Forum Discussion

Renato's avatar
Renato
Icon for Altostratus rankAltostratus
Jan 29, 2021

Geneve tunneling for AWS GWLB

Hi!

 

We are trying to set up a Geneve tunnel between AWS GWLB and BIG-IP VE AdvWAF, but the BIG-IP is returning reset with cause "RST from BIG-IP internal Linux host".

 

Has anyone ever used this before?

 

Thanks!

Renato A. Ferreira

ASM Advanced WAF
AWS
cloud
geneve
sdn
  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for MVP rankMVP
    Jan 29, 2021

    Hello Renato.

     

    This message is displayed when:

    "The BIG-IP system receives a RST acknowledgement (ACK) in response to terminating a service check."

    REF - https://support.f5.com/csp/article/K13223

     

    Have you checked that your self-ip is allowing that communication?

    REF - https://support.f5.com/csp/article/K17333

    I recommend you to follow this guidelines:

    https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-0-0/1.html

     

    Regards,

    Dario.

    • forsan's avatar
      forsan
      Icon for Altostratus rankAltostratus
      Apr 30, 2021

      Hi,

      ​

      I ran into this issue as well. I was running multi nic with this configuration:

       

      sys db provision.1nic value forced_enable

      ​

      set this to disabled.

      setdb provision.1nic disable

      ​

      This is a BUG.

      ​

      Br

      Andréas

  • forsan's avatar
    forsan
    Icon for Altostratus rankAltostratus
    Mar 29, 2021

    Hi Renato,

    ​

    did you manage to integrate F5 and AWS GWLB?

    ​

    Br

    Andréas

    ​