For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_107360's avatar
Michael_107360
Icon for Cirrus rankCirrus
Oct 10, 2016

Limitation of ICMP on Virtual Servers

Is there a built in limit for ICMP responses on Big-IP? Consistently it will stop at 249 example: Sending 250, 100-byte ICMP Echos to 192.168.1.40, timeout is 2 seconds: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
application delivery
BIG-IP
LTM
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Oct 11, 2016

The F5 unit has a configuration database, you can see and change multiple settings there.

 

The 250 look to match the db key tm.maxrejectrate. There is also tm.maxicmprate that defaults to 100.

 

To list a key: tmsh list sys db tm.maxrejectrate

 

This solution has more information: https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14813.htmlconfigreject

 

Also: https://support.f5.com/kb/en-us/solutions/public/7000/100/sol7113.html

 

Anyway, this should be for ICMP errors. Based in Cisco documentation "Each exclamation point indicates receipt of a reply.", so I assume echo reply.