitor still marked down. Once the ICMP was enabled on the server en...
security
Michael_Saleem's avatar
Michael_Saleem
Icon for MVP rankMVP
Jan 17, 2024

You probably have the default node monitor (set to ICMP) enabled (which sends ICMP health monitor traffic to all nodes, in addition to existing monitors you have already applied)

You can verify this by using the following command:

list ltm default-node-monitor

Sample Output:

ltm default-node-monitor {
    rule icmp
}

If you want to disable this default-node monitor, you can use the following command:

modify ltm default-node-monitor rule none

https://my.f5.com/manage/s/article/K40140418