For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Routing Domains, HA and wrong ARP entries

Hi,   I am new to F5 so sorry for any obvious questions. My setup is based on two LTM VE in Active-Passive config using 1.5.1 HF4. Two Routing Domains configured: default (ID0) with internal, exte...
application delivery
design
LTM
network
TMOS
virtualization
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Hmm, result is the same, reply from port 1.2 (internal) on bigip2

 

What is even stranger form me is how other ping is working: 1. DMZ port group on vSwitch - connetcted VM with 10.128.50.10 IP and port 1.4 (DMZ) on both bigip LTM 2. Intenral port group on vSwitch - connetcted other VM with 10.128.50.10 IP and port 1.2 (internal) on both bigip LTM

 

When issuing ping on bigip1 to 10.128.50.10%1 I am getting response from VM connected to internal VLAN even if show net arp is reporting that 10.128.50.10%1 address responded on DMZ VLAN.

 

There should be no routing between default and ID1 Route Domains so I can't figure out how ping using DMZ can be responded by host using only Internal VLAN.

 

Piotr