Forum Discussion

mrshaggy_169440's avatar
mrshaggy_169440
Icon for Nimbostratus rankNimbostratus
Jul 28, 2015

iRules Data Group List : No Access

Hi All,

 

I've just upgrade my BIG-IP for about one month ago, from v10 into v 11.5.3. After upgrading, all system was running well without any user complain.

 

But today, i've just realise that I had a problem when trying to open data group list. Everytime I try to open data group, the result show "no access". I already tried to create a new data group list, an when I try to open it it shown the same "no access" result. Below the capture:

 

 

Did anybody ever met a problem like this before? And what is the solution for this?

 

Thanks before for your help..

 

regards, Ahmad

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
LTM
security
  • mrshaggy_169440's avatar
    mrshaggy_169440
    Icon for Nimbostratus rankNimbostratus
    Jul 28, 2015

    Hi Damian,

     

    My user profile is administrator. I can create a new data group, but also I can't open this new data group list that I just created.

     

    Thanks..

     

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jul 29, 2015

    For reference, we've just found the issue also occured on all virtual and hardware appliances where the upgrade was done from 11.3 to 11.5.3 ; from 11.5.1 to 11.5.3.

    As a workaround, while you're waiting for the ENG hotfix, you can use the 

    /config/bigip.conf
    file to apply your changes, and make them effective by issuing the 
    tmsh load sys config
    command.

  • Joe_M's avatar
    Joe_M
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015

    Does anyone have a Bug ID or a SOL for this?

     

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015

    Bug ID 524577, fixed in Hotfix-BIGIP-11.5.3.1.37.167-HF1-ENG. I hope they will add the same fix to the next public HF.

     

  • Joe_M's avatar
    Joe_M
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015

    Thanks. Just got that from support as well. The other work around is to use the TMSH commands to list and manipulate the data groups.

     

    List: list ltm data-group internal [data group name]

     

    Add or Delete: modify ltm data-group internal [data group name] records [add/delete] { [records] }

     

    After modifying them, you will need to save the config with “save sys config”

     

  • Joe_M's avatar
    Joe_M
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015

    Oh wait... Support gave me this Bug ID: 470184-1

     

  • mrshaggy_169440's avatar
    mrshaggy_169440
    Icon for Nimbostratus rankNimbostratus
    Aug 06, 2015

    I also already contact to F5 support. Support engineer told that this problem is a bug:

     

    "The issue is a known bug with ID 517421 in 11.5.3 and resolved by viewing and editing the objects through tmsh. This is indicated in the 11.5.3 Release Note as shown below:

     

    ID 517421 Navigate to Local Traffic :: iRules :: Data Group List and click on any existing objects. User will see a No Access error, instead of the Data Group object. Data Group objects exist. User will be unable to edit or view Data Group objects in the Configuration Utility. Workaround: View and edit objects in tmsh."