Forum Discussion

gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
Aug 07, 2016

Pool Members can't talk to their VIP.

I have 4 pool members under a virtual server. The 4 pool members all have the same IP, but they are all different ports. We have an internal application that is called and is using each of these pool members to load balance the load upon.

 

These pool members cannot talk to their own virtual server. I saw a thread discussing a SNAT pool list, but that thread had different IP's that were pool members, not the same IP on different ports.

 

Can anyone offer any advice on what to look at to allow this communication to happen?

 

Thanks.

 

application delivery
BIG-IP
virtual server

3 Replies

Sort By
  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Aug 07, 2016

    1. Can they ping it ?

       

    2. If they can ping it, most probably routing/switching is good. Next step would be to enable SNAT automap on the VS to see if access would work.

       

  • janholtz's avatar
    janholtz
    Icon for Altostratus rankAltostratus
    Aug 07, 2016

    Hi

     

    Pool member is always ip:port combo, so whether you change the ip, or the port should make no difference, each one is a unique instance. Since you are using SNAT automap ( I assume your monitor is showing the members as UP -use at least a TCP monitor to be sure-), does the F5 have an IP address in the same broadcast domain as the pool members' IP address? - Please ensure no firewall issues if not...

     

    Make sure that your virtual server has BOTH IP and port translation enabled as well (since you are running the same application in multiple ports on the node, this is almost certainly necessary).

     

    Lastly, if all else fails, disable ALL but one member in the gui, and then run a to see the traffic going through in a shell on the F5.

     

    Good luck.

     

  • gdoyle's avatar
    gdoyle
    Icon for Cirrostratus rankCirrostratus
    Aug 08, 2016

    Just wanted to provide an update. My issue was actually bigger than just correcting something on the BigIP, but I did have to add the VirtualIP to an external address SNAT. This was one of several corrections made to enable this traffic.

     

    Thanks for the help, y'all.