For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 03, 2014

Activating license

Hey!

 

This is more of an annoyance than a problem for me but I figured I'd ask to see if anyone else has managed to solve it. When re-activating the license it takes a very very long time. From the firewall logs it looks like the F5 tries to contact the dns root servers and then then some https destinations to determine if the automatic activation is a viable option or not.

 

Looks like the script it uses has some kind of pre-determined IPs it tries (128.63.2.53 and 208.85.209.4), so I guess I could just open up if I only wanted the automatic activation to work. However, it's the time it takes for the name server lookup to time-out which I'd like to avoid. It'd be great if the box could use the configured dns servers but it insists on making its own lookups.

 

Does anyone have a solution to this problem that isn't opening up for the F5 to contact anything on the internet over port 53 or using the get_dossier command?

 

Kind regards,

 

Patrik

 

application delivery
LTM
management

3 Replies

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Mar 03, 2014

    I think this happens when your system cannot reach the Internet via the mgmt network interface, and it has to wait until it times out. You can do this:

    killall find-activate.pl

    from command line to get out of it.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Mar 04, 2014

    i believe they changed the behaviour at some point, which version are you using?

     

    http://support.f5.com/kb/en-us/solutions/public/13000/500/sol13514.html

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Mar 04, 2014

    Nonetheless, I am on 11.3.0 and I still have to use this workaround myself.