Forum Discussion
Pedro_Haoa_7122
Nov 07, 2011Historic F5 Account
Network Forwarding VS and traffic
Hi,is correct to thinkthat theNetwork Forwarding VScan solvethis requirement,and if so, what parameters should I look?
This is my first post and i'm having trouble with a network forwarding VS configuration.
This is the scenario.
ServerTSM ServerMonitor
192.168.8.180/25 192.168.8.190/25
| |
|
VRRP Gateway
192.168.8.250
|
|
ExtVLAN
192.168.8.240/25
LTM
192.168.9.120/26
IntVLAN
|
|
TSMClient
192.168.9.70/26
There are other VSs configured, but not affect this traffic.
LTM Default Gateway: 192.168.8.250
TSMClient Default Gateway: 192.168.9.120
Default routing behavior.
I need to pass traffic from the external VLAN to the internal VLAN for Backup & Restore traffic (IBM TSM) and monitoring (SNMP) - Administrative Purpose (Telnet, SSH).
So i decided based on F5 literature, that a Network Forwarding VS was the most suitable solution, but it did not work.
So i did capture traffic to see what was happening. My surprise was that ICMP traffic came and went without any problems on the external VLAN servers, but for some reason, snmp, ssh, telnet traffic, coming through the external VLAN to LTM, exit to the internal VLAN, but did not return any response.
Thanks for all.
- nitassEmployeefor some reason, snmp, ssh, telnet traffic, coming through the external VLAN to LTM, exit to the internal VLAN, but did not return any response.was it syn packet? what bigip platform are you using? if it has pva chip, pva has to be disabled before.
- Pedro_HaoaRet. EmployeeYes, there is no SYN-ACK from the TSM Client.
- nitassEmployeeI'll try with PVA disabled.3600 platform does not have pva chip.
- Pedro_HaoaRet. EmployeeI don't know. I'm afraid that i can't access to the client machine until tomorrow.
- nitassEmployeewhat tcpdump command did you use?
- Pedro_HaoaRet. EmployeeHi,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects