For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Routing Domains, HA and wrong ARP entries

Hi,   I am new to F5 so sorry for any obvious questions. My setup is based on two LTM VE in Active-Passive config using 1.5.1 HF4. Two Routing Domains configured: default (ID0) with internal, exte...
application delivery
design
LTM
network
TMOS
virtualization
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

That is effect of pinging ip that should reach host in DMZ VLAN only

 

10.128.50.10%1 10.128.50.10%1 00:50:56:a9:08:24 /Common/DMZ 186 resolved 10.128.50.11%1 10.128.50.11%1 00:50:56:a9:08:24 /Common/DMZ 262 resolved 10.128.50.12%1 10.128.50.12%1 00:50:56:a9:25:75 /Common/DMZ 270 resolved

 

As you can see for some reason ip 10 and 11 are replied by host in internal VLAN but 12 by correct host in DMZ vlan. It seems to be a bit random. Sometimes 11 is replied by host in DMZ sometimes by host in internal. For some strange reason ip 12 is always replied by host in DMZ even if same IP is assigned to hosts in both VLANS. I can see in wireshark that indeed ping for 10 and 11 is send to host in internal VLAN.

 

Piotr

 

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014
As you can see all is working correct for 10.128.50.12 10.128.50.12 10.128.50.12 00:50:56:a9:08:24 /Common/internal 272 resolved 10.128.50.12%1 10.128.50.12%1 00:50:56:a9:25:75 /Common/DMZ 18 resolved