Forum Discussion

parvez_70211's avatar
parvez_70211
Icon for Nimbostratus rankNimbostratus
Jan 14, 2015

unable to telnet to the VIP but ping work

Hi,   I have an issue where we a VIP configured to listen on port 443. VIP status is up. We are able to ping the VIP but telnet to port 443 isnt working. Did a packet capture and found syn packet ...
application delivery
availability
deployment
LTM
TMSH
parvez_70211's avatar
parvez_70211
Icon for Nimbostratus rankNimbostratus
Jan 17, 2015

Nathan/WLB, Thanks for your response.

 

I don't think there is an issue with the routing here because I'm trying to telnet to the VIP from the same load balancer and the port does not open.

 

Also when I tried telnet VIP from outside machine with TCPdump enabled on the LB shows only SYN packets coming in and seeing no SYN-ACK or any packets leaving out of the interface.

 

I had one more query VIP is listening on port 443 and pool members on 80 and translation is enabled. I found Client SSL cert to be missing.I know this is an issue but telnet to VIP on port 443 from the same LTM should show open. correct? NOTE: VIP status is available. No issues with interface.

 

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Jan 19, 2015
    Whatever the SSL configuration, you should still see the 3 way handshake first, before SSL/TLS negotiation can start.