QuestionQ156

Identify and Resolve LTM Device Issues

Question Image

Question Image

Question Image

Question Image

Question Image

Question Image

Refer to the exhibits.

An LTM Specialist is troubleshooting an application configured on an LTM device in a one-armed configuration. The application does NOT work through the LTM device, but it does work when accessed directly through the application servers. The virtual server 192.168.1.211:443 is configured to SNAT with address 192.168.1.144 and references a pool whose member is 192.168.10.80:443. No Client SSL or Server SSL profiles are associated. The LTM Specialist collected two traffic captures to help identify the issue.

What is the problem with the LTM device configuration?

  • A Pool member is configured to use wrong port.
  • B Pool member is configured for SSL off-loading.
  • C Virtual server is configured to use wrong port.
  • D Virtual server is configured without SSL Profiles.
Explanation

The application server is reached directly on TCP port 8443, but the LTM pool member is configured for port 443 and the LTM forwards its server-side connection to that port. The pool member must use the application’s actual listening port, 8443. SSL profiles are not required when BIG-IP is passing encrypted TLS traffic through rather than terminating it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!