For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Priceless_20483's avatar
Priceless_20483
Icon for Nimbostratus rankNimbostratus
Jun 02, 2015

Adding route by management interface for Radius server authentication

Hi,

 

We have two BigIP LTM VE in our DMZ. I'm trying add a management route using "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.255 gateway 10.14.131.1"

 

Basically, our radius server is at 10.10.160.20. The route get's added but for some reason it keeps coming out of the wrong interfaces which seems to be defined in the TMM routes which is the "external_default_gateway" (10.10.130.1) which is our external interface.

 

I also need to configure DNS Lookup Servers, Syslog and NTP to to through the management route.

 

What am I doing wrong.

 

Please help !

 

5 Replies

  • I'm trying add a management route using "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.255 gateway 10.14.131.1"

     

    shouldn't subnet be 255.255.255.0?

     

  • I have tried "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.0 gateway 10.14.131.1" and still does not work.

     

    [root@pvm-dmz-f5-1:Standby:In Sync] config tmsh list /sys management-route sys management-route securitymanagement { gateway 10.14.131.1 network 10.10.160.0/24 } sys management-route default { description configured-statically gateway 10.14.131.1 mtu 1500 network default }

     

  • I have tried "tmsh create /sys management-route securitymanagement network 10.10.160.0/255.255.255.0 gateway 10.14.131.1" and still does not work.

    can you try this?

     tmsh create sys management-route 10.10.160.20/32 gateway 10.14.131.1
    
  • This makes a lot of sense and now I feel retarded that I didn't catch that before ! Thanks a lot.