cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Incomplete HWaddress in Dynamic ARP of BIGIP F5

Pranav1
Nimbostratus
Nimbostratus

Hi all,

 

I setup a F5 on VMware and i configured below settings:

  1. Management IP : 10.208.107.8/26 with Default Gateway : 10.208.107.1
  2. created Vlan 606 and Tag it with interface 1.1 and i cross checked the MAC address of VM network adapter with F5 interface (Both matched).
  3. created self IP and assigned Vlan 606 to it with IP 10.208.108.5/26.
  4. Routes: Destination 0/0 and Gateway: 10.208.108.2
  5. Added one server in (Local traffic -> Nodes) which is showing down (IP: 10.208.108.9) (Monitoring ICMP)

 

Note: whenever i remove Self-IP, the server comes UP.

 

The problem is i am unable to get ARP of Self-IP on my FW.

Unable to ping 10.208.108.9 Node from F5

 

Network - ARP - Dynamic ARP --- Here it is showing me 10.208.108.9 & 10.208.108.2 but in MAC address section it is showing "incomplete"

 

As i am not getting ARP, Self-IP and Nodes are not able to communicate.

 

What i suspect is the Media Speed of F5 interface is 10000 , auto

Interface configured on FW with vlan 606 has BW 1000 Mbps.

I tried to change F5 interface media speed to 1000 by using "modify net interface 1.1 media 1000T-FD", it given an error:

 

"invalid property vlaue "media":"1000T-FD" The requested media is invalid, valid settings are: 10000T-FD, auto. please see SOL14556 for details.

 

Question:

  1. Is the Mismatch of media speed is causing the ARP issue ?
  2. Have i missed some configuration which is causing this ?

 

Please suggest a solution as i need to get this resolved asap.

I can also show my settings on a ZOOM session, if someone is willing to help.

 

Thanks in Advance.

 

5 REPLIES 5

Is 10.208.108.2 your SVI or L3 as you are using it as gateway? Is it actually .2 or it is .1?

please cross check same.

 

Mayur

Pranav1
Nimbostratus
Nimbostratus

Sorry, it was a typo mistake, actually i configured 10208.108.1 as a gateway.

 

fw01# sh ip

System IP Addresses:

Interface        Name          IP address   Subnet mask   Method 

Ethernet0/0       outside        XXX.XXX.XXX.XX 255.255.255.240 CONFIG

Ethernet0/1.601     inside-01       10.208.107.1  255.255.255.192 manual

Ethernet0/1.604     inside-604       10.208.107.129 255.255.255.192 manual

Ethernet0/1.605     inside-605       10.208.107.193 255.255.255.192 manual

Ethernet0/1.606     inside-606       10.208.108.1  255.255.255.192 manual

And where this gateway exist? I mean 108.1

Mayur​

Lidev
MVP
MVP

 

Have you check if Packet Filters is disable on you F5 BIG-IP device ? (Network -> Packets filters) or are you using AFM module ?

Regards

ebeng
Nimbostratus
Nimbostratus

 

did you resolve it? I'm having exactly the same issue.

 

When the SELF_IP of the F5 is in the SAME VLAN as the servers, it does not respond to anything. (even when the DG is the FW-interface in that VLAN)

 

ofcourse when you delete the SELF_IP the traffic is now flowing through the mgmnt. (this should be even not possible from security-perspective)