For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nikson_M's avatar
Nikson_M
Icon for Cirrus rankCirrus
Aug 16, 2019
Solved

GTM not detecting the service as up.

Folks, We have recently provisioned the GTM module in one of our VE device. We wanted to configure a test environment here. The VE had the valid licenses for the GTM.   However, the server show...
application delivery
BIG-IP DNS
  • DanS92's avatar
    DanS92
    Aug 29, 2019

    You can't just have anything as the Prober Pool Member. It has to be the server for the GTM. Do these steps exactly:

     

    • Create Server for the GTM. So the device that you sent this screenshot from, we'll pretend it's called f5gtm1.com. You'd create a server named f5gtm1. This server will be BIG-IP System (Single). You need to give it an Address, Translation, and Data Center. Leave Virtual Server Discover Disabled.
    • Then create Prober Pool.
DanS92's avatar
DanS92
Icon for Cirrus rankCirrus
Aug 19, 2019

This could be due to a large number of reasons... Two of the more common reasons are:

  1. Port TCP 4353 is blocked on a Firewall from the GTM Self IP to the IP of the remote device
  2. Remote device's Device Certificate hasn't been imported on the GTM under DNS > GSLB > Servers > Trusted Server Certificates

 

You should see some error logs in System > Logs > GSLB that will point you in the right direction

  • Nikson_M's avatar
    Nikson_M
    Icon for Cirrus rankCirrus
    Aug 20, 2019

    Thanks Dan!!

     

    port TCP 4353, I believe is the iQuery port which we should not be concerned here about. The reason is that all we are doing is adding Generic hosts to this DNS.

     

    In System -> Logs --> GSLB we are not able to see any logs.

     

    I do feel that there is some basic steps that we have not setup, just not able to understand what else could be needed.