For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

quattroginger's avatar
quattroginger
Icon for Nimbostratus rankNimbostratus
Nov 26, 2019

npath troubleshooting

i have npath configured where the VIP, both pool members and self IP are within the same subnet. i believe i am seeing what i should through a tcpdump. i see the SYN from the client, and the ACK from...
application delivery
BIG-IP
LTM
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Nov 26, 2019

Is your virtual a fastl4 virtual with no SNAT with a profile that allows Loose Initiation and Loose Close?

quattroginger's avatar
quattroginger
Icon for Nimbostratus rankNimbostratus
Nov 27, 2019

i used the iapp to build it out but it looks like Loose Close is enabled but Loose Initiation is not.

  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Nov 27, 2019

    If it is truly an npath configuration, you will need Loose Initiation, as the BigIP will not see the [SYN,ACK] from the pool member to complete the connection initiation.

  • quattroginger's avatar
    quattroginger
    Icon for Nimbostratus rankNimbostratus
    Nov 27, 2019

    thanks. i will make the change and report back results.