For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jamesdris's avatar
jamesdris
Icon for Nimbostratus rankNimbostratus
Mar 05, 2019

bigip DNS and LTM big3d version mismatch

My F5 DNS is running on bigip verison 12.1 - big3d version 12.1.3.7.0.0.2 LTM is running 11.6 - big3d version 11.6.2.0.0.495 To setup communication between them I need to upgrade big3d on LTM to 12...
application delivery
BIG-IP
BIG-IP DNS
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Mar 06, 2019

Simple rule which I follow,

LTM should have the same or higher big3d version than the GTM.

  • /shared/bin/big3d is the actual executable file which matters and should be the highest.
  • /usr/sbin/big3d is the default one which comes with the box.

Can you run the below and share us too,

/shared/bin/big3d -v

/usr/sbin/big3d -v

Also as you said big3d in shared/bin is latest, did you restart the big3d service components post your change.

And in parallel,

On the remote LTM - /config/big3d/client.crt - here the trusted device certificates would be stored, you should see the certificate of the gtm/dns.

On the GTM/DNS - /config/gtm/server.crt - the trusted server certificates would be stored, all your iquery setup ltm's cert's could be seen here.

Try running bigip_add again to get the certificate to establish iquery.