Network Virtual Servers

Thanks for the response. The reason for the network virtual is that I'm using it with an irule and data group to pass through traffic to a set of servers without any load balancing. Don't ask why this traffic needs to go through the LTM in the first place - let's just call it for "historical reasons"!

 

 

The odd part is that the network virtual works fine when accessed from hosts in the inside network (e.g. client - router - network virtual) but not from the outside (client - firewall - network virtual). Both the firewall and router have a static route for the network virtual range pointing to the outside or inside IP of the LTM respectively. The only obvious difference is that the firewall does address translation as well as routing, but this doesn't seem to be an issue in itself as a host virtual I set up on the LTM works just fine through the firewall - it's just the network virtual that doesn't work.

 

 

I'm still hung up on why the firewall is trying to arp for the address of the host in the network virtual it is trying to talk to - since the firewall has a static route for the network virtual it seems that it would just route that traffic to the LTM. The failed arp request makes it look like the firewall thinks the network virtual is on a directly connected L2 network which obviously it isn't.

 

 

If anyone has had success with this configuration (sending traffic to a network virtual through a firewall - in my case Cisco ASA) please let me know!

 

 

Cheers,

 

 

Simon.