vserver ALWAYS replies to ping

Hi Alfonso,

Take a look at this related post (Click here). The gist is that you cannot disable ICMP for an IP address because you could have multiple virtual servers defined on the same virtual address. For a TCP virtual server, you cannot even prevent a three way handshake based on the virtual server's pool state. You can configure LTM to reset an existing TCP handshake if the pool is down using an iRule like this:

 
 when CLIENT_ACCEPTED { 
  
     Send a reset if the default pool doesn't have any active members 
    if { [active_members [LB::server pool]] == 0 } { 
       log local0. "No nodes available for [LB::server pool].\ 
          Resetting client connection: [IP::client_addr][TCP::client_port] -> [IP::local_addr]:[TCP::local_port]" 
       reject 
    } 
 } 
 

Aaron