For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ShawnC's avatar
ShawnC
Icon for Altostratus rankAltostratus
Oct 27, 2025

APM VPN LDAP POOL can't contact ldap server.

Hi, I have a question regarding APM VPN and LDAP authentication. When I configure the LDAP server using the direct LDAP Server IP, the authentication works fine. However, when I use a Pool with th...
APM
ldap
vpn
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Oct 28, 2025

Hi ShawnC,

If you use the “direct” option, communication will be through management.

If you use the “pool” option, it will be through TMM and self IPs will be used.

If self IP is not defined for the VLAN where the LDAP servers are located, and there is no TMM route, you can route the traffic from a different self IP.

  • Injeyan_Kostas's avatar
    Injeyan_Kostas
    Icon for Nacreous rankNacreous
    Oct 29, 2025

    I am not sure that direct option uses mgmt
    Unless of course there is no TMM route 

  • ShawnC's avatar
    ShawnC
    Icon for Altostratus rankAltostratus
    Oct 29, 2025

    I configured a route domain, and I am unsure if that is affecting the issue. The VLAN responsible for authentication has a self-IP configured, but it does not have a floating IP.

    • Injeyan_Kostas's avatar
      Injeyan_Kostas
      Icon for Nacreous rankNacreous
      Oct 29, 2025

      you cannot use another route domain exept 0 for AD/LDAP auth if I am not wrong

      • ShawnC's avatar
        ShawnC
        Icon for Altostratus rankAltostratus
        Nov 07, 2025

        The problem was that the interface I was trying to access didn't have a floating IP configured, only a self IP. After configuring the floating IP, it worked.

        Finally, using Route domain 1 with a floating IP configured successfully verified the connection.

        Thank you for your help.