For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

inchoates_23289's avatar
inchoates_23289
Icon for Nimbostratus rankNimbostratus
Nov 06, 2015

F5 changing syslog source IPs to Float IP

I am experiencing an issue where the source IP of syslog messages passed through the F5 are being changed to the Float IP. Multiple servers on their own vlans are load balanced on the F5. Those serve...
application delivery
design
f5
LTM
syslog
fcocquyt_104704's avatar
fcocquyt_104704
Icon for Nimbostratus rankNimbostratus
Nov 06, 2015

Hi,

 

I had the same issue when I was adding syslog servers recently on F5. The syslog traffic towards the new syslog servers was sent with the float IP as source while the existing syslog traffic was leaving with the management IP as source.

 

I resolved this by performing "kill -1 PID_syslogd " from bash shell. This will send syslogd a SIGHUP and cause it to re-read the config.

 

(you find the PID of syslogd via command "ps -e | grep syslogd" )

 

Hope this helps.

 

Kind regards,

 

Frederik