BIG IP pings all addresses.

Forums Technical Forums
, , ,
1

Hello, I have configured my F5 BIG-IP, all work fine but my internal user can ping all adresses. how can i resolve this issue ?

2

Please read this article.

Controlling the BIG-IP ARP and ICMP echo response behavior for a virtual address.

3

Hi,

for disabling icmp ping in your vs you can follow this procedure:

Be carefull don’t disable arp because your VS will not be reacheabl. so follow this procedure:

  • Log in to the Traffic Management Shell (tmsh) by typing the following command:
tmsh
  • Configure the desired ICMP Echo setting for a virtual address by using the following command syntax:
modify ltm virtual-address  icmp-echo disabled
  • Save the change by typing the following command:
save /sys config

You can of course do it using GUI:

  • Virtual address
  • selecte your IP /Virtual address* then uncheck icmp-echo

For prevent icmp/ping in your selfIP/floatin/Snat POOl, you can use Packet Filter:

regards,