For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mahammad_381074's avatar
Mahammad_381074
Icon for Nimbostratus rankNimbostratus
Jan 11, 2019

not able to access internal network(VIP) from external network in BIG IP

Hi I am new for F5 and i am learing, I had created F5 lab in Wmware workstation, I am not able to access internal network(VIP) from external network, I did changes SNAT to auto still i am facing sam...
BIG-IP
security
RaghavendraSY's avatar
RaghavendraSY
Icon for Altostratus rankAltostratus
Jan 14, 2019
  1. tmsh show sys self-ip -show self IP’s
  2. tmsh show net interfaces
  3. tmsh list /net vlan all-properties

Please provide output for the above commands.

 

Mahammad_381074's avatar
Mahammad_381074
Icon for Nimbostratus rankNimbostratus
Jan 14, 2019

Hi Raghvendra

 

Please find below logs and now external system IP also not reachable

 

[root@Imran:Active:Standalone] config tmsh list /net vlan all-properties net vlan external { app-service none auto-lasthop default cmp-hash default customer-tag none dag-round-robin disabled dag-tunnel outer description none failsafe disabled failsafe-action failover-restart-tm failsafe-timeout 90 fwd-mode l3 hardware-syncookie disabled if-index 160 interfaces { 1.1 { app-service none tag-mode none tagged } } learning enable-forward mtu 1500 partition Common sflow { poll-interval 0 poll-interval-global yes sampling-rate 0 sampling-rate-global yes } source-checking disabled syn-flood-rate-limit 1000 syncache-threshold 6000 tag 4093 } net vlan internal { app-service none auto-lasthop default cmp-hash default customer-tag none dag-round-robin disabled dag-tunnel outer description none failsafe disabled failsafe-action failover-restart-tm failsafe-timeout 90 fwd-mode l3 hardware-syncookie disabled if-index 144 interfaces { 1.2 { app-service none tag-mode none untagged } } learning enable-forward mtu 1500 partition Common sflow { poll-interval 0 poll-interval-global yes sampling-rate 0 sampling-rate-global yes } source-checking disabled syn-flood-rate-limit 1000 syncache-threshold 6000 tag 4094 } [root@Imran:Active:Standalone] config

 

[root@Imran:Active:Standalone] config tmsh show net interface

 

Net::Interface Name Status Bits Bits Pkts Pkts Drops Errs Media

 

In Out In Out

1.1 up 1.7M 131.6K 2.3K 376 0 0 10000T-FD 1.2 up 36.6M 8.6M 16.1K 15.8K 0 0 10000T-FD 1.3 uninit 0 0 0 0 0 0 none mgmt up 39.6M 79.9M 24.0K 24.9K 0 0 100TX-FD

 

[root@Imran:Active:Standalone] config

 

[root@Imran:Active:Standalone] config tmsh show sys ip-address

 

Sys::IP Address

 

Entry Component Object-ID

default net route external_default_gateway 9.1.1.145 cm device Imran.com 10.10.1.11 ltm node Web-11-Green 10.10.1.11 ltm pool Our-HTTP-Pool 10.10.1.12 ltm node Web-12-White 10.10.1.12 ltm pool Our-HTTP-Pool 10.10.1.13 ltm node Web-33-Red 10.10.1.13 ltm pool Our-HTTP-Pool 10.10.1.145 cm device Imran.com 192.168.1.200 ltm virtual-address 192.168.1.200

 

[root@Imran:Active:Standalone] config