Forum Discussion

dotpro_38691's avatar
dotpro_38691
Icon for Nimbostratus rankNimbostratus
Oct 21, 2009

Not able to access the internet

 

 

I deployed a deploying LTM 3400 with 9.4.7 and its working fine as far as load balancing is concerned. I can reach all services from outside.

 

 

However, I am not able to ping anything on the outside nor can I browse websites on the internet from internal servers.

 

 

The unit is behind a cisco ASA 5510:

 

 

Internet > Router > ASA5510 > LTM > Local Network

 

 

 

I've looking through the configuration on both devices and I can't seem to pin point the problem...

 

 

 

thanks for the help!
config
design

6 Replies

  • dotpro_38691's avatar
    dotpro_38691
    Icon for Nimbostratus rankNimbostratus
    Oct 22, 2009
    Hi CB,

     

     

    Thanks. I did not but now that I did, it still doesn't forward internet traffic from inside(servers) to out:

     

     

    Screenshot: http://img34.imageshack.us/i/forwardvirtualserver.png/

     

     

    Do I need to do anything else besides setting up a forwarding virtual server?

     

     

    Thanks
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 22, 2009
    You should be able to upload images to DC to display them inline.

     

     

    You have the VIP enabled on VLAN1. Is that the VLAN that the internal servers would be entering LTM on? If not, try swapping the VIP so it's enabled on VLAN2. For a forwarding VIP, you'll also need to ensure there is routing in place. You can create routes in the GUI under Network | Routes.

     

     

    Aaron
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 22, 2009
    Can you set a default gateway using the IP address of the next hop and then enable the VIP on all VLANs to test? If that works, then you can enable the VIP only on the egress VLAN for the internal clients.

     

     

    Aaron
  • dotpro_38691's avatar
    dotpro_38691
    Icon for Nimbostratus rankNimbostratus
    Oct 22, 2009
    Thanks Aaron.

     

     

    I tried that as well, it doesn't work.

     

     

    I just realized, SNAT entry was missing... entered that and its working now. :-\