Forum Discussion

ricky_paulus_gi's avatar
ricky_paulus_gi
Icon for Nimbostratus rankNimbostratus
Apr 03, 2018

How to use traceroute command from F5 to destination

Hi All,

 

I have created forwarding Virtual Server. We used source translation ,How do we use traceroute from F5 (Source translation) to the destination?

 

Regards,

 

Ricky

 

2 Replies

  • You can't do that, and just to be sure I tested.

     

    [root@LABBIGIP1:Active:Disconnected] config traceroute -s 172.16.0.1 8.8.8.8

     

    13:41:26.072969 IP 172.16.0.1.54942 > 8.8.8.8.33435: UDP, length 32 out slot1/tmm3 lis= flowtype=130 flowid=56009AFE8780 peerid=56009AFE8680 conflags=626 inslot=63 inport=23 haunit=0 priority=0 peerremote=00000000:00000000:0000FFFF:AC100001 peerlocal=00000000:00000000:0000FFFF:08080808 remoteport=58456 localport=33435 proto=17 vlan=4094

     

    172.16.0.1 is my internal self IP, vlan=4094 is my external vlan. I have a forwarding 0.0.0.0/0 virtual server listening on the internal VLAN with automap, and a default gateway via external VLAN.

     

    Basically, the traffic is sent out via external VLAN as per default gateway, and using internal source address.

     

    When you test from the F5, the unit is just sending the traffic out. When you access from inside, the forward virtual server handles the traffic, and after that routing takes control to send the traffic out.

     

  • tcpdump -vvnni 0.0:nnnp -s0 host ip_address -w /path/file.pcap

     

    This command captures end-to-end packets that can be traced using the F5 plugin for Wireshark.

     

    This is also included in a script I published today.