Forum Discussion

Nimbostratus

Dec 09, 2015

Source port being changed when nothing else appears to be using the port

I've got some devices (Infoblox DNS) which use OpenVPN UDP port 1194 to communicate. The devices expect the source and destination port to be 1194. On the devices that are behind my F5 10200v devices...

Nacreous

Yes, we have seen similar with the new MSSQL availibility groups. We did just as you suggest, create a forwadingIP UDP VS with preserve strict. Since you are using a 5 second timeout you may benefit more from using stateless virtual servers for this UDP traffic, but you will need on for both directions of the traffic flow.

https://support.f5.com/kb/en-us/solutions/public/13000/600/sol13675.html

benmgood36

Nimbostratus

Dec 09, 2015

After reading this, I suppose I should have a stateless VS for 0.0.0.0/0 for UDP instead of IP forwarding. I followed the guidelines in https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html and set up a forwarding VS for TCP, UDP, and non-TCP/UDP with their own fastL4 profiles.

Forum Discussion

Source port being changed when nothing else appears to be using the port

Recent Discussions

BWC iRule

GTM Packet Capture command

Citrix XenServer Big-IP Upgrade help

BIG-IP DNS iRule issue with static variable

F5 ASM logging profile to specify source IP

Related Content

He Who Defends Everything Defends nothing… Right?

Change admin account

Audit WAF changes

Change cookie domain in HTTP::respond

api token timeout change