Forum Discussion

Alexis_Gruet_22's avatar
Alexis_Gruet_22
Icon for Nimbostratus rankNimbostratus
Sep 14, 2016

Linerate 2.6.1 / ICMP Echo

Just finished as a lab test, a basic LB scenario   1 Public IP ( 46.128.xx.xx ) as VIP --> VS --> RealServer (10.1.0.100 )   This is working however, the Public IP is not reachable through IC...
cloud
echo reply
icmp
linerate
security
Johnny_Schmidt_'s avatar
Johnny_Schmidt_
Historic F5 Account
Sep 14, 2016

This is a feature that prevents answering ICMP ping from hosts on different network segments. See the "LineRate Manager" docs at https://support.f5.com/kb/en-us/products/linerate/manuals/product/linerate-manager-2-6-1.html (this is a PDF download at the top of the page). Look under the section "Security" in the sub-headding "ICMP" for details.

 

The short answer is, configure the LROS system to be in "gateway mode" to perform IP forwarding, which will then allow LROS to reply to ICMP ping when the source address is on a separate IP network segment (subnet) from the IP address on LROS you are attempting to ping.