Forum Discussion
LTM + Link Controller Module big3d timeout and no VS list in wide ips configuration
LTM and LC are running in the same box. standalone. I have configured the Default Gateway Pool, the wilcard VS (enabled in the internal vlan only) and the default route using the Deafault Gateway pool. LTM show me the default gateway pool's members are up and forwarding traffic, outboundfconnections works fine, but wen i try to add a link or configure a wide ip got the followin issues: 1-no vservers listed in the wide ip configuration. 2.-after create a link the link and add the gateway_icmp monitor (actually any monitor), the link is markes as DOWN with the following message: Monitor /Common/gateway_icmp from : no reply from big3d: timed out
the BIG-IP version is 12.0.0
any help would be appreciated.
11 Replies
- Kevin_K_51432Historic F5 Account
Greetings Juan,
These articles may be a good place to start troubleshooting / resolving this issue?
SOL14967: Changing the IP addresses on a BIG-IP Link Controller system (11.x)
https://support.f5.com/kb/en-us/solutions/public/14000/900/sol14967.html
SOL13761: BIG-IP DNS and Link Controller require a unique VLAN and IP subnet for each configured link (11.x - 12.x)
https://support.f5.com/kb/en-us/solutions/public/13000/700/sol13761.html
Hope this helps,
Kevin
- Juan_Salinas_C_
Nimbostratus
Hi kevin, i've checked the SOL documents, but my config looks fine. This is my current config. X.Y.Z. is the ISP1 network and A.B.C. is the ISP2 network
TMSH-VERSION: 12.0.0 gtm datacenter /Common/Default_DC { } gtm link /Common/X.Y.Z.217 { datacenter /Common/Default_DC monitor /Common/gateway_icmp router-addresses { X.Y.Z.217 { device-name /Common/X.Y.Z.217 } } } gtm link /Common/A.B.C.233 { datacenter /Common/Default_DC monitor /Common/gateway_icmp router-addresses { A.B.C.234 { device-name /Common/A.B.C.233 } } } gtm global-settings metrics { metrics-collection-protocols { icmp } } gtm global-settings metrics-exclusions { addresses none } self ip config net self /Common/internet_300mbps { address A.B.C.234/29 allow-service all traffic-group /Common/traffic-group-local-only vlan /Common/External } net self /Common/internet-100mbps { address X.Y.Z.220/29 allow-service all traffic-group /Common/traffic-group-local-only vlan /Common/External2 } net self /Common/red_paso { address 192.168.1.254/24 traffic-group /Common/traffic-group-local-only vlan /Common/internal } LTM config ltm pool /Common/DEFAUT-GW { load-balancing-mode ratio-least-connections-node members { /Common/A.B.C.233:0 { address A.B.C.233 } /Common/X.Y.Z.217:0 { address X.Y.Z.217 } } monitor /Common/gateway_icmp } net route /Common/default-gw { network default pool /Common/DEFAUT-GW }
- Kevin_K_51432Historic F5 Account
Hi Juan, The most important item for this issue seems to be missing. The LC has to have knowledge of itself (as a server object).
Ensure those Self-IPs exists as the server object:
tmsh list gtm server
If not, try this procedure to correct that:
https://support.f5.com/kb/en-us/solutions/public/14000/900/sol14967.htmlupdategtmconfig
Kevin
- Juan_Salinas_C_
Nimbostratus
Hi kevin i ran those tmsh commands and i got: tmsh list gtm server returns emnty so i ran root@(f5lchost)(cfg-sync Standalone)(Active)(/Common)(tmos) modify gtm server f5lchost.cl addresses replace-all-with { A.B.C.234 X.Y.Z.220 { device-name f5.lchost.cl_1 } } 0107176c:3: Invalid GTM IP, the IP address A.B.C.234 already exists. root@(f5lchost)(cfg-sync Standalone)(Active)(/Common)(tmos) thanks
- Kevin_K_51432Historic F5 Account
What's odd is that command is simply "replacing" the existing, so it really shouldn't be complaining. It also works fine here:
list net self | grep address address 10.12.23.120/24 address 10.11.23.120/24 modify gtm server lc1.kevin.net addresses replace-all-with { 10.11.23.120 10.12.23.120 { device-name lc1.kevin.net }} modify gtm server lc1.kevin.net addresses replace-all-with { 10.11.23.120 10.12.23.120 { device-name lc1.kevin.net }}
Maybe try to load the configuration to see what happens?
tmsh load sys config tmsh load sys config gtm-only
- Kevin_K_51432Historic F5 Account
Oh, and the server object ends up looking like:
list gtm server gtm server lc1.kevin.net { addresses { 10.11.23.120 { device-name lc1.kevin.net } 10.12.23.120 { device-name lc1.kevin.net } } datacenter Default_DC monitor bigip virtual-server-discovery enabled }
- Kevin_K_51432Historic F5 Account
Ah, so there must an a server object already defined (somehow). I changed the server name, but used same IP addresses:
modify gtm server lc2.kevin.net addresses replace-all-with { 10.11.23.120 10.12.23.120 { device-name lc2.kevin.net } } 0107176c:3: Invalid GTM IP, the IP address 10.11.23.120 already exists.
- Juan_Salinas_C_
Nimbostratus
Kevin, it works!!! i found where was defined the self ip defined as a server and delete it.
after that i've created the gtm server (i don't know why it wasn't created when i provisioned) with this command:
tmsh create gtm server f5lchost.cl datacenter Default_DC addresses add {A.B.C.234 X.Y.Z.220}
and (this one)
tmsh modify gtm server f5lchost.cl addresses replace-all-with { A.B.C.234 X.Y.Z.220 { device-name f5lchost.cl_1 } }
thanks Kenvin...you saved my life!!!
- Juan_Salinas_C_
Nimbostratus
Kevin, it works!!! i found where was defined the self ip defined as a server and delete it.
after that i've created the gtm server (i don't know why it wasn't created when i provisioned) with this command:
tmsh create gtm server f5lchost.cl datacenter Default_DC addresses add {A.B.C.234 X.Y.Z.220}
and (this one)
tmsh modify gtm server f5lchost.cl addresses replace-all-with { A.B.C.234 X.Y.Z.220 { device-name f5lchost.cl_1 } }
thanks Kenvin...you saved my life!!!
- Kevin_K_51432Historic F5 AccountHi Juan, that's great news, thanks for letting us know and happy to help! Kevin
- Kevin_K_51432Historic F5 Account
Oh, don't forget to save it "tmsh save sys config gtm-only" =)
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com