For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SeanMcGuire_158's avatar
SeanMcGuire_158
Icon for Nimbostratus rankNimbostratus
Oct 10, 2016

BigIP LTM iQuery visibility?

BigIP LTM: Can you view iquery from the LTM?

 

LTM's are on 11.4.1 HF5.

 

I have some questions regarding the iquery function between LTM and GTM:

 

1. Is there any way to run a command from CLI on the LTM to show the status of any iquery connections to GTM's? (on the GTM it is "tmsh show /gtm iquery all"

 

2. If so, what is the minimal code that the LTM has to run to support this?

 

3. Why doesn't the GTM have the ability to view the status of iquery links via the GUI?

 

4. Can the GTM be configured to automatically retry to add those that have gone to a not-connected state?

 

5. Can a not-connected iQuery state be alarmed on within iHealth Diagnostics?

 

BIG-IP
devops

4 Replies

  • Shaun_Simmons1's avatar
    Shaun_Simmons1
    Icon for Altostratus rankAltostratus
    Oct 12, 2016

    You can test iquery between devices with iqdump

     

    You should get an XML output if it is successful. IF you get a SSL failed type message the trust is not setup correctly.

     

  • Shaun_Simmons1's avatar
    Shaun_Simmons1
    Icon for Altostratus rankAltostratus
    Oct 12, 2016

    Or you if you want to watch the iquery you can perform a tcpdump

     

    tcpdump -nli 0.0 port 4353

     

  • Shaun_Simmons1's avatar
    Shaun_Simmons1
    Icon for Altostratus rankAltostratus
    Oct 12, 2016
    1. and 2. Answered above.
    2. Via Gui --> Datacenter: If you setup the device as a BIGIP device and configure a "big3d" monitor, if iquery fails, the GTM or LTM will be marked down.
    3. The GTM continuously tries to mark the device up. You can watch the fails by tailing the log file: tail -f /var/log/gtm
    4. I'm going to guess this one: No, because iHealth will not know the state or configuration of your other devices. (Ya'll from the forum, please feel free to correct me)