For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Renato's avatar
Renato
Icon for Altostratus rankAltostratus
Jan 29, 2021

Geneve tunneling for AWS GWLB

Hi!

 

We are trying to set up a Geneve tunnel between AWS GWLB and BIG-IP VE AdvWAF, but the BIG-IP is returning reset with cause "RST from BIG-IP internal Linux host".

 

Has anyone ever used this before?

 

Thanks!

Renato A. Ferreira

ASM Advanced WAF
aws
cloud
geneve
sdn

3 Replies

  • forsan's avatar
    forsan
    Icon for Altostratus rankAltostratus
    Mar 29, 2021

    Hi Renato,

    ​

    did you manage to integrate F5 and AWS GWLB?

    ​

    Br

    Andréas

    ​

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Jan 29, 2021

    Hello Renato.

     

    This message is displayed when:

    "The BIG-IP system receives a RST acknowledgement (ACK) in response to terminating a service check."

    REF - https://support.f5.com/csp/article/K13223

     

    Have you checked that your self-ip is allowing that communication?

    REF - https://support.f5.com/csp/article/K17333

    I recommend you to follow this guidelines:

    https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-0-0/1.html

     

    Regards,

    Dario.

    • forsan's avatar
      forsan
      Icon for Altostratus rankAltostratus
      Apr 30, 2021

      Hi,

      ​

      I ran into this issue as well. I was running multi nic with this configuration:

       

      sys db provision.1nic value forced_enable

      ​

      set this to disabled.

      setdb provision.1nic disable

      ​

      This is a BUG.

      ​

      Br

      Andréas