Forum Discussion
APM Behavior
Hi All,
I implemented 2 LTM + APM BigIP devices in HA, and i did the VPN setup. I'm able to connect to the LAN through the APM but once i connected, i'm able to reach the management IP of the standby device but not the active device, even i'm not able to reach any self IP on the active one. is that by design or there is something missing?
thank you all for your help.
5 Replies
- THi
Nimbostratus
Think it is by design.
- Hawary
Altostratus
if it by design, it will be a problem since for example i'm connected to the LAN to take a devices backup, how can i connect to the active device to take this backup or doing anything else?
- THi
Nimbostratus
Think you may need to use a jump machine in your internal network to reach back to the management GUI. Alternatively you can use the Kevin Stewart's idea of having a virtual server which uses localhost as target server. This requires using an iRule to direct the VIP to node 127.0.0.1 port 443
See post https://devcentral.f5.com/questions/ssl-vpn-and-accessing-the-active-big-ip-via-gui-or-ssh
Scroll to the bottom of the post to see Kevin's answer.
- Hawary
Altostratus
Thank you THi for your answer. As per the link you provided, the issue is with the management IP and in my case it all the self IP. is that also normal behavior, I mean is that normal that I can't access all the self IP on the active device?
- Hawary
Altostratus
thank you THi for your help, as you said, i think also that this is the case too with the other self IP.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com