Forum Discussion
- What_Lies_Bene1Cirrostratus
Can you ping across it or use ncat or telnet if ping isn't permitted? Don't forget to ensure the source interface/address used is an appropriate one that's allowed across the VPN.
- nitass_89166Noctilucent
i understand you are talking about outbound pptp through bigip.
if you cannot test with real pptp client/server, you may try to generate number of gre traffic using hping and see if they are snat'ed correctly.
GRE package by hping2
- gossett_151899NimbostratusYes. I'm sorry you lost me on the gre part :( I'll check into it though! In the LSN pool list where it says MEMBER LIST and it says this: Specifies the set of translation IP addresses available in the pool. This is a collection of IP prefixes with their prefix lengths. All public-side addresses come from the addresses in this group of subnets. This is where I want to put the address that the server will hand out to the client yes?
- nitassEmployee
i understand you are talking about outbound pptp through bigip.
if you cannot test with real pptp client/server, you may try to generate number of gre traffic using hping and see if they are snat'ed correctly.
GRE package by hping2
- gossett_151899NimbostratusYes. I'm sorry you lost me on the gre part :( I'll check into it though! In the LSN pool list where it says MEMBER LIST and it says this: Specifies the set of translation IP addresses available in the pool. This is a collection of IP prefixes with their prefix lengths. All public-side addresses come from the addresses in this group of subnets. This is where I want to put the address that the server will hand out to the client yes?
- gossett_151899NimbostratusI have used this doc but compared to the settings in the F5 it is sadly lacking: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/cgn-implementations-11-5-0/6.html?sr=36966790