Subnetcalc info7/10/2023 ![]() I assume that auto delete only works when VS is deleted and not when IP is changed - I think a bit incoherent, in both cases there is no VS using given VIP. Seems that Auto Delete setting for VIP is not working (11.6.0HF4 VE), after changing VS IP (no other VSs are using this IP) VIP is not deleted but set to Offline (Enabled) - The virtual address has no virtual servers. Other flaw in GUI is that there is no indication that given VIP is network or host, no other way to figure out than looking at VS definition :-(īTW, default setting for network VIP is both ARP unchecked and ICMP Echo disabled. So only issues left is why net and broadcast IP (us of subnet definition) can be used to both access http and ping? Bug or by design? When subnet is defined as part of network assigned via self IP then with ARP checked http can be reached, of course with ICMP Echo Enabled ping is working as well. Of course when only ARP is enabled ping won't work. However I can reach http site in this configuration - so for me it's working as hind of loopback network configured on LTM.įor above config (using LTM self IP as default gateway for defined subnet - on client computer) after setting ICMP Echo to Enabled and ARP unchecked IPs can be pinged. My Destination for VS is set to 10.128.80.40/29, with default setting for VIP (ARP unchecked, ICMP echo disabled) I can't ping IPs in defined subnet (10.128.80.41 - 46, at least excluding net and broadcast because as I mentioned both 10.128.80.40 and 47 can be reached), even if I have route to LTM self IP. Not sure how you have your VIP and self's configured. Is that by design? I was pretty sure that net and broadcast IPs would be excluded from host ip range? Second I tried to access VS using 10.128.80.40 (network) and 10.128.80.47 (broadcast) and still can connect to http server behind LTM. Remember the BIG-IP also needs to be able to reach the source host. The VIP is reachable if the routing is in place whether you are connecting directly or via a route you defined. Can you ping the VIP IP and if not, maybe worth taking a tcpdump to see what is happening at arp and icmp level. I came across this is in the past and I am sure there is a good explanation for it on askF5. ![]() ICMP requires ARP so ARP is enabled regardless of whether the option is checked. ICMP should be enabled by default and ARP is disabled. Here is my input.įirst of all by default VIP has ARP unchecked so no ARP replies and not possible to connect from client - why it's default setting? One last issue - when network VS is created then in Virtual Address List there is no info that it's net ip not host ip, in case of example above I see only 10.128.80.40 entry without any mask specified - a bit misleading and making it hard to discern between host and net addresses. I just tested VS with Destination set to 10.128.80.40/29.įirst of all by default VIP has ARP unchecked so no ARP replies and not possible to connect from client - why it's default setting? In what scenario this VS can be reached? When selfIP of LTM is set as default gateway on connecting host (or last hop), so for example we have route 10.128.20.40 255.255.255.248 10.128.10.10 1 where 10.128.10.10 is self IP on LTM?
0 Comments
Leave a Reply. |