For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Angelo's avatar
Angelo
Icon for Nimbostratus rankNimbostratus
Dec 11, 2012

Radius configuration

Hi   I need to load balance 5 radius servers through the F5. I setup the VIP but for some reason it's not working. this is my virtual server...   tm virtual vs_cisco_ise {   destination...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Dec 13, 2012
OK, this output would suggest the traffic is indeed leaving the BIG-IP and heading towards the Pool Members, just nothing is coming back.

 

 

I take it the 10.211.184.2 address is the device's Self IP and what's being used for SNAT. This address isn't on the same VLAN/subnet as the real servers so there must be some L3 routing involved here. That being the case I'd suggest you check any devices involved in routing the traffic each way (particularly back towards the F5). The route back to the SNAT address must go via the BIG-IP. Please also check the server's routing tables/configuration - this is the most likely location of the issue.

 

 

Either way, it's not the BIG-IP that's at fault here.