CirrusSeeing "echo (ping) request -- (no response found!)" from a ACI leaf to the F5 floating ip
Hello all who believes "It's not the F5",
I am having some network issue in a Bigip setup that involves a non-default route domain and 2 VRFs.
Bigip is in-line that has a wildcard for any port and protocol that is supposed to forward icmp.
It has 2 Floating IPs in one non-default route domain for 2 VLANs let us call them alpha and beta associated with 2 VRFs: LEFT (alhpa vlan) and RIGHT (beta vlan) on ACI. There is no firewall between RIGHT VRF (i.e. close to beta vlan) and F5.
On F5 there is a A.B.C.D/## network route to go to RIGHT VRF using gw on ACI as next hop.
On F5 there is also a default route using ACI gw of LEFT VRF as next hop.
On ACI for LEFT VRF there is A.B.C.D/## network route using the floating IP of alpha vlan as next hop
On ACI for RIGHT VRF there is default route using floating IP of beta vlan as next hop.
Client is trying to ping between security appliances or floating IPs across two VRFs.
I did a packet capture and I see Response not found (icmp.resp_not_found) for Echo (ping) request either direction.
In Wireshark seeing "echo (ping) request id=0x7070, seq=1/256, ttl=62 (no response found!)"
12 58.020868 #.#.#.# A.B.C.E ICMP 162 IN s3/tmm0 : Echo (ping) request id=0x7070, seq=1/256, ttl=62 (no response found!)
I wish I could debug ip flow and see what's happeing tcp stack wise. Due to security reason I can't install ipflow.
Sorry had to go with description of the setup due to organization policy. Any lead to potential issue will be greatly appreciated!
Thanks.
I didn't do the justice just giving highlight of the architecutre in a diagram. Turns out netmask of detination for forwarding virtual server did not have /0 at the end so it was not "any"; but, was treated as /32.
