For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eneR_159774's avatar
eneR_159774
Icon for Nimbostratus rankNimbostratus
May 06, 2019

GTM/DNS and LTM - iQuery via Mgmt Ort Self-ip

Hey Guys, is it possible to connect the GTMs and LTMs (for dataexchange via iquery) via the mgmt interface and is there a best practice to do this via mgmt interface OR a configured self-ip?  
application delivery
BIG-IP DNS
iquery
mgmt
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
May 07, 2019

You can technically use the Management interface and found useful to run 

gtm_add
targetting the management interface as SSH is required, and often blocked on production networks, to perform certificate swap and form the trust between BIG-IP devices.

You can also add multiple IP addresses into a 

Server
configured on the F5 DNS/GTM and an iQuery connection will attempt to be established to all IP addresses from each F5 DNS/GTM device. Only one iQuery connection between each device is actually required but I would avoid having failing iQuery connections if you can help it.