Forum Discussion
mcseccna_119336
Nimbostratus
NimbostratusUDP 1026 port unreachable and dual active
I recently update two old box to 9.4.8 after updating. found dual active! I tcpdump packet from HA interface,found port unreachable from both side of 1600. from netstat -na udp 0 0 ::ffff:1.1.1.6:1026 ::ffff:1.1.1.5:1026 ESTABLISHED I found 1026 port was established, why reply a icmp port unreachable? I confuse, is there any possible ,there are some wrong in the F5 bigip 1600 internal to udp port 1026. thank you! Tom
2 Replies
nic1Did you find resolution to this issue? We are also seeing icmp port unreachable for udp 1026 and encountered a dual active scenario for where a heartbeat should have saved us but does not appear to be properly established.
IanBEmployee
Ensure that port lockdown is not set to none, or that you've not removed 'cap' (numerically 1026) from the default-allow list:
SOL13250: Overview of port lockdown behavior (10.x - 11.x)
