Server port not accessible from F5
Hi Gurus,
We have specific service running on server with port 3010 I can able to ping that server from F5 CLI, Telnet that server on port 22, 80 to check these service port accessible. After verifying these ports are accessible but unable to access this 3010 port. F5 and this server is connected at Layer 2 so there is not any blockage as I can access this service from all over our private network. Kindly suggest solution.
Big IP F5 1600, BIG-IP 10.2.3 Build, 112.0 Final
Thanks
Thanks all for your help, actually issue was on Firewall there was policy which allows only ping, http & ssh traffic.
My F5 management IP was 10.11.5.x/24 network, server was in 10.11.1.x/24 network so I was tracing on firewall using source IP F5 (10.11.5.x) destination server IP (10.11.1.x) I was getting no trace logs so I thought traffic was not blocked by firewall.
After more troubleshooting, I enabled tcpdump on server in (10.11.1.x) network, so I came to know F5 was doing NAT when forwarding its traffic. Like 10.11.5.x network was NATTed to 10.11.3.x network, this was not allowed on firewall. After enabling this network for 3010 port on firewall it worked.
Thanks all my concept was source and destination IP's never change util unless it is NATTED, still looking how F5 is NATTING its management IP from 10.11.5 to 10.11.3.
Thanks.