For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason_Keating's avatar
Jason_Keating
Icon for Altostratus rankAltostratus
Nov 04, 2010

Routing / SelfIP question

Hi all,

 

 

 

What determines the source address of a monitoring packet on an LTM where I have multiple VLAN's and relative SelfIP's (one per VLAN) ?

 

 

 

I assume (from my observations) it is the selfip associated with the VLAN of egress, am I right?

 

 

 

I ask because I am observing monitoring packets for four nodes on the same network egressing the same VLAN (default route) where in the case of one of the four nodes the source address is a selfip for a completely different VLAN.

 

 

 

Anyone ever seen behavior like this?

 

config
design

4 Replies

  • Jason_Keating's avatar
    Jason_Keating
    Icon for Altostratus rankAltostratus
    Nov 04, 2010

    Just got the opportunity to do a 'bigstart restart' - its now using the correct selfip.

     

    Go figure !

     

    FYI I am running

     

    BIG-IP Version 10.2.0 1755.1

     

    Hotfix HF1 Edition

     

     

     

  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Nov 05, 2010
    Should always be the self-ip of the vlan facing it. Did you by any chance add a self-ip while there were existing connections?
  • Jason_Keating's avatar
    Jason_Keating
    Icon for Altostratus rankAltostratus
    Nov 08, 2010
    It's possible I did, I assume thats problematic so will avoid it in future.

     

     

    Thanks

     

    Jason
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Nov 08, 2010
    Posted By Jason Keating on 11/08/2010 01:58 AM

     

    It's possible I did, I assume thats problematic so will avoid it in future.

     

     

    Thanks

     

    Jason

     

    Not so much problematic as a "gotcha." You'll run into this when creating new Virtual Servers, SNATs, etc. You simply need to use "b conn delete" to delete connections that were already using your old settings.