Hi, Below is the config of virtual, pool and snatpool on F5 that is in production. need assitance. snatpool vlan12_sp { member 63.25.36.7 } pool reversenpath_vlan12_pl { member 63.25.36.1:any } virtual reversenpath_vlan20_vs { snatpool vlan12_sp pool reversenpath_vlan25_pl destination any:any mask 0.0.0.0 profiles fastl4_reversenpath_default {} vlans 20 enable Internet is not working on the servers connected to vlan 20. Thanks - genseek

is snatpool and pool really correct? one is vlan12 but the other one is vlan25. virtual reversenpath_vlan20_vs { snatpool vlan12_sp <<<<< pool reversenpath_vlan25_pl <<<<< destination any:any mask 0.0.0.0 profiles fastl4_reversenpath_default {} vlans 20 enable

Sorry about that...a typo..correct config is as below virtual reversenpath_vlan20_vs { snatpool vlan12_sp pool reversenpath_vlan12_pl destination any:any mask 0.0.0.0 profiles fastl4_reversenpath_default {} vlans 20 enable

configuration looks ok to me except vlan name. anyway, i think it might be a typo. have you tried to capture packet? tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host 63.25.36.7 x.x.x.x is client ip

Will generate the dump and let you know. meanwhile, want some clarifications, A) This virtual has no VIP, how will then the client access this virtual ? B) Assuming, a client is sending a request to this virtual,what will the commd, do to the client request.? genseek

A) This virtual has no VIP, how will then the client access this virtual ? i understand you are asking about wildcard virtual server e.g. any:any. the wildcard virtual server accepts traffic destined to any ip address. anyway, you know we have to make sure client traffic passes through bigip e.g. routing. B) Assuming, a client is sending a request to this virtual,what will the commd, do to the client request.? you may use "b conn" command to display active entry in connection table.

F5 Issue | DevCentral

39 Replies

genseek_32178
Nimbostratus
Feb 16, 2012
So what then is the used of the below pool, mapped to the wild card VS.

pool reversenpath_vlan12_pl { member 63.25.36.1:any }
nitass
Employee
Feb 17, 2012
So what then is the used of the below pool, mapped to the wild card VS.

pool reversenpath_vlan12_pl { member 63.25.36.1:any } bigip will send traffic to destination address via pool member address (using pool member as gateway).
genseek_32178
Nimbostratus
Feb 19, 2012
in the below tcpdump command, i want to capture only 100 packets. what is the switch to be inserted?

tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host 63.25.36.7
nitass
Employee
Feb 20, 2012
-c Exit after receiving count packets.
genseek_32178
Nimbostratus
Feb 20, 2012

Following pool and monitor is configured, as can be seen below.

pool asm_443_pl {

monitor all https_asm_mn

members {

172.20.60.10:https {}

172.20.60.12:https {

down

}

172.20.60.25:https {

down

monitor https_asm_mn {

defaults from https_default

dest *:https

send "Get /HeartBeat/Probe.html HTTP/1.0\r\n\r\n"

As can be seen, few nodes in the pool are showing down and few UP. Any thoughts
nitass
Employee
Feb 20, 2012
As can be seen, few nodes in the pool are showing down and few UP. Any thoughtsAaron has written very good health monitor troubleshooting guide.

Troubleshooting Ltm Monitors by Aaron

http://devcentral.f5.com/wiki/AdvDesignConfig.TroubleshootingLtmMonitors.ashx

hope this helps.
genseek_32178
Nimbostratus
Feb 21, 2012

where does the dump get stored?

/var/tmp/output.pcap host x.x.x.x

how to access the output.pcap file from the ltm?

how to get the pcap file from ltm to my local host?
JRahm
Admin
Feb 22, 2012
tcpdump -r/var/tmp/output.pcap to read the file at the command line. To copy to a different machine, you can use scp or pscp

pscp root@:/var/tmp/output.pcap .
nitass
Employee
Feb 23, 2012
thanks Jason!