For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jonathanpe_4611's avatar
Jonathanpe_4611
Icon for Nimbostratus rankNimbostratus
Sep 25, 2012

Monitor and ICMP response

Hi All new to F5 and this forum so if this has been asked before I'm sorry but I did search.

 

I have a situation where I am using an F5 to monitor 3 variables in my Data center. Internet connection, internal connection and also a Bluecoat Proxy health. This then has a VC Pool associated with these monitors, but no actual traffic is passing this VC Pool, it is just being pinged by a router for an IP SLA measure.

 

What I would like to do is for the F5 to stop responding to ICMP on the VC Pool address should any of the monitors go down. I can see the monitor go red (Yes I am using the Gui at the moment;) but I can still ping the VC.

 

Any help or direction would be of great help.

 

Thanks

 

basic
getting started
new to f5

13 Replies

Show More
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Sep 28, 2012
    Just to clarify: It's sending a RST in response to the IP-SLA monitoring device's initial SYN/ACK even when the VS is up? I take it you've applied a TCP profile, not a UDP one and applied the default FastL4 profile? I'm testing this on v10.1 VE and even PING isn't working when the VS is down funnily enough.
  • Jonathanpe_4611's avatar
    Jonathanpe_4611
    Icon for Nimbostratus rankNimbostratus
    Sep 28, 2012
    We are on Ver 9.3.1 so may be a feature on ver 10? no chance of an upgrade in the short term;)

     

     

    I am also using TCP with the Client profile of the FastL4 applied.
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Sep 28, 2012
    Sorry but please clarify: It's sending a RST in response to the IP-SLA monitoring device's initial SYN/ACK even when the VS is up?