Forum Discussion
mali77_57143
Nimbostratus
NimbostratusF5 LTM creating VLANs etc
I have a VLAN SVI (VLAN5) on our cores. I created another VLAN (VLAN6) in the database which will be the virtual servers for VLAN5.
So basically users can hit the IP from VLAN6 which then will load balance to the servers in VLAN5.
I also created the VLAN5 on the F5 LTM. Now every time I try to create floating and no floating IP's on it for the VLAN5 I'm getting errors:
01070712:3: Caught configuration exception (0), Cannot get device index for VLAN5 in rd2 - ioctl failed: No such device - net/validation/routing.cpp, line 353.
What am I doing wrong here? I am assuming that the floating self IP on VLAN5 will be the default gateway for the servers that I want to load balance?
Users from different VLAN's access the IP on VLAN6 for example 10.1.6.11 and that will have two servers from VLAN5 10.1.5.20 and 10.1.5.30 in the pool.
mali77_57143Posted By nitass on 03/06/2013 03:30 PM
not sure if i understand correctly. you are saying that (1) client is coming from vlan250, (2) virtual server ip is not in vlan250 subnet (but listening on vlan250) and (3) server is in vlan5 (but vlan5 is not in bigip), aren't you?
so, how can bigip reach the server in vlan5 e.g. route through vlan250?
(1) client is coming from vlan250*** No VLAN250 has the SVI on the cores and I have it setup on the F5 LTM as well. Clients are on a totally different VLAN.
So Core Switch: 10.1.250.1 (svi)
F5: 10.1.250.241 (floating IP)
(2) virtual server ip is not in vlan250 subnet (but listening on vlan250)
*** Virtual Server IP is just another network I picked 10.1.6.0/24 as it was mentioned above that I do not need a VLAN for it. I just created a route on the cores to get to 10.1.6.0/24
"ip route 10.1.6.0 255.255.255.0 10.1.250.241"
(3) server is in vlan5 (but vlan5 is not in bigip)
*** VLAN5 has all the servers in it. And no I did not setup VLAN 5 on the F5 LTM, just the nodes.
- nitass
Employee
how can bigip reach the server in vlan5 e.g. route through vlan250? - mali77_57143Posted By nitass on 03/06/2013 03:41 PM
how can bigip reach the server in vlan5 e.g. route through vlan250?
When I run a trace on the F5 it looks like it is getting to the VLAN 5 via Management Interface. So does this mean that I have to create a route on the F5 to route to VLAN5 via VLAN250? - nitassWhen I run a trace on the F5 it looks like it is getting to the VLAN 5 via Management Interface.can server be reachable through tmm interface (selfip)? if so, can you try to set static route for server subnet through that tmm interface? application traffic should not be routed through management interface.
sol13284: Overview of management interface routing (11.x)
http://support.f5.com/kb/en-us/solutions/public/13000/200/sol13284.html
and under virtula server setting, can you try "snat automap"? - mali77_57143
Thank you I will try that tomorrow and post back the results :)
- mali77_57143
Ok I'm attaching the lay out of the network. Goal is to use 10.1.6.0/24 network as Virtual Servers and point to the nodes in VLAN 5. But for some reason traffic is going through the management interface and not the VLAN 250 interface:
traceroute to 10.1.5.233 (10.1.5.233), 30 hops max, 40 byte packets
1 10.1.200.249 (10.1.200.249) 0.915 ms 0.945 ms 0.994 ms
2 fxxxxxxxxxx.xxx.com (10.1.5.233) 0.233 ms * * - mali77_57143
Ok so I got rid of the whole config and restarted from the scratch and ran the wizard. Attached is the updated config. After I ran the wizard there was a route created via external VLAN which was the default route. It was not letting me use the RADIUS as the source IP was no longer the MANAGEMENT IP. So I had to delete the default route and create static entries for the two specific servers. I hope there is a better way to do this because I don't want to have to create 100's of static entries.
What am I doing wrong in this I just can not believe how un necessarily horrible F5's interface and configuration is as compared to Cisco content switches.
Eh not only that these forums load so slow and what is wrong with attaching files it takes 10 tries before I can finally attach a file here.
- nitasscan you post the virtual server configuration and routing to server?
tmsh list ltm virtual (name)
tmsh list ltm pool (name)
tmsh list net route (server ip/subnet) - mali77_57143Posted By nitass on 03/07/2013 03:21 PM
can you post the virtual server configuration and routing to server?
tmsh list ltm virtual (name)
tmsh list ltm pool (name)
tmsh list net route (server ip/subnet)
ltm virtual 10.1.6.11 {
destination 10.1.6.11:any
ip-protocol tcp
mask 255.255.255.255
pool VMWare_ViewPool
profiles {
tcp { }
}
translate-port disabled
vlans-disabled
}
-----------------------------------------------------------------------------------------ltm pool VMWare_ViewPool {
load-balancing-mode least-connections-member
members {
10.1.5.233:https {
address 10.1.5.233
session monitor-enabled
state up
}
10.1.5.252:https {
address 10.1.5.252
session monitor-enabled
state up
}
}
monitor https
}
---------------------------------------------------------------------------------------------net route 10.1.5.233 {
gw 10.1.25.1
network 10.1.5.233/32
}
net route 10.1.5.252 {
gw 10.1.25.1
network 10.1.5.252/32
} - nitassltm virtual 10.1.6.11 {
destination 10.1.6.11:any
ip-protocol tcp
mask 255.255.255.255
pool VMWare_ViewPool
profiles {
tcp { }
}
translate-port disabled
vlans-disabled
}can you try "snat automap" under the virtual server configuration?