For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Jun 14, 2011

SNAT Automap, INET Port Exhaustion, and Self-IPs

We have a number of heavily used VIPs which use the SNAT Automap feature. And every once in a while the LTM outputs this log entry:         01010201:2: Inet port exhaustion on (floating_...
config
design
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Jun 14, 2011
How did you come to this conclusion:

 

 

On a unit in a redundant pair, the static (non-floating) self IPs cannot be used to source traffic.

 

 

 

I found this on page 15-7 of the 10.1 LTM config guide:

 

 

When automatically choosing a self IP address to map to the specified original IP address, the system gives preference to floating self IP addresses over static (non-floating) self IP addresses. This prevents any interruption in service when failover occurs. Note that if no floating self IP address is currently assigned to the egress VLAN, the system uses the floating IP address of a non-egress VLAN instead.

 

 

 

The way I read this, "gives preference to floating self IP addresses over static (non-floating) self IP addresses" does not mean static addresses are excluded - just that they are not preferred. Is there some other document which states static addresses can't be used at all?