For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mahantesh_Bisur's avatar
Mahantesh_Bisur
Icon for Nimbostratus rankNimbostratus
Sep 08, 2015

VIP & Pool member are in same vlan

Hi All,

 

We have created Virtual server on Port 22 whose pool member is in same Vlan. when client does telnet to V/S on port 22 It works but when he tries for sftp access, It doesn't work. We have setup snat automap on that V/S. Is there any other configuration required for this V/S to make sftp work?

 

5 Replies

  • can you provide the current virtual server config? what exactly is sftp in your case? is file copy over ssh? how exactly doesn't it work, do you get an error or just no connection?
  • If your machine "AutoMap" enabled for the Virtual server the "Address Translation" will also need to be enabled while "Port Translation" disabled.

     

    Also is that VIP configured as standard or performance L4? if you can capture the TCPDUMP, it would be east to say what is heppening to your sftp packets.

     

    Regards, Jinshu

     

  • Hi, Thanks for the reply.Yes, sftp used for file copy over ssh. Please see below for VIP & pool configuration list ltm virtual abc-22 ltm virtual abc-22 { destination 10.41.48.x:ssh ip-protocol tcp mask 255.255.255.255 pool xyz-22 profiles { tcp-lan-optimized { } } source 0.0.0.0/0 source-address-translation { type automap } vs-index 111 } list ltm pool xyz-22 ltm pool xyz-22 { load-balancing-mode predictive-member members { xyz:ssh { address 10.41.48.x session monitor-enabled state up } } monitor mon1
  • VIP is configured as Standard. Address translation in Pool configuration is already enabled. But I do not see any option to disable port translation.