Forum Discussion
Christopher_Noy
Nimbostratus
NimbostratusVirtual Server and ICMP/PING
Hello,
I was pre-configuring a couple of virtual servers in advance of a migration from our Cisco ACE 4710's to our new F5 4200Vs when I discovered that even if I mark the virtual server as "disabled" it still responds to pings on that IP address. I had to delete them (and kill the arp cache on one of our switches) to restore functionality for the vips on the ACE. Is there a way to disable ICMP/PING responses for a virtual server when it is marked as "disabled"? Thanks.
navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.
virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP
shaggynavigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.
virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP
Christopher_NoyThanks for the response. So I have to create the virtual server first, then disable the arp/echo-reply on the virtual address? Sounds like there would be a (short) interval between creation and disabling arp that it would respond, so I couldn't create these in advance. Bummer. Well, this is good info. Thanks again for the answer.
shaggy_121467Cumulonimbus
navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.
virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP
- Christopher_NoyThanks for the response. So I have to create the virtual server first, then disable the arp/echo-reply on the virtual address? Sounds like there would be a (short) interval between creation and disabling arp that it would respond, so I couldn't create these in advance. Bummer. Well, this is good info. Thanks again for the answer.
uniAltostratus
Use tmsh to create the address first:
tmsh create ltm virtual-address 10.1.1.25 arp disabled icmp-echo disabled- HWLU_191503
Built-in feature starting v11.5.1 Controlling Responses to ICMP Echo Requests https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-5-1/48.print.html