Forum Discussion

player_72606's avatar
player_72606
Icon for Nimbostratus rankNimbostratus
Sep 16, 2010

icontrol as external monitor

Hi all

 

 

new to icontrol , please be gentle... :-)

 

 

a security policy requires that all VS that are offline or down should not respond to echo requests when it's pool members are down.

 

 

i do know that ARP must be disabled in order to achieve this but i need also an external monitor which be done with icontrol

 

 

please correct if i'm wrong and if you have any insights about this, feel free to post

 

 

has anyone done it?

 

dev
devops
iControl
  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Sep 22, 2010
    This is a very convoluted and time-consuming way of achieving your goal, but I think it is do-able.

     

     

    Essentially you will need to check the status of the Virtual Address corresponding to the Virtual Server you are monitoring and disable ARP using set_arp_state() method:

     

     

    http://devcentral.f5.com/wiki/default.aspx/iControl/LocalLB__VirtualAddress__set_arp_state.html

     

     

    It might be easier to just disable ICMP completely using packet filters if it is OK with your security policy....