For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Neil_Marks's avatar
Neil_Marks
Icon for Nimbostratus rankNimbostratus
Dec 06, 2016

Virtual Server IP address on F5 not accessible outside of the F5 itself???

I have two Lab F5 running in AWS as prototype lab. The 1st F5 which I am calling the external F5 currently can route http to an inner web server which goes through to a app server and I have this set...
application delivery
aws
LTM
Neil_Marks's avatar
Neil_Marks
Icon for Nimbostratus rankNimbostratus
Dec 07, 2016

Ok - so further investigation has highlighted where the problem lies I think. The web server has a n/w interface on the 10.0.6.x subnet... and this web server has some additional virtual ip addresses which it manages. What appears to have occurred is that at ARP layer - the servers existing servers on the 10.0.6.x subnet attempt to route traffic for the 10.0.6.224 address to the n/w interface on the web server - this is seen by looking at the ARP output on each of the servers... only the internal F5 shows the mac address of the interface on the F5???

 

Next question is to be understand why this scenario is happening...