Forum Discussion

Christopher_Noy's avatar
Christopher_Noy
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

Virtual Server and ICMP/PING

Hello,

 

I was pre-configuring a couple of virtual servers in advance of a migration from our Cisco ACE 4710's to our new F5 4200Vs when I discovered that even if I mark the virtual server as "disabled" it still responds to pings on that IP address. I had to delete them (and kill the arp cache on one of our switches) to restore functionality for the vips on the ACE. Is there a way to disable ICMP/PING responses for a virtual server when it is marked as "disabled"? Thanks.

 

application delivery
availability
cisco
deployment
LTM
  • shaggy_121467's avatar
    shaggy_121467
    Feb 23, 2015

    navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.

     

    virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP

     

  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2015

    navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.

     

    virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP

     

    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 23, 2015
      Thanks for the response. So I have to create the virtual server first, then disable the arp/echo-reply on the virtual address? Sounds like there would be a (short) interval between creation and disabling arp that it would respond, so I couldn't create these in advance. Bummer. Well, this is good info. Thanks again for the answer.
  • shaggy_121467's avatar
    shaggy_121467
    Icon for Cumulonimbus rankCumulonimbus
    Feb 23, 2015

    navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.

     

    virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP

     

    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 23, 2015
      Thanks for the response. So I have to create the virtual server first, then disable the arp/echo-reply on the virtual address? Sounds like there would be a (short) interval between creation and disabling arp that it would respond, so I couldn't create these in advance. Bummer. Well, this is good info. Thanks again for the answer.
  • uni's avatar
    uni
    Icon for Altostratus rankAltostratus
    Feb 23, 2015

    Use tmsh to create the address first:

     tmsh create ltm virtual-address 10.1.1.25 arp disabled icmp-echo disabled