For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

player_72606's avatar
player_72606
Icon for Nimbostratus rankNimbostratus
Sep 16, 2010

icontrol as external monitor

Hi all     new to icontrol , please be gentle... :-)     a security policy requires that all VS that are offline or down should not respond to echo requests when it's pool members are dow...
dev
devops
iControl
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Sep 22, 2010
This is a very convoluted and time-consuming way of achieving your goal, but I think it is do-able.

 

 

Essentially you will need to check the status of the Virtual Address corresponding to the Virtual Server you are monitoring and disable ARP using set_arp_state() method:

 

 

http://devcentral.f5.com/wiki/default.aspx/iControl/LocalLB__VirtualAddress__set_arp_state.html

 

 

It might be easier to just disable ICMP completely using packet filters if it is OK with your security policy....