I need to migrate services from our CSM's to new F5's. I've setup a test and placed the F5's on the same switch as the CSM sharing the same Real Server network and Virtual Server network. I've setup a VIP on the F5 that works fine on port 80, but for some reason I'm unable to ping the Real Server address anymore or directly telnet to port 80.
I don't have a sniffer available on the switch, but I've performed a snoop on the Real Server and for some reason the ICMP/HTTP packets for are not even reaching the Real Server when going direct (packets appear when I test the VIP), I've also performed a tcpdump on the Real Server vlan directly on the F5 and can't see my attempts. I can ping the server from the switch!
Any ideas why I'm unable to go the Real Server directly anymore...
Topology & Design:
Two ACI fabrics
Stretching VLANs using OTV
Both fabrics are advertising BD subnets into same routing domain
Some BDs(or say VLANs) are stretched, but some are not.
Endpoints can move betwee...
VMware Trunk Port Group is supported from ACI version 2.1
VMM integration must be configured properly
ASA device package must be uploaded to APIC
ASAv version must be compatible with ACI and device package version
Topology &Design:Traffic flow within same fabric:Endpoint moves to Fabric-2Bounce Entry Times OutTraffic Black-holedSummarySolutionAppendix:
In the Previous articles of ACI Automation, we are using Postman/Newman a...