Forum Discussion

rubbishking_110's avatar
rubbishking_110
Icon for Nimbostratus rankNimbostratus
Apr 02, 2008

SSH/SFTP problem!

Hi,     I am trying to pass the SSH/SFTP request to the F5 box before accessing the remote server.     But I found that the request is failed. From the packet trace, I can see the [SYN,ACK...
config
design
rubbishking_110's avatar
rubbishking_110
Icon for Nimbostratus rankNimbostratus
Apr 03, 2008
Hi

 

 

Thank for help!

 

 

10.12.1.1 is the Client while 172.17.40.21 is the server.

 

 

the VIP used in F5 is 172.17.20.11 where SNAT is used in Client server. to translate the src ip of the packet going to 172.17.20.11 is 10.12.1.1.

 

 

17:07:11.419810 IP 10.12.1.1.33517 > 172.17.20.11.telnet: S 3365755525:3365755525(0) win 5840

 

17:07:11.420746 IP 172.17.40.21.telnet > 10.12.1.1.33517: S 3197962301:3197962301(0) ack 3365755526 win 5792

 

17:07:14.419010 IP 10.12.1.1.33517 > 172.17.20.11.telnet: S 3365755525:3365755525(0) win 5840

 

17:07:14.419683 IP 172.17.40.21.telnet > 10.12.1.1.33517: S 3197962301:3197962301(0) ack 3365755526 win 5792

 

17:07:14.587769 IP 172.17.40.21.telnet > 10.12.1.1.33517: S 3197962301:3197962301(0) ack 3365755526 win 5792

 

17:07:20.586801 IP 172.17.40.21.telnet > 10.12.1.1.33517: S 3197962301:3197962301(0) ack 3365755526 win 5792

 

 

-rk