Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Apr 13, 2012

Can Access F5 without Default Route

i found that i can access my F5 LTM from external networks ( on Self IPs of the interfaces ) , even i forgot to put Default route on it ?

 

 

 

 

9 Replies

  • can you disable auto last hop and try again?

     

     

    sol11796: Overview of the Auto Last Hop setting

     

    http://support.f5.com/kb/en-us/solutions/public/11000/700/sol11796.html
  • Is that a problem SSHSSH or are you just wondering how it's working? As Nitass suggested, with Auto Lasthop enabled, TMM will respond out the same switch port as it received the connection, ignoring any routes.

     

     

    Aaron
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Just to add to what Aaron said... The auto last-hop explicitly uses the MAC address of the sender as the destination when replying. The last-hop MAC address is taken from the inbound packet when the entry is placed in the connection table.

     

     

    H
  • Thanks all . but the behaviour i found is :

     

    i can manage device from external subnets ( with no routes )

     

    i cannot reach pool members ( using Virtual IP of VS ) from external subnets , when i put route to these subnets it worked .

     

    So , if it is related to Autolast hop , the second scenario should have worked without the route ?

     

  • i cannot reach pool members ( using Virtual IP of VS ) from external subnets have you captured packet? did you see packet reaching virtual server?
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Posted By SSHSSH on 04/14/2012 07:40 AM

     

    Thanks all . but the behaviour i found is :

     

    i can manage device from external subnets ( with no routes )

     

    i cannot reach pool members ( using Virtual IP of VS ) from external subnets , when i put route to these subnets it worked .

     

    So , if it is related to Autolast hop , the second scenario should have worked without the route ?

     

     

    For the pool member connectivity do you mean direct to the pool members? That's because the BigIP is not a router. It requires a network VS to forward non-loadbalanced traffic to pool members that live behind the LTM.

     

     

    H

     

  • without Default Route + Autolasthop enabled :

     

    can access Ppol member though VS IP & Can access F5 >>>>>> No problem , normal

     

    without default route + Autolasthop disbaled

     

    cannot access Pool member thougoh VS Ip ( normal ) , but still can access F5 device ???