For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sergio_Harnais_'s avatar
Sergio_Harnais_
Icon for Nimbostratus rankNimbostratus
Nov 28, 2006

GTM not seeing Virtual Server

Wasn't sure where to turn, I have already opened a case with F5 but have not gotten an answer. I am implementing 3 new GTM's version 9.2.4 and have them connected to 2 LTM's running version 9.1. Here is the problem, my GTM are not discovering the virutal servers on the LTM's. All the LTM's are green and if I do an iqdump traffic flows beautifully. There is a firewall in between the units but I have confirmed, many many times that port 22 and 4353 are allowed bidirectionally. Before you ask, I have tried all 3 different discovery methods, Enabled, Enabled (no Delete) and One Time Discovery. I have also rebooted the systems in the hope that it would correct it. Has anyone ever have this problem or at least heard of this before. Time is running out and I really don't want to manually create all the VIP's.
dev
devops
iControl
v9

4 Replies

  • sachin_thatte_8's avatar
    sachin_thatte_8
    Icon for Nimbostratus rankNimbostratus
    Dec 15, 2008
    I came across the following excerpt while reading Deb's "GTM, know thyself" article, your problem may be related.

     

     

    It is possible to use the GTM management IP address when defining the IP addresses for the server address list. For remote device monitoring to succeed, however, you must use the GTM Self IP addresses, not management IP addresses. If you configure the GTM object using the management IP addresses instead, GTM will not be able to monitor virtual servers and other remote objects, and will mark all objects red/unavailable.

     

  • Sergio_Harnais_'s avatar
    Sergio_Harnais_
    Icon for Nimbostratus rankNimbostratus
    Dec 01, 2006
    CK,

     

    We did add the BigIP's via the big3d_install and the BigIP_add method. If I do an iqdump directed from any of my GTM's to any of the BigIP's i do get a stream of traffic and everything looks good, which is what is driving me up the wall. By all intents and purposes is should be working. I have tried deleting the BigIP servers, rebooting and then readding from scratch and still nothing. Do you know, or anyone out there, of maybe a particular setting on the BigIP's that would be blocking the discovery? There is a firewall in between these devices but ports 22 and 4353 TCP are all open.

     

     

    Thanks,

     

    Serge Harnais
  • Kevin_Nail's avatar
    Kevin_Nail
    Icon for Nimbostratus rankNimbostratus
    Nov 29, 2006
    Hi,

     

     

    I have seen this behavior happen when the LTM's have not been added via the bigip_add command from the GTM.

     

     

    You should also ensure that the iquery daemon is up to date by running the big3d_install command from the GTM

     

     

    GTM> big3d_install x.x.x.x

     

     

    Also you might want to check the iquery communication between the GTM and LTM by using the iqdump command.

     

    so running

     

    GTM> iqdump x.x.x.x.

     

     

    should reveal some insight. If the LTM is communicating properly you should see it here.

     

     

    Hope this helps,

     

    Kevin