For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

young19918's avatar
young19918
Icon for Cirrus rankCirrus
May 18, 2023

About IPsec Interface

Hello, When I was building IPsec Interface  I found that I could not select the option I wanted... But I've obviously put this option up .... Why can't I select it in " Tunnels : Profi...
application delivery
Paulius's avatar
Paulius
Icon for MVP rankMVP
May 18, 2023

young19918 I would imagine that you have to change the order and place the traffic selector that you created before the default one. Typically what happens is selectors are used from top to bottom on most devices so this could be what is causing the F5 to not allow you to select the other one in your options.

young19918's avatar
young19918
Icon for Cirrus rankCirrus
May 19, 2023

Paulius ,

Thanks for your reply.

After I changed the order ,I still can't choose...

 

  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    May 19, 2023

    young19918 Can you provide the rest of the associated configuration for this IPsec VPN? From my understanding the following is all that should be configured, assuming you have done all the prerequisits such as a self-IP.

    1. Create a forwarding virtual server for IPsec. This should listen on destination 0.0.0.0/0, all ports, all protocols, and all vlans and tunnels
    2. Create an IKE peer
    3. Create an IPsec policy
    4. Create an IPsec traffic selector. Make sure this one is above the default.

    The following article might help you in this configuration.

    https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-0-0/10.html

    • young19918's avatar
      young19918
      Icon for Cirrus rankCirrus
      May 24, 2023

      Hi Paulius ,

      Yes, I have already configured.

      1.  Forwarding_IP

      2. IKE peer

      3. Ipsec policy

      4. IPsec traffic selector

       

       

      • Paulius's avatar
        Paulius
        Icon for MVP rankMVP
        May 24, 2023

        young19918 And nothing is showing up in any of your VPN related logs on the F5?