For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aspindler34_133's avatar
aspindler34_133
Icon for Nimbostratus rankNimbostratus
Apr 02, 2014

APM Limited Mode errors

I am testing APM Configurations and i cannot get passed this message. What could be the problem? I have verified that the lic I am using on my LAB VE is up to date. I am running 11.5 currently. Any Input on this would be greatly appreciated.

 

Your session could not be established. Invalid Session ID. Your session may have expired. Thank you for using BIG-IP. To open a new session, please click here.

 

12 Replies

  • Two important questions:

     

    1. How many active sessions does it show under Access Policy - Management?

       

    2. What are you doing in this access policy?

       

  • whelp for right now i have just one session, which is my own. the only thing I have really tested is using a basic ACL with 3 entries in it.

     

  • Just for giggles, can you build a second simpler access policy with a message box:

    start -> message box -> allow    
    

    Apply that policy to your VIP and test. If you see the message box and get to the application, then it's a safe bet there's something wrong with the other policy. If you don't see the message box, then we should look at APM as a whole.

  • I Have tried that Setup and created a new policy and i still get that error. I went back through the configuration of setting the access profile up and applying it to the VIP. and I noticed that I do not have a connectivity profile selected under the access policy section in the vip configuration pane. i am going to look at setting up a basic one.

     

    • Kevin_Stewart's avatar
      Kevin_Stewart
      Icon for Employee rankEmployee
      You wouldn't need a connectivity profile for the simple start->message box->allow policy. It should basically be this policy, an HTTP profile, and a pool assigned to the VIP. Does that still fail? The title of your thread suggests your in APM limited (lite) mode. Is that correct?
  • Right I purchased the 98$ VE lab Edtion and am experimenting with APM. Theoretically I shouldnt have any problem because it is just me creating sessions. unless there is some further restriction on it,

     

  • I have not been able to make any progress on this. I think its a problem with the F5 not detecting new sessions. But im not sure.

     

  • I actually made a bit of progress on this, I Have been able to successfully get a somple APM profile to work correctly for an https VIP, I still how ever cannot insert any URIs on the VIP, I get an error that tells me that the BIG-IP cannot find connection information in the request from the client.

     

    • Andrew_Husking's avatar
      Andrew_Husking
      Icon for Cirrus rankCirrus
      So, from reading this i can see two possible issues. In the cookie section of the APM configuration (where it mentions SSO domains), there is a checkbox called "Secure", if thats ticked, APM won't work without HTTPS and a cert. The other thing is, i've noticed with our APM setup, that occasionally, APM just breaks and won't allow us to start a new session (same error that you mentioned), and the way we got around that was by closing all instances of the browser and re-opening it. We have only ever seen that message when we have been testing things, never on a production instance.
    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      please start a new question Cameron Fairbairn 2 if the above reponses dont help you. would be wiser to restart trouble shooting with you. then do it here.