Forum Discussion
VIP & Pool member are in same vlan
Hi All,
We have created Virtual server on Port 22 whose pool member is in same Vlan. when client does telnet to V/S on port 22 It works but when he tries for sftp access, It doesn't work. We have setup snat automap on that V/S. Is there any other configuration required for this V/S to make sftp work?
5 Replies
- can you provide the current virtual server config? what exactly is sftp in your case? is file copy over ssh? how exactly doesn't it work, do you get an error or just no connection?
- Jinshu
Cirrus
If your machine "AutoMap" enabled for the Virtual server the "Address Translation" will also need to be enabled while "Port Translation" disabled.
Also is that VIP configured as standard or performance L4? if you can capture the TCPDUMP, it would be east to say what is heppening to your sftp packets.
Regards, Jinshu
- Mahantesh_Bisur
Nimbostratus
Hi, Thanks for the reply.Yes, sftp used for file copy over ssh. Please see below for VIP & pool configuration list ltm virtual abc-22 ltm virtual abc-22 { destination 10.41.48.x:ssh ip-protocol tcp mask 255.255.255.255 pool xyz-22 profiles { tcp-lan-optimized { } } source 0.0.0.0/0 source-address-translation { type automap } vs-index 111 } list ltm pool xyz-22 ltm pool xyz-22 { load-balancing-mode predictive-member members { xyz:ssh { address 10.41.48.x session monitor-enabled state up } } monitor mon1 - Mahantesh_Bisur
Nimbostratus
VIP is configured as Standard. Address translation in Pool configuration is already enabled. But I do not see any option to disable port translation.
- Jinshu
Cirrus
its there under VIP advance configuration.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com