BIG-IP DNS TAB in F5 GUI for 45 days full EVAL license

Hey Deepak

Did you use the exact same license for both VE's? Did you generate the license from StrongBox? Perhaps when creating the license something got missed.

Have you tried to deprovision and reprovision DNS?

Hi Philip ,

I am using two different set of EVAL License for my Two VE .

When i check on individual VE , i can see it is a full license One . Please see below the License on each VE in use :

on VE1

Evaluation Licensed DateJul 28, 2018 License Expiration DateSep 12, 2018 Active Modules BIG-IP, VE, LAB (FIMCNWY-NUXRYZX) Rate Shaping External Interface and Network HSM, VE SSL, Forward Proxy, VE BIG-IP VE, Multicast Routing APM, Limited Routing Bundle, VE AFM, VE (LAB ONLY - NO ROUTING) ASM, VE SSL, VE DNS VE Lab (10K QPS) Max Compression, VE Advanced Protocols, VE DNSSEC Anti-Virus Checks Base Endpoint Security Checks Firewall Checks Network Access Secure Virtual Keyboard APM, Web Application Machine Certificate Checks Protected Workspace Remote Desktop App Tunnel CGN, BIG-IP VE, AFM ONLY PSM, VE Advanced Web Application Firewall, VE Lab Optional Modules APC-VE, Introductory APC-VE, Introductory to Medium Upgrade APC-VE, Medium App Mode (TMSH Only, No Root/Bash) IP Intelligence, 1Yr, VE-200M/VE-25M IP Intelligence, 3Yr, VE-200M/VE-25M URL Filtering, 1Yr, VE URL Filtering, 3Yr, VE URL Filtering, VE-25M-1G, 500 Sessions, 1Yr URL Filtering, VE-25M-1G, 500 Sessions, 3Yr

On VE 2 :

Evaluation Licensed DateSep 3, 2018 License Expiration DateOct 19, 2018 Active Modules BIG-IP, VE, LAB (FITVJVE-KEIBXPQ) Rate Shaping External Interface and Network HSM, VE SSL, Forward Proxy, VE BIG-IP VE, Multicast Routing APM, Limited Routing Bundle, VE AFM, VE (LAB ONLY - NO ROUTING) ASM, VE SSL, VE DNS VE Lab (10K QPS) Max Compression, VE Advanced Protocols, VE SSL Orchestrator, VE Advanced Web Application Firewall, VE Lab DNSSEC Anti-Virus Checks Base Endpoint Security Checks Firewall Checks Network Access Secure Virtual Keyboard APM, Web Application Machine Certificate Checks Protected Workspace Remote Desktop App Tunnel VE, Carrier Grade NAT (AFM ONLY) PSM, VE Optional Modules APC-VE, Introductory APC-VE, Introductory to Medium Upgrade APC-VE, Medium App Mode (TMSH Only, No Root/Bash) IP Intelligence, 1Yr, VE-200M/VE-25M IP Intelligence, 3Yr, VE-200M/VE-25M ONAP URL Filtering, 1Yr, VE URL Filtering, 3Yr, VE URL Filtering, VE-25M-1G, 500 Sessions, 1Yr URL Filtering, VE-25M-1G, 500 Sessions, 3Yr Inactive Modules

on VE1 GUI i can see the DNS TAB however i cannot see any DNS tab on VE 2 GUI .

But i can configure/access the DNS parameter on VE 2 via Module statistics . I obtained this license from our sales partner for testing purpose .

i tried to re-provision/provision the DNS module , but no luck .

Is their any way i can fix this issue ?

Thanks

I believe its a GUI problem rather than License. Is their any way i can fix this UP by my own .

That is very strange.

The licenses are not exactly the same but both has BIG-IP DNS VE Lab licensed so it should be enough.

Can you go into tmsh and give us the information from the following commands?

root@(bigipcore01)(cfg-sync Changes Pending)(Active)(/Common)(tmos) list sys provision

root@(bigipcore01)(cfg-sync Changes Pending)(Active)(/Common)(tmos) show sys provision

This will list what is present in the configuration and what resource allocation each module has been given.

I'm guessing you have already tried rebooting the device?

Perhaps performing a re-install of TMOS can also solve the issue. Just install the same version as VE1 on a different partition and reboot onto that partition.

Hi deepak

You have exaclty the same license, so you problem come from Provisioning.

Keep in mind that some part of system configuration are not sync, so you can have different configurations on both devices although it is a cluster.

On the Main tab, click System > Resource Provisioning then check that you provision DNS/GTM (nominal, as active member) follow this procedure:

• On the Main tab, click System > Resource Provisioning .
• For licensed modules (DNS), select either Minimum or Nominal, as needed.
• Click Submit.
• Reboot the system (if you still don't see the DNS tab configuration):
• On the Main tab, click System > Configuration > Device > General .
• Click Reboot.

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-system-essentials-11-6-0/7.html

Hope it's clear.

regards,

Hi Deepak,

I just spoke with a colleague who has the same problem as you.

I think this is a normal behavior due to the license.

VE LAB with Maximum allowed throughput rate licensed 10 Mbps have this behaviour (you are limited), check this topic:

https://support.f5.com/csp/article/K14810

second point did you check if both ve have Maximum allowed throughput rate licensed 10 Mbps ?

Another point, did you check if ressource (RAM and CPU) that you set to both VE are identical?

Regards

Thanks Phil , The License that you have sent it to me have fixed my issue ,however i would like to know what is the issue happening with my existing license . I got a pair of License from our sales team for testing purpose and one is working fine on one VE1 and other one not on VE2 .

Would you able to tell me what could be the possible cause for this issue so that next time when i will receive the license i should be able to check by my own .

I still think this is very strange since the only difference in the license is the SSL Orchestrator and the ONAP thing. I have tried to search for ONAP but I found no answer to what this is and I have contacted my SE here in Sweden for confirmation.

When I generated your license, I specifically chose not to include ONAP if this was causing issues. I also did not use LAB edition but a regular LTM 1G license.

The problem could be caused by the license being a LAB edition but then we would've seen the problem on both devices. I have seen problems before when using the LAB edition and I always tend to just use the LTM edition and add all modules to it (upgrade to BEST).

I'm glad we managed to solve the issue. :)