Can't access virtual server IP from browser , however I can ping and telnet on port 80

Question

Hi All,&nbsp;
I am new to f5, I am watching CBT nuggets ( Kieth) and build a topology using f5 VM. I have created 3 nodes with an IP 10.2.0.128,10.2.0.129 &amp; 10.2.0.130(internal network) and mapped them to virtual server IP 192.168.1.177 (external network)for http service. From external network pc I can ping the VIP 192.168.1.177 and can telnet the same on port 80. However I cannot access it by browser. I could see the packets are received but there is no return traffic logs.&nbsp;
Also I have created a custom http monitor with following parameters GET /

. All the nodes are up , pools are up. Can any one shed why this issue is persisting in the lab.&nbsp;
Cheers&nbsp;
Yasir&nbsp;

iainthomson85_1 · Accepted Answer

Usually SNAT related,&nbsp;
Use a SNATPool or Snat Automap....&nbsp;

janholtz · Answer

Default gateway should have no bearing if we are using SNAT.&nbsp;
IF:&nbsp;
1) Client can connect to virtual server&nbsp;
2) F5 can connect to back-end hosts.&nbsp;
We should only need correct SNAT, and we'll be happy.&nbsp;
Some caveats for condition 2:&nbsp;
Remember that when you telnet  / curl from the LTM command line, it will ALWAYS use non-floating IP address to get to the back-ends.&nbsp;
When you use a client machine, and hit the virtual server with SNAT automap, it will ALWAYS try to use the floating ip address to it's internal VLAN (if assigned), and THEN non-floating.&nbsp;
ALL of the above are predicated on the premise that NONE of the traffic is trying to go / get to / from the management interface, in which case all bets are off and reality is guaranteed to get distorted. &nbsp;
DO NOT use the management IP / interface for anything besides management. It will not work... you will make yourself unhappy.&nbsp;
//Jan&nbsp;

tkthamira · Answer

Hi All,&nbsp;You need to create a SNAT.Local Traffic &gt;&gt; Address Translation &gt;&gt;SNAT List&nbsp;Create new one with Translation Type 'Automap'

ahmed_bouja_303 · Answer

Hi,&nbsp;
We have issuing the same issue. And the SNAT is configured to Automap. 
Can anyone meet this problem and is there any solution for that ?&nbsp;

janholtz · Answer

Remove monitor
Shell into the F5.
Run:
tcpdump -s0 -X -nnni 0.0 host 10.2.0.128 or host 10.2.0.129 or host 10.2.0.130&nbsp;
Test connection.&nbsp;
What do you see?&nbsp;
BR
Jan&nbsp;

ahmed_bouja_303 · Answer

Hi Jan,&nbsp;
Thanks a lot for response. &nbsp;
Our issue is related only to the Virtual Server IP address: we can ping it and can telnet the same on port 80. However we cannot access it by browser.&nbsp;
For the Pool Servers, we don't have any issues. We can telnet them on port 80 and access them by browser. By we can't access the VIP by browser. I think the LTM feature is not functioning despite all the configuration is OK&nbsp;
Regards,
Ahmed&nbsp;

Forum Discussion

Can't access virtual server IP from browser , however I can ping and telnet on port 80

11 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

Port Group on F5OS network setting

F5Access | MacOS Sonoma

Rewrite uri translation not working

Transaction looks successful but file not downloading

Related Content

Integrating SSL Orchestrator with Fortinet FortiGate Virtual Edition as a Virtual Wire

Quick Optimizations for F5 BIG-IP Virtual Edition

URL/URI rewrite without changing in Client browser

Check a Virtual Server's SSL Status

Virtual Server graphical App for F5 LTM