27-Nov-2014 07:03
I am newbie, I am using a BIG-IP 2000 (11.6.0) version.
As a start, I want to create a simple network:
Client PC
BIG-IP System
I can ping the ext router (172.16.100.17) but when I try to ping the internet, its says destination network unreachable. I did a tracert and found that, the gateway (10.0.0.254) does not know how to forward the packets when pinging the internet. Also on the statistics, no connections are shown to the virtual server, even though I can ping the ext router. I want to access the internet through the client PC
Is there any configuration that I am missing here?
Solved! Go to Solution.
28-Nov-2014 00:19
You must disable address and port translation on your Virtual Server. These are under the "Advanced" configuration. Without that, all traffic will be forwarded to the pool member using it's IP address as the destination. Moreover, assuming you want to forward more than TCP traffic, you must change the Protocol to "*All Protocols". You almost certainly want to limit the VS to just your internal VLAN (change "VLAN and Tunnel Traffic" to "Enabled on..." and move the internal VLAN to the "Selected" box).
Incidentally, this can be achieved a different way. If you set the BIG-IP default route to 172.16.100.17, you could then use a "Forwarding (IP)" Virtual Server type, which uses the BIG-IP route table to forward traffic.
12-May-2016 01:49
28-Nov-2014 00:19
You must disable address and port translation on your Virtual Server. These are under the "Advanced" configuration. Without that, all traffic will be forwarded to the pool member using it's IP address as the destination. Moreover, assuming you want to forward more than TCP traffic, you must change the Protocol to "*All Protocols". You almost certainly want to limit the VS to just your internal VLAN (change "VLAN and Tunnel Traffic" to "Enabled on..." and move the internal VLAN to the "Selected" box).
Incidentally, this can be achieved a different way. If you set the BIG-IP default route to 172.16.100.17, you could then use a "Forwarding (IP)" Virtual Server type, which uses the BIG-IP route table to forward traffic.
28-Nov-2014 04:25
Thank for the response.
However, I tried all the suggestions mentioned here.
None of them are working. Should I be able to ping the Self IPs? How can I troubleshoot to see where the problem is? Tracert shows that the default gateway set in the test PC (self IP address on the internal VLAN - 10.0.0.254) does not know where to forward packets destined for a network that is not directly connected to the system. i.e. does not forward the traffic to the default gateway through the virtual server and the pool members (destination net unreachable).
28-Nov-2014 04:28
have you tried snat automap under virtual server configuration?
28-Nov-2014 04:43
Thank you for the help.
I was able to sort out the problem, well at least its working now. I can ping google from the test PC.
Virtual server: source 0.0.0.0/0, destination: 0.0.0.0. Source address translation (auto map).
Port and address translation (disable).
Re-created a default gateway route to use the pool that contains the external router. (Destination and Mask: 0.0.0.0).
I am not sure why it was not working, but it is working now.
THANKS
16-Jan-2023 12:57
16-Jan-2023 15:39
Also @Linda_01_162621 if "ip address translation" is disabled, the pool will be useful if the virtual server and pool memeber have the same ip address. so in your case it's not necessary to create a pool for ex router.
You need just configure a default route with the gateway (172.16.100.17).
29-Nov-2014 01:37
Since you enabled automap SNAT, then when the traffic egresses the BIG-IP (toward the router), the BIG-IP changes the source address from that of the client to a self IP (of the BIG-IP) on the egress VLAN. This suggests that the router either does not have a route back to the client netblock, or that its route to the client netblock is not forwarded through the BIG-IP. In this case, the application of automap SNAT would make traffic work because the router and the BIG-IP share IP addresses in a common netblock on a common VLAN. Naturally, the router will have a route to a directly connected network.
01-Jul-2015
17:04
- last edited on
07-Feb-2023
03:34
by
LiefZimmerman
Hi
I have a similar issue, could you please helpe, I can solve it.
https://community.f5.com/t5/technical-forum/destination-net-unreachable/m-p/137356
Jessy
12-May-2016 01:49
12-Mar-2018 10:15
Hey thanks a lot bro. Changing the vmnet0 solved the problem for me. i was not able to access internet using the default gateway (10.0.0.1) virtual server but now i can. Just follow the steps: Vmware>Edit>Virtual Network Adapter>vmnet0.
Thanks again