For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Mar 25, 2015
Solved

Servers using LTM as its gateway can ping but can't connect on 443

I have a situation where a group of servers that use LTM as their gateway can successfully ping and tracert to servers in a totally different subnet, but are unable to connect on port 443.   Speci...
application delivery
design
LTM
  • Jason_40733's avatar
    Jason_40733
    Mar 25, 2015

    I keep thinking asymmetric routing... but your ports match up. a tcpdump on the F5 may give you more info where you could see all the MAC addresses.

     

Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Mar 26, 2015

Thanks everyone for the replies. Based on information from the firewall showing incomplete sessions but no ACL/policy issues, I think this a routing or asymmetric routing problem. This was mentioned earlier. How can I check to determine this? Get simultaneous packet captures on the LTM and the servers on 172.22.0.100 and 10.54.13.101 while trying to open https://172.22.0.100 from 10.54.13.101 ?