• SNIP, NSIP and backend server are in the same subnet.
• Unable to ping backend from NetScaler with SNIP as source IP address, can ping backend with NSIP as source IP address.

Add NetScaler VMAC to the list of secure MAC address in port security configured Switch.

---

Problem Cause

If a VMAC is configured on the interface, when using NSIP as the source IP to ping the backend, NetScaler will use the real MAC address of the interface as the source MAC address. However, when using SNIP/MIP to ping the backend, NetScaler will use the VMAC as the source MAC address. If port security is configured on the intermediate switch and only allows incoming traffic based on the real MAC address of NetScaler, it will prevent the use of SNIP in NetScaler to ping the backend.

Check Configuring Virtual MAC Addresses for more NetScaler VMAC settings.