Forum Discussion
Altostratusunable to ping VIP from server with the F5 as the DGW
so if it was suggested and I didnt see it I apoligize. The fix for me was to go to the virtual server that I was trying to access from the host nework (10.1.228.x) which used the F5 as its gateway and add the VLAN to the VLAN and tunnels section. it only had the ext vlan present and when I created the new network and new vlan (int_vlan) I needed to add it to that in order for it to connect to the VIPS
Altostratus
you need to configure ( SNAT Auto map on Virtual server setting ( 10.1.216.113 ) ) Automap is configured for this VIP and all VIPS in the 10.1.216.x network(VIP range)
devices in the 10.1.228.x network are unable to access devices in the 10.1.216.x range. The F5 is the default gateway.
so for the traffic flow, when ServerA sends the traffic 10.1.216.113 it will got the F5, the same F5 where the VIP resides. The VIP is configured with Automap so when the servers in the VIP pool respnd it shoud go back through the F5 and not out an external router
The F5 itself can ping the server from the 10.1.228.3 address
config # ping -I 10.1.228.3 10.1.216.113
PING 10.1.216.113 (10.1.216.113) from 10.1.228.3 : 56(84) bytes of data.
64 bytes from 10.1.216.113: icmp_seq=1 ttl=255 time=0.197 ms
64 bytes from 10.1.216.113: icmp_seq=2 ttl=255 time=0.285 ms
but other devices in that same network are unable to access any network services in the 10.1.216.x network. They are able to access everything on the network out side of 10.1.216.x
Hi Tim_Patrick ,
Don't try the ICMP from Server A to VIP 10.1.216.113 , because f5 bigip will reply and won't forward icmp traffic to server B.
What is the service of Server B ? HTTP , FTP , ....
Like Paulius said >>> we need to see the VIP configuration as well as try to share with us the TCPdump output to see the flow of the traffic while testing the connection from server A to B , and try to use Telnet , not Ping/ICMP protocol.
Paulius said good hint , the allowed Vlans in the virtual server >> check it or change it to ( Enabled in ALL Vlans ) as a troublrshooting step till you put the correct VLAN which this VIP should listen.
