Thx. The next hop is configured to only communicate with the destination nodes via ipsec. When ipsec is disabled , the next hop and the pool member/nodes can't communicate at all (ping, http, etc). I expected when ipsec was disabled, since they could not communicate , a failure would happen for the ICMP health monitor.
I can't really supply the iRule. It controls the route to pool members and nodes via a nexthop command.
the http monitor is a basic monitor
ltm monitor http /mypartition/MY_HTTP_MONITOR {
defaults-from /Common/http
destination *:*
interval 5
ip-dscp 0
recv "200 OK"
send "GET / HTTP/1.0\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
the ICMP was a basic monitor applied to the pool member nodes
ltm monitor gateway-icmp /mypartition/MY_ICMP_MONITOR {
defaults-from /Common/gateway_icmp
destination 10.100.53.150:* THIS WAS THE NEXT HOP
interval 5
time-until-up 0
timeout 16
}
Nimbostratus