Forum Discussion
Adding route by management interface for Radius server authentication
Hi,
We have two BigIP LTM VE in our DMZ. I'm trying add a management route using "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.255 gateway 10.14.131.1"
Basically, our radius server is at 10.10.160.20. The route get's added but for some reason it keeps coming out of the wrong interfaces which seems to be defined in the TMM routes which is the "external_default_gateway" (10.10.130.1) which is our external interface.
I also need to configure DNS Lookup Servers, Syslog and NTP to to through the management route.
What am I doing wrong.
Please help !
5 Replies
- nitass
Employee
I'm trying add a management route using "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.255 gateway 10.14.131.1"
shouldn't subnet be 255.255.255.0?
- Priceless_20483
Nimbostratus
10.10.160.0 is a /32
- Priceless_20483
Nimbostratus
I have tried "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.0 gateway 10.14.131.1" and still does not work.
[root@pvm-dmz-f5-1:Standby:In Sync] config tmsh list /sys management-route sys management-route securitymanagement { gateway 10.14.131.1 network 10.10.160.0/24 } sys management-route default { description configured-statically gateway 10.14.131.1 mtu 1500 network default }
- nitass
Employee
I have tried "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.0 gateway 10.14.131.1" and still does not work.
can you try this?
tmsh create sys management-route 10.10.160.20/32 gateway 10.14.131.1 - Priceless_20483
Nimbostratus
This makes a lot of sense and now I feel retarded that I didn't catch that before ! Thanks a lot.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
