Forum Discussion

Paulo_Vinicius_'s avatar
Paulo_Vinicius_
Icon for Altocumulus rankAltocumulus
Feb 13, 2023

Implementing new IP forwarding virtual servers using IP Address Lists (shared objects).

Hi Dear F5 DevCentral community!   We have a client that already uses IP forwarding virtual servers using as a source an IP Address /32, especifying exactly the source that these IP forwarding virt...
application delivery
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP

Hi Paulo_Vinicius_ ,

There are some limitations when mixing resources that use the regular address definition and the newer address list feature. One I have found is you can't mix a standard single address and a list where they overlap, which I thought causes an error upon saving. Double check that all your VIPs use the appropriate netmask values if you're truly wanting to listen to "any" IP.

Maybe you can paste a screenshot or a text snippet of the configuration?

Here are some other resources which may help:

Paulo_Vinicius_'s avatar
Paulo_Vinicius_
Icon for Altocumulus rankAltocumulus
Feb 14, 2023

Hi,

 

Unfortunately I can't share the configuration of the client.

 

But we scheduled a maintenance window to configure the new Virtual Servers on the client environmet, like I've described above the tests from our laboratory, where we could reproduce the issue and perform the correction and I'll reply here if it solved or not the issue.

 

Thank you!

  • Paulo_Vinicius_'s avatar
    Paulo_Vinicius_
    Icon for Altocumulus rankAltocumulus
    Feb 17, 2023

    In the MW with the client, the issue was resolved only when we configured the sourde address as a single IP address /32 and the destination Any (0.0.0.0/0). As they already had others IP forwarding virtual servers working properly.

     

    But, differing from our lab, the client use partitions, and the Rouite Domain ID of the partition is 10. The Common is 0.

     

    The IP forwarding virtual servers are placed in the partition with the ID 10.


    Whe in the partition with the route domaind ID 10, the BIG IP adds automtically the route domaind ID 10 into the IP address configured into the address lists created:

    For example in one address list with two IPs, they were like this:

    172.20.20.1%10/32

    172.20.20.100%10/32

     

    When we configure the IP forwarding virtual server using this list as source address, and configure the 0.0.0.0/0 in the destination, when we update the configuration of the VS the BIP IP adds automatically the route domain from partition Common and it changes to 0.0.0.0%0/0. We tried to add the route domain 10, configuring the destination as 0.0.0.0%10/0 so, the route domains will match between source address into the address list and the destionation mask (any), but the BIP IP system changes it again to 0.0.0.0%0/0.

     

    So, we conclude that it could be a misbehaviour from BIG IP and openned a support case.