For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ZAHIDHASEEB's avatar
ZAHIDHASEEB
Icon for Nimbostratus rankNimbostratus
Nov 13, 2019

unable to access http service

1- Node created, Pool created, Virtual server created

2- F5 load balancer is able to ping both VLANS (Internal & External) machines and self IPs are assigned on both VLANS

3- External machine is able to ping Virtual Server

4- internal machine hosted a simple web and access locally

5 Firewall is disabled on internal and external VLANS machines

6- I am even able to telnet VS

 

I am not able to access hosted web from external machine

 

 

15 Replies

  • Lidev's avatar
    Lidev
    Icon for Nacreous rankNacreous
    Nov 13, 2019

    Hello,

     

    Have you assigned an HTTP Profile (Client) to the Virtual Server?

  • ZAHIDHASEEB's avatar
    ZAHIDHASEEB
    Icon for Nimbostratus rankNimbostratus
    Nov 13, 2019

    I tried to assigned HTTP Profile (Client) to the Virtual Server as http & http-transparent as well one by on, but same issue

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      Nov 13, 2019

      Can you show us the configuration of the virtual server?

      tmsh list ltm virtual {virtual-server name}
  • ZAHIDHASEEB's avatar
    ZAHIDHASEEB
    Icon for Nimbostratus rankNimbostratus
    Nov 14, 2019

    Yes I have tried . See below result. I did ping will response but tcpdump showing nothing also lynx VS IP but failed

    • Islam_Nadim1's avatar
      Islam_Nadim1
      Icon for Cirrus rankCirrus
      Nov 14, 2019

      If I understand from the images you shared, you are accessing from a Big IP to a resource behind another Big IP.

      Please perform a traceroute from BIGIPTEST1 to the VIP on F5 .. Traffic is not reaching F5 which could mean that there is another device on the network is intercepting the traffic.

       

      I see also you are using ESXi, can you confirm the network adapters on it as well?

      • ZAHIDHASEEB's avatar
        ZAHIDHASEEB
        Icon for Nimbostratus rankNimbostratus
        Nov 14, 2019

        I am able to ping each other. ping result is shown above

  • ZAHIDHASEEB's avatar
    ZAHIDHASEEB
    Icon for Nimbostratus rankNimbostratus
    Nov 14, 2019

    All configurations followed by the below link

    https://f5-agility-labs-adc.readthedocs.io/en/latest/class3/module2/lab2.html

     

    Attached is the bigip.conf details in zip.

     

     

  • ZAHIDHASEEB's avatar
    ZAHIDHASEEB
    Icon for Nimbostratus rankNimbostratus
    Nov 14, 2019

    My problem is resolved. Actually I created a new environment according to the above f5 link (dor by dot) but forgot to disabled the firewalld service on backend servers.

     

    Thanks for all who commented on issue