Forum Discussion

Alexis_Gruet_22's avatar
Alexis_Gruet_22
Icon for Nimbostratus rankNimbostratus
Sep 14, 2016

Linerate 2.6.1 / ICMP Echo

Just finished as a lab test, a basic LB scenario

 

1 Public IP ( 46.128.xx.xx ) as VIP --> VS --> RealServer (10.1.0.100 )

 

This is working however, the Public IP is not reachable through ICMP. My question is how to force ( if supported ) the public interface to be ICMP reachable ?

 

cloud
echo reply
icmp
linerate
security
  • Alexis_Gruet_22's avatar
    Alexis_Gruet_22
    Icon for Nimbostratus rankNimbostratus
    Sep 14, 2016

    Thanks for replying quickly!

     

    Yes i already read this paragraph, but i didn't found in the doc, the way to turn Linerate in gateway mode.. Please could you kindly give a short answer ?

     

  • Johnny_Schmidt_'s avatar
    Johnny_Schmidt_
    Historic F5 Account
    Sep 14, 2016

    This is a feature that prevents answering ICMP ping from hosts on different network segments. See the "LineRate Manager" docs at https://support.f5.com/kb/en-us/products/linerate/manuals/product/linerate-manager-2-6-1.html (this is a PDF download at the top of the page). Look under the section "Security" in the sub-headding "ICMP" for details.

     

    The short answer is, configure the LROS system to be in "gateway mode" to perform IP forwarding, which will then allow LROS to reply to ICMP ping when the source address is on a separate IP network segment (subnet) from the IP address on LROS you are attempting to ping.