Forum Discussion
NimbostratusReturn ICMP packet only
Hi all,
We have a tricky customer who is trying to bypass the F5 for incoming ICMP requests and then have the ICMP responses from the server go back through the F5.
Apparently this is necessary for their monitoring, but I am not sure that this is possible. In fact, I think that if anything it would only be possible with an iRule. Can anyone help with trying to compose an iRule for this or is this just impossible?
Thanks, Richard
2 Replies
MrRichardThought I'd add, customer is running LTM with 11.5 on.
What_Lies_Bene1Cirrostratus
Its possible if you configure asynchronous routing or have a wildcard virtual server. Of course, asynchronous routing would apply to all traffic which I assume isn't desired so your best bet is a wildcard 'routing' VS, secured/restricted appropriately (packet filter, irule or whatever). This will allow the return ICMP packets to pass through the F5 (rather than be dropped).
Details on a routing VS here: ">https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html" target="_blank">">https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html
