Exam F5CAB5 Topic 6 Question 32 Discussion
Actual exam question for F5's F5CAB5 exam
Question #: 32
Topic #: 6
Question #: 32
Topic #: 6
A BIG-IP Administrator configured the following virtual server to pass traffic on all addresses and ports.
After configuration is completed, the BIG-IP Administrator notices that the virtual server is unable to pass traffic.
Plaintext
ltm virtual forwarding_any_vs {
destination 0.0.0.0:any
ip-forward
mask 255.255.255.255
profiles {
fastL4 {}
}
serverssl-use-sni disabled
source 0.0.0.0/0
translate-address disabled
translate-port disabled
}
Which part of the configuration is the cause of the issue?
After configuration is completed, the BIG-IP Administrator notices that the virtual server is unable to pass traffic.
Plaintext
ltm virtual forwarding_any_vs {
destination 0.0.0.0:any
ip-forward
mask 255.255.255.255
profiles {
fastL4 {}
}
serverssl-use-sni disabled
source 0.0.0.0/0
translate-address disabled
translate-port disabled
}
Which part of the configuration is the cause of the issue?
Suggested Answer: B Vote an answer
The failure of the Forwarding (IP) virtual server is caused by an incorrect Network Mask configuration for a wildcard destination.
* Wildcard Destination: The administrator intends to create a "Wildcard" Virtual Server that listens for any destination IP address (0.0.0.0).
* The Mask Conflict: A mask of 255.255.255.255 (or /32) tells the BIG-IP to look for a specific, single host address. When combined with 0.0.0.0, the system is literally looking for traffic destined for the IP
0.0.0.0, which is not a valid routable destination for standard traffic.
* Correct Configuration: To allow the virtual server to catch traffic for any IP address, the mask must be changed to 0.0.0.0 (or /0). This signifies that the system should ignore all bits of the destination address and match everything.
* Forwarding Logic: The rest of the configuration-including ip-forward (Forwarding IP type), translate-address disabled, and translate-port disabled-is correct for a BIG-IP acting as a router
/gateway.
* Wildcard Destination: The administrator intends to create a "Wildcard" Virtual Server that listens for any destination IP address (0.0.0.0).
* The Mask Conflict: A mask of 255.255.255.255 (or /32) tells the BIG-IP to look for a specific, single host address. When combined with 0.0.0.0, the system is literally looking for traffic destined for the IP
0.0.0.0, which is not a valid routable destination for standard traffic.
* Correct Configuration: To allow the virtual server to catch traffic for any IP address, the mask must be changed to 0.0.0.0 (or /0). This signifies that the system should ignore all bits of the destination address and match everything.
* Forwarding Logic: The rest of the configuration-including ip-forward (Forwarding IP type), translate-address disabled, and translate-port disabled-is correct for a BIG-IP acting as a router
/gateway.
by Stan at Jun 02, 2026, 04:30 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).