For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 29, 2012

VLAN Source Checking

Hi all,   VLAN source checking checks the return route to a source is through the same VLAN the packet arrived on.   What if it's not? What happens? Is the traffic dropped?  
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Oct 29, 2012
this is from past case.

 

 

VLAN source check verifies to see if BIG-IP can correctly route back a request through the same originating vlan. If BIG-IP determines that it has no way to route a request back through same VLAN, it will drop the packet. Currently, however, in case of TCP, there does exist an alternate route for the originating IP, BIG-IP will send out a RESET packet through the alternate route to indicate that destination is not reachable.