Forum Discussion
Inline F5 not working
Scenario:
Two real servers behind the F5. Real server have the F5 private interface as their DG. VIP is setup for the pool with the two real servers. Forwarding VIP is setup for inbound and outbound traffic to the real server ip address.
Issue:
Client can reach the server pointing to the real server ip address, but not the virtual ip address. If SNAT is turned on, the VIP will work.
Any and all ideas are welcome. This is a test environment so changes can be made.
16 Replies
- jrmorris_151361
Nimbostratus
What appears to be happening is that the VIP is being advertised by the standby box. I have confirmed this by looking at the tables. The route to the real server, however, goes through the primary f5. That must be why turning SNAT on fixes the issue. How do I get the VIP to advertise out of the primary box and not the standby>
- nitass
Employee
How do I get the VIP to advertise out of the primary box and not the standby
can you check if virtual address is associated to correct traffic group?
e.g.
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual-address 172.28.24.10 ltm virtual-address 172.28.24.10 { address 172.28.24.10 mask 255.255.255.255 traffic-group traffic-group-1 } - jrmorris_151361
Nimbostratus
admin@(SJ505DCF51)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual-address 10.200.40.100 ltm virtual-address 10.200.40.100 { address 10.200.40.100 floating disabled mask 255.255.255.255 traffic-group none unit 0 }I show none, how do I assign the VIP to the default traffic class? Specifically in the GUI?
EDIT: I just found it. Is this something I will need to do for each VIP, or can I make each VIP I create default with this?
- nitass
Employee
I show none, how do I assign the VIP to the default traffic class? Specifically in the GUI?
this is for tmsh.
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) modify ltm virtual-address 172.28.24.10 traffic-group ? Specifies the traffic group for the virtual address. The default traffic group is inherited from the containing folder.for gui, it is at local traffic > virtual servers > virtual address list.
- nitass
Employee
Is this something I will need to do for each VIP, or can I make each VIP I create default with this?
i understand it is a bug. if parent folder's traffic group is correct, it would not be an issue.
sol14104: The traffic group definition may be missing from the '/ ' and '/Common' partitions
http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14104.html - jrmorris_151361
Nimbostratus
This appears to have resolved my issue. I will be upgraded to 11.4.1 HF3 next week to address this bug. Thanks for your help.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com