For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Paulastya_Aich_'s avatar
Paulastya_Aich_
Icon for Nimbostratus rankNimbostratus
Dec 02, 2016
Solved

Port translation not happening

We have configured a VIP to listen on port 443 and the associated pool members listening on port 7443.   Now when we are trying open the VIP IP from our browser we are getting Page cannot be displ...
application delivery
BIG-IP
LTM
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Dec 02, 2016

    Have you installed SSL certificate on Server Side? Yes. 1). Select Server side certificate as "serverssl-insecure-compatible"

     

    2). Select SNAT Automap 3). Capture TCPDUMP

     

    Please let me know if it is working

     

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Dec 02, 2016

Have you installed SSL certificate on Server Side? Yes. 1). Select Server side certificate as "serverssl-insecure-compatible"

 

2). Select SNAT Automap 3). Capture TCPDUMP

 

Please let me know if it is working

 

Paulastya_Aich_'s avatar
Paulastya_Aich_
Icon for Nimbostratus rankNimbostratus
Dec 02, 2016

We are not using any ssl offloading in f5. snat is set to automap. In the tcpdump at F5, we are getting reset packet from the realservers after completeing the 3way handshaking. The reset is coming in response of fin/ack from the snat ip to the server.