For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rogerwow's avatar
rogerwow
Icon for Nimbostratus rankNimbostratus
Jan 09, 2020

adding a new interface, selfIP and VIP

I've been trying to follow instructions and setup a new interface, selfip and VIP (on the selfip network) and i cant get it to work...

 

my attempt looks like this:

 

i've been following:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-routing-administration-11-6-0/2.html

https://support.f5.com/csp/article/K12149

 

I had the new NIC added to the BigIP VirtualMachine, then i ran

 

 

rm –f /var/db/mcpdb*

 

touch /service/mcpd/forceload

 

then restarted the box

 

 

then ran

 

 

f5-swap-eth -w

 

cat /etc/ethmap

 

 

the cat command showed an additional MAC address which i assume was the one that was added (hard to verify)

 

then i tried to map in a new interface like this:

 

 

net self /Common/SomeSelfIp {

  address x.x.x.x/24

  traffic-group /Common/traffic-group-local-only

  vlan /Common/SomeVLAN

}

 

net vlan /Common/SomeVLAN {

  interfaces {

    1.9 { }

  }

  tag xxx

}

 

however from another machcine on the x.x.x.x/24 network i cant ping this interface..

is there something else i need to do to get it come up?

1 Reply

  • Port lockdown might be a consideration but it shouldn't impact ICMP traffic (ping).

    Are you sure you're using the right physical interface assigned to the vlan?