For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mkyrc's avatar
mkyrc
Icon for Cirrus rankCirrus
Jun 20, 2024

BIG-IP DNS Generic Host

Hello,

I need to add some services running on 'generic host'. The destination host is reachable (icmp) from CLI (rd0), but after adding it to GTM configuration as 'server' with 'icmp monitor' - it is not getting up (green) but monitor fails with reason 'no reply from big3d: timed out'.

configuration:

gtm server /Common/host-dca {
    datacenter /Common/DCA
    devices {
        host-dca {
            addresses {
                172.25.113.23 { }
            }
        }
    }
    monitor /Common/my_icmp
    product generic-host
    virtual-servers {
        service1 {
            destination 172.25.113.21:0
        }
        service3 {
            destination 172.25.113.23:0
        }
    }
}

gtm monitor gateway-icmp /Common/my_icmp {
    defaults-from /Common/gateway_icmp
    interval 5
    probe-attempts 3
    probe-interval 1
    probe-timeout 5
    timeout 15
}

log:

# host 172.25.113.21
alert gtmd[13178]: 011a5004:1: SNMP_TRAP: Server /Common/host-dca (ip=172.25.113.21) state change blue --> red (No enabled VS available)
alert gtmd[13178]: 011ae0f2:1: Monitor instance /Common/my_icmp 172.25.113.21:0 CHECKING --> DOWN from /Common/dca-dcdns-adc (no reply from big3d: timed out)
alert gtmd[13178]: 011a6006:1: SNMP_TRAP: VS service1 (ip:port=172.25.113.21:0) (Server /Common/host-dca) state change blue --> red ( Monitor /Common/my_icmp : no reply from big3d: timed out)

# host 172.25.113.23
alert gtmd[13178]: 011a5004:1: SNMP_TRAP: Server /Common/host-dca (ip=172.25.113.23) state change blue --> red (No enabled VS available)
alert gtmd[13178]: 011ae0f2:1: Monitor instance /Common/my_icmp 172.25.113.23:0 CHECKING --> DOWN from /Common/dca-dcdns-adc (no reply from big3d: timed out)
alert gtmd[13178]: 011a6006:1: SNMP_TRAP: VS service3 (ip:port=172.25.113.23:0) (Server /Common/host-dca) state change blue --> red ( Monitor /Common/my_icmp : no reply from big3d: timed out)

why is there 'no reply from big3d: timed out'?? the server type is  'generic host' (not 'bigip').

network:

GTM is running in HA (there are two GTM devices). Each of them has one self and one float IP address configured. All in routing domain 0 only. Nothing special.

 

Troubleshooting

host 172.25.113.21 is currently down, host 172.25.113.23 is reachable:

# ping 172.25.113.21
PING 172.25.113.21 (172.25.113.21) 56(84) bytes of data.
^C
--- 172.25.113.21 ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 1999ms

# ping 172.25.113.23
PING 172.25.113.23 (172.25.113.23) 56(84) bytes of data.
64 bytes from 172.25.113.23: icmp_seq=1 ttl=253 time=2.11 ms
64 bytes from 172.25.113.23: icmp_seq=2 ttl=253 time=1.96 ms
64 bytes from 172.25.113.23: icmp_seq=3 ttl=253 time=3.68 ms
^C
--- 172.25.113.23 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 1.964/2.586/3.684/0.780 ms

 

tcpdump from bigip CLI  (rd0) with above 'ping' tests:

# tcpdump -i0.0:nn -nnp host  172.25.113.21 or 172.25.113.23
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0:nn, link-type EN10MB (Ethernet), capture size 65535 bytes
11:28:50.368443 IP 172.18.210.20 > 172.25.113.21: ICMP echo request, id 1286, seq 1, length 64 out slot1/tmm0 lis= port=1/0.16 trunk=.itrunk0 flowtype=130 flowid=4000013D1C00 peerid=4000013D1B00 conflags=20E26 inslot=1 inport=18 haunit=0 priority=0
11:28:52.816810 IP 172.18.210.20 > 172.25.113.23: ICMP echo request, id 1321, seq 1, length 64 out slot1/tmm0 lis= port=1/0.16 trunk=.itrunk0 flowtype=130 flowid=4000013CD140 peerid=4000013CD040 conflags=20E26 inslot=1 inport=18 haunit=0 priority=0
11:28:52.818050 IP 172.25.113.23 > 172.18.210.20: ICMP echo reply, id 1321, seq 1, length 64 in slot2/tmm0 lis= port=.itrunk0 trunk= flowtype=0 flowid=0 peerid=0 conflags=0 inslot=7 inport=26 haunit=0 priority=3

 

Question:

  • I thing, the configuration is correct, but server (host-dca) and virtual services (service1 and service3) are going down.
  • Why is the reason of virtual service is going down 'no reply from big3d: timed out'? the server type is 'generic host', not 'bigip'
  • I can't see monitoring (my_icmp monitor) requests in the tcpdump. why is this not working? I can see only ping request from CLI, but not from monitor 'my_icmp'.

thank you for advice

No RepliesBe the first to reply