L2 port security

Is there a trunk between s1 and s2? Can you mirror packets from s1 and/or s2 to a laptop with wireshark on it so you can see if the packets are leaving the switches and heading for the BIG-IP ports? If hostA and hostB are in the same subnet, why would a route impact their ability to connect to each other directly?

 

 

I'd remove as much extra configuration as possible surrounding this architecture so you can get it working, then add the other stuff back one at a time. I second L4L7's suggestion to avoid the vlan groups if possible.