For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

immu's avatar
immu
Icon for Cirrus rankCirrus
Sep 06, 2017

Offline (Enabled) - The children pool member(s) are down

Hi,   I have done configured VIP along with 2 pool members but the problem is I ma not able to ping the VIP from the F5...   I can see the nodes to be up but in members status it is showing me ...
LTM
security
thistuffjuice_3's avatar
thistuffjuice_3
Icon for Altostratus rankAltostratus
Sep 06, 2017

Hi Imran

 

Out of both monitor's, which are currently UP & Enabled (green circle)? Unavailable down will be showing as a red diamond.

 

  • LTM Node monitor's (L3 monitor) Are the nodes using the node default, or node specific?

     

  • LTM Pool-member monitor's (L4 application/service monitors)

     

From the below, it sounds like your pool-member monitor is down. What kind of monitor do you have applied to the pool? If so, do you have a route to the back-end pool-member? (If your node is up, I would suggest so)

 

Which is therefore likely that the server is not listening or open on the pool-member service port you have applied? My first suggestion would be to perform some telnet test's from the LTM on the service port you have specified on the pool-member, and a capture on the destination back-end servers to see if traffic is hitting the pool-member's and any relevant OS based firewall logs.

 

I would also suggest you confirm if your VIP is using SNAT (Either a pool or auto-nat), and that your pool-member (servers) have a route back to this source address if the client via the F5 and potentially not out a different default-gateway.

 

Hope this helps! Kind regards