For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

iamsajjad's avatar
iamsajjad
Icon for Cirrus rankCirrus
Sep 29, 2022
Solved

Seeing "echo (ping) request -- (no response found!)" from a ACI leaf to the F5 floating ip

Hello all who believes "It's not the F5", I am having some network issue in a Bigip setup that involves a non-default route domain and 2 VRFs. Bigip is in-line that has a wildcard for any port and ...
application delivery
  • iamsajjad's avatar
    iamsajjad
    Oct 25, 2022

    I didn't do the justice just giving highlight of the architecutre in a diagram. Turns out netmask of detination for forwarding virtual server did not have /0 at the end so it was not "any"; but, was treated as /32.

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Sep 29, 2022

Hi iamsajjad, if I'm imagining the diagram properly, you have all the "back end" stuff in one route domain, correct? Even if all the routing is set up correctly, remember that a route is only the infrastructure you need to forward traffic, you still need a forwarder to allow it. You mention you have a wildcard virtual server for icmp, but does that exist in both route domains?

  • iamsajjad's avatar
    iamsajjad
    Icon for Cirrus rankCirrus
    Oct 01, 2022

    Hey JRahm 

    Spot on putting together the puzzle pieces! Yes there are Wildcard IP Forwarding VS for other protocols in 2 route domains meant for left and right VRFs.