Forum Discussion

Nimbostratus

Sep 13, 2016

Virtual F5 LTM configuration in DMZ and cannot ping DMZ/Default gateway.

My F5 is in DMZ, and I have test server put in the DMZ. There are no firewalls before and after the test server. I logged on to the test server and hit the IP address. I cannot get this resolved. ...

Nimbostratus

Sep 13, 2016

From the test server I cannot ping the VIP. Destination not reachable. From the F5 console I can ping the test server. I cannot ping DMZ or even default gateway.

Can I add additional virtual interfaces . Should I create more Vlan? Or Trunks.... let me know your thoughts.

KeesvandenBos
MVP
Sep 14, 2016
Your ping test from the BIG-IP console is done from the self-ip of the BIG-IP. Are you able to ping the self-ip of the BIG-IP from your test server?

And what are the entries in the arp table on the testserver, firewall and BIG-IP?
SP_266134
Nimbostratus
Sep 14, 2016
I cannot ping the external self IP, internal self IP can be pinged. Cannot ping the DMZ. Internal interface can be pinged and internal vips are working fine. External interface has as issues.
SP_266134
Nimbostratus
Sep 14, 2016
ARP table in F5 Static is empty. Dynamic list has entries for all internal traffic and they are resolved. Should i create an entry to ARP table static for the external network interface.
KeesvandenBos
MVP
Sep 14, 2016
You don,t need to create an arp entry.

Can you post a simple drawing of your network set-up?