Forum Discussion

Carlos_123412's avatar
Carlos_123412
Icon for Nimbostratus rankNimbostratus
Oct 23, 2015

Strange SNAT IP address behaviour

Hello everyone,   Recently we've discovered a weird behaviour on our BIG-IP system. We are currently running version 11.5.1 on an 8950 Active/Passive HA pair.   We have detected that a couple o...
application delivery
LTM
management
network
snat
snat pool
Carlos_123412's avatar
Carlos_123412
Icon for Nimbostratus rankNimbostratus
Oct 27, 2015

@crodriguez: no SNAT definitions made separately

 

@Jinshu, there are no route for x.42.86. VRRP address belongs to a FW connected to our BigIP system. This FW gives L3 connectivity for the servers generating this traffic. If I ping SNAT address I get replies.

 

I would expect F5 to reply with an ICMP port unreachable to UDP queries on non-listening ports. Even, I would expect F5 to silently drop these packets, but simply putting them back on the network using a L3 route does not make any sense to me.