For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Christopher_Noy's avatar
Christopher_Noy
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015
Solved

Virtual Server and ICMP/PING

Hello,   I was pre-configuring a couple of virtual servers in advance of a migration from our Cisco ACE 4710's to our new F5 4200Vs when I discovered that even if I mark the virtual server as "dis...
application delivery
availability
cisco
deployment
LTM
  • shaggy_121467's avatar
    shaggy_121467
    Feb 23, 2015

    navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.

     

    virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP

     

shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Feb 23, 2015

navigate to local traffic | virtual servers | virtual address list. each virtual address has an arp and echo-reply setting - disable both.

 

virtual servers are IP:Port, so disabling a VS alone does nothing to VIP availability since other VS configs could be using that same VIP

 

  • Christopher_Noy's avatar
    Christopher_Noy
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2015
    Thanks for the response. So I have to create the virtual server first, then disable the arp/echo-reply on the virtual address? Sounds like there would be a (short) interval between creation and disabling arp that it would respond, so I couldn't create these in advance. Bummer. Well, this is good info. Thanks again for the answer.