For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joseph_Johnson_'s avatar
Joseph_Johnson_
Icon for Nimbostratus rankNimbostratus
Aug 07, 2014

Troubleshooting F5 LTM vip and pool members

Hi,   Im trying to find out is there a way i can test my VIP/Pool configuration with maybe tcp dump or other application. We currently have a VIP on the ltm in the dmz with associated pool member...
application delivery
availability
cloud
design
LTM
TMSH
vmware
Sudheer_Nair_88's avatar
Sudheer_Nair_88
Icon for Cirrus rankCirrus
Aug 08, 2014

If you are using SNAT, the packet travelling thru the firewall towards node will have the SNAT ip as source rather than your self IP (unless you use snat automap). This shouldn't affect the monitors though :(

 

Best bet would be to setup packet capture on the F5 and server and see if packets reaches the server.

 

Simple tcpdump command below: tcpdump -nni 0.0 host [node ip]

 

Install wireshark/netmon on the server and see if traffic reaches the server and if it returns packets.

 

If the packet is lost in journey, you might want to inspect the firewall, and capture packets there as well.