For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Song_86464's avatar
Song_86464
Icon for Nimbostratus rankNimbostratus
Apr 02, 2009

Server can't talk to the internet

I have a nodes sitting behind the VIP's and all the servers are accessible from the internet from but none of the servers can talk to the internet, ping responses and traceroutes fail plus we have ser...
dev
devops
iControl
L4L7_53191's avatar
L4L7_53191
Icon for Nimbostratus rankNimbostratus
Apr 03, 2009
Here are a few things that will hopefully help.

 

 

-- The BigIP blocks ICMP by default. Try layer 4 tests or be sure to allow all protocols on your wildcard virtual server.

 

-- Be sure your wildcard VS is bound to the appropriate VLAN (the internal vlan in this case).

 

-- You mention that you're SNAT-ing to a public IP. Be sure you're SNAT-ing to an IP address that the BigIP owns, e.g. something on the 10.10.100 network. Your upstream devices should handle the public SNAT addresses.

 

 

-Matt