Forum Discussion
iQUERY not in sync
On my GTM system a particular LTM( server) VIP is being discovered as down( red color),hence all VIPs configured on that LTM are visible as down(Red) while other LTMs are getting discovered as green via iquery on GTM. What might be the issue for that particular LTM for not getting sync with GTM?
SOFTWARE IS 11.5.X
- ebenNimbostratus
- Is the device (LTM) certificate valid? the expiry of the cert.
- Ensure port-lockdown is set to permit tcp 22 and 4353. between GTM and LTM
- do a tailf /var/log/gtm to see the exact root cause.
HTH.
- Mayank_ShuklaAltostratus
1.Is the device (LTM) certificate valid? the expiry of the cert.>>>>Valid cert 2.Ensure port-lockdown is set to permit tcp 22 and 4353. between GTM and LTM>>>>Allow default 3.do a tailf /var/log/gtm to see the exact root cause.
On checking logs can see below messages multiple times:-
Connection in progress to Connection complete to . Starting SSL handshake
What might be the issue ?
- ebenNimbostratus
it will helpful to see more from the Logs. did ssl handshake complete? I can't tell from the two lines of logs you shared.
- Leonardo_SouzaCirrocumulus
By the default, the GTM will base the virtual server status using either server or monitor. In 13.0.0 (should something simillar in 11.5.X, but GTM insted of DNS :P), you can check this setting in DNS > Settings > GSLB > General > Virtual Server Status.
If the iquery is down, it means the server object will be down, and consequently all virtual servers under that server will be down.
If this connection never worked before, you are probably missing the bigip_add command. Check this solution for details:
https://support.f5.com/csp/article/K13312
If have worked before, an iqdump would be my first troubleshoot step. Check this solution for multiple troubleshoot options:
https://support.f5.com/csp/article/K13690
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com