Forum Discussion

mb_373302's avatar
mb_373302
Icon for Nimbostratus rankNimbostratus
Sep 28, 2018

Can a single F5 interface serve as both ingress and egress for traffic?

Can a single F5 interface serve as both ingress and egress for traffic?

 

My setup is as follows:

 

Cisco switch (vlan 10-VRF abc) -> int 2/4 F5 int 2/4 -> Cisco switch (vlan 20-VRF def)

 

I am trying to ping from vlan 10 on the Cisco switch (vrf abc) to vlan 20 on the same Cisco switch (vrf def).

 

When I run a tcpdump on the F5, I see the F5 receive the icmp echo-request, but I do not see an echo-reply from the F5. It seems as though the F5 is dropping the traffic. Is this normal behavior or is the F5 able to send/receive out the same interface for a single traffic flow?

 

AFM
BIG-IP
security

2 Replies

Sort By
  • Sukesh123456's avatar
    Sukesh123456
    Icon for Altostratus rankAltostratus
    Sep 30, 2018

    What is the mode of the interface that is serving the traffic.(Trunk or any vlan is assigned please share the output on F5 side and switch side both) If the traffic is being received and you are not seeeing reply , it means F5 does not know how to respond back .(hence it is dropping)

     

  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Nimbostratus rankNimbostratus
    Sep 30, 2018

    F5 is default deny device. You must explicitly create a wildcard and ip forwarding type virtual server and enable it on both VLANs.