cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
385
Views
0
Helpful
1
Replies

Packet with source IP 0.0.0.0

csiracusa
Level 1
Level 1

Hi,

is possible that a css11503, configured as http and https load balancer, sends packet with source IP 0.0.0.0?!

With an IDS, I can see packet with source IP 0.0.0.0, coming from the load balancer, but I cannot understand why.

Can someone help me?!

Best Regards

CS

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

CSCek50736 The CSS is configured with an L5 VIP. The client sends a SYN to the VIP. The CSS responds with a SYN/ACK to the client. The SYN/ACK is returned as an ICMP unreachable to the VIP by a router unable to locate the client. This could cause the CSS to forward the ICMP unreachable with a src and dst ip of 0.0.0.0

You'll need a sniffer trace to identify the traffic.

Gilles.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: