Forum Discussion

SP_266134's avatar
SP_266134
Icon for Nimbostratus rankNimbostratus
Jan 04, 2018

VIP not working with External IP

Hi guys, VIP works with internal IP address , but not with external IP address. Can you point me in the correct direction of resolving the issue. My current configuration •F5 versions virtual edition : BIG-IP 13.0.0 Build 2.0.1671 •VlanExternal , internal all untagged. •Vips A oService port 443 oProtocol TCP

 

oProtocol Profile (Client) tcp

 

oProtocol Profile (Server) use client profile ossl profile client cert oVlan and Tunnel traffic : all vlan and tunnel oSource Address Translation Auto Map •Pool Nodes : 2 round robin . oIIS website port 80 •The VIP is accessible from within the network with internal IP address. The site loads fine. . •Network oDMZ addresses and the NAT’s to the public addresses: oPublic IDOUTSIDEstaticNated _ IP_ address. oVIP A address is configured to Nated IP address and I tried to ping that from F5 putty session it works. oWhen I do TCPIDDump –ni external , I don’t see any traffic. I added the default gateway.

 

1 Reply

  • If you're doing a tcpdump and not seeing any traffic that means the traffic is either arriving on the wrong VLAN or it's not arriving at the BigIP at all. I would check the former by running:

     

    tcpdump -i 0.0 host

     

    where is the IP address of your virtual server. If the traffic is showing up on the wrong VLAN or failing to make it to the BigIP at all, then the problem is very likely not with the BigIP but with an upstream switch, router, or firewall. I would start there.