For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hschlecht's avatar
hschlecht
Icon for Altostratus rankAltostratus
Nov 09, 2019

DHCP APM iApps template

Hello,

 

I try to use the DHCP APM iApps. Each time the AP execute the irule imported with the iApps , I receive the followinf error message :

 

Nov 9 12:44:33 TOTOTOT err tmm6[5516]: 01220001:3: TCL error: /Common/ir-apm-dhcp-policy <ACCESS_POLICY_AGENT_EVENT> - Command must start with connect.invalid connection handle (line 1)    invoked from within "close $cid "    ("foreach" body line 10)    invoked from within "foreach {svr} $dhcp_svrs {     set sts ""     if {[catch {connect -protocol UDP -myport 67 -status sts -idle 30 "${svr}:67"} cid] ||         ($cid ..."    ("DHCP_req" arm line 133)    invoked from within "switch [ACCESS::policy agent_id] {  "DHCP_req" {   ACCESS::session data set session.dhcp.address "" ; #moriturus te saluto    set e ""   if {([set..."

 

The main error seem to be the

 

Command must start with connect.invalid connection handle (line 1)    invoked from within "close $cid "

 

Does somebody have an idea how tioo solve the problem, and have somebody ised this iApss to allow the APM module use dhcp scope on external DHCP server ?

 

Brgds

 

application delivery
BIG-IP Access Policy Manager (APM)
iRules
Moriturus

4 Replies

  • Simone_P_'s avatar
    Simone_P_
    Icon for Nimbostratus rankNimbostratus
    Apr 14, 2020

    Hi,

    I have your same issue, did you manage to solve it in any way?

    I followed the guide in all the steps.

     

    I am using the iApp version 3d+ of 2018-10-10.

     

    My version of TMOS is 14.1.2.2.

     

    Regards

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      May 01, 2020

      running 14.1.2.3 now and build according to article.

      i dont get this error, i can even see that the request i send to DHCP server which does a valid DHCP offer.

      May 1 15:03:34 bigip-01 info tmm1[12661]: Rule /Common/ir-apm-dhcp-policy <CLIENT_ACCEPTED>: 166 requested lock on apm-dhcp-10.3.22.62-31 but 148 has lock
May 1 15:03:40 bigip-01 info tmm2[12661]: Rule /Common/ir-apm-dhcp <CLIENT_ACCEPTED>: 10.3.22.86_2: about to parse 317-byte UDP msg from 10.3.0.5:67 for DHCP
May 1 15:03:40 bigip-01 info tmm2[12661]: Rule /Common/ir-apm-dhcp <CLIENT_ACCEPTED>: 10.3.22.86_2: dhcp_state=0, parsed 317-byte DHCP type-2 msg for a8fff09b from 10.3.0.5 via 10.3.0.5
May 1 15:03:40 bigip-01 info tmm2[12661]: Rule /Common/ir-apm-dhcp <CLIENT_ACCEPTED>: 10.3.22.86_2: yiaddr=10.3.22.170, lease=14400, rebind=12600, renew=7200, opt_msg=''
May 1 15:03:40 bigip-01 info tmm2[12661]: Rule /Common/ir-apm-dhcp <CLIENT_ACCEPTED>: parthian 10.3.22.86_2: 0 keys in dhcp-chute-10.3.22.86
May 1 15:03:40 bigip-01 info tmm2[12661]: Rule /Common/ir-apm-dhcp <CLIENT_ACCEPTED>: 10.3.22.86_2: sending DHCPREQUEST(s) to 10.3.0.5

      can you check with tcpdump or the the /var/log/ltm log if a DHCP request is send?

      • Simone_P_'s avatar
        Simone_P_
        Icon for Nimbostratus rankNimbostratus
        May 08, 2020

        Hi boneyard,

        Thank you for your answer but with the tcl error the irule execution fails and therefore I have no dhcp request.

        I opened a ticket and the support made me change the version of the iApp (v3g) and now the dhcp relay works correctly.

         

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Nov 12, 2019

    i assume this about this iApp?

     

    https://devcentral.f5.com/s/articles/APM-DHCP-Access-Policy-Example-and-Detailed-Instructions

     

    version 3d+, 2018-10-10 ?

     

    you followed it as described in the article, added IP address in variables as suggested?

     

    can you share your TMOS version?