Forum Discussion

senthil147_1421's avatar
senthil147_1421
Icon for Nimbostratus rankNimbostratus
Mar 15, 2018

Disabled VIP responding to ICMP

Hi Team,

 

Even after disabling virtual server its responding to ICMP . Is it normal ? i have selected virtual server:virtual server list and disabled it.

 

Thanks, Senthil

 

5 Replies

  • Do you have any other virtual servers using the same IP address? You can disable ICMP from the virtual address section

     

  • I dont want to disable ICMP completely instead i would like to configure the VIP in such a way that if pool members are down ICMP to VIP should fail because i am calling this VIP address in main core device SLA tracking. IF main code device can ping this VIP then it will inject default route and if pool members are down then ICMP to VIP should not work so that core device will take out default route.

     

    Is this possible ?

     

    Thanks, senthil

     

  • Surgeon's avatar
    Surgeon
    Ret. Employee

    When you configure a VIP, big-ip creates a virtual listener which you can find under virtual-address section. This virtual-address is shared across all the VIPs that uses this IP in destination field. When you use ping, you get reply from virtual-address, not from a VIP.

     

    As jaikumar mentioned, If you want to disable icmp for a particular IP you need to do it under virtual-address section.

     

    You have some flexibility with ICMP Selective, but again, if you have several VIPs sharing the same IP, then this become a challenge.

     

  • Surgeon's avatar
    Surgeon
    Ret. Employee

    As I explained. Under Virtual Address there is an option "ICMP Echo". Play with it.