Forum Discussion

NiHo_202842's avatar
NiHo_202842
Icon for Cirrostratus rankCirrostratus
Jul 12, 2016

VIP not reachable

Hi,

I have following simple virtual server on a 11.5.1 system;

ltm virtual /ITSS/live-fisheye-temp-vs {
            destination /ITSS/2.170.236.64:8060
            ip-protocol tcp
            mask 255.255.255.255
            partition ITSS
            profiles {
                http { }
                tcp { }
            }
            rules {
                _sys_https_redirect
            }
            source 0.0.0.0/0
            source-address-translation {
                type automap
            }
            vlans {
                EXT-WIN-11
            }
            vlans-enabled
            vs-index 592
}
`
`


And the VIP:

``ltm virtual-address /ITSS/2.170.236.64 {
            address 2.170.236.64
            mask 255.255.255.255
            partition ITSS
            traffic-group traffic-group-2
            unit 2
}

ping works, but a

telnet 2.170.236.64 8060
keeps stuck at 'Trying 2.170.236.64...' I tried re-enabling the VIP and ARP status, but to no avail. I can reach other addresses in that range and on that traffic group. A
telnet 2.170.236.64 8060
on the bigip works. I see no response back to my computer or to the gateway using telnet. The gateway has the correct VLAN mac address for the listener.

Ideas?

  • I recommend running a tcpdump directly on the F5 (if possible) on that particular VLAN. any firewall or acl in between the src and F5 that could be filtering on Port 8060? any packet filters on your F5 ?