For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gorf_33479's avatar
Gorf_33479
Icon for Nimbostratus rankNimbostratus
Feb 23, 2011

LTM1600 - How to alter the default 'external' VLAN tag

Greetings all, for quite some time now I have used the default 'external' VLAN that came setup on our 1600's for the external VIPs. We are making some infrastructure changes, and the problem is that I want to alter that VLAN's tag from the default of 4093 to something else so that I can actually begin using it as a tagged interface (right now it is untagged on the switch).

 

 

When I go to alter the VLAN, it won't let me. Both the command line and web interface won't let me make that change. I don't want to have to delete it since it would require me to go through and alter all our Virtual Servers that use it. Is there any kind of work around for this?

 

 

Thanks!

 

config
design

9 Replies

  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Feb 23, 2011
    I'll wait for others who have done so to comment here, but I would expect the right thing would be to manually edit the config file
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 23, 2011
    I think Chris is correct. The simplest solution should be to edit the bigip_base.conf and reload the config.

     

     

    Aaron
  • Gorf_33479's avatar
    Gorf_33479
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2011
    HYeah I tried that as well. When I try to load the new config I get:

    [gorf@lb2:Standby] config  vi bigip_base.conf
[gorf@lb2:Standby] config  b load
Reading configuration from /defaults/config_base.conf.
Reading configuration from /config/bigip_base.conf.
Reading configuration from /config/bigip_sys.conf.
Reading configuration from /usr/bin/monitors/builtins/base_monitors.conf.
Reading configuration from /config/profile_base.conf.
Reading configuration from /config/daemon.conf.
Reading configuration from /config/bigip.conf.
Reading configuration from /config/bigip_local.conf.
Loading the configuration ...
BIGpipe VLAN operation error:
   01070290:3: Unsupported change to the vlan tag for vlan external.  Please delete and recreate instead.

    Hence the question about work arounds.
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 23, 2011
    Before I posted, I tested on 10.2.1 and it worked. Which version are you testing on? I'll see if I can find info on this.

     

     

    Thanks, Aaron
  • Gorf_33479's avatar
    Gorf_33479
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2011
    And for reference, I am changing bigip_base from:

    
vlan external {
   tag 4093
   interfaces 1.2
}

    to:

    vlan external {
   tag 2
   interfaces tagged 1.1
}
  • Gorf_33479's avatar
    Gorf_33479
    Icon for Nimbostratus rankNimbostratus
    Feb 23, 2011
    Posted By hoolio on 02/23/2011 04:17 PM

     

    Before I posted, I tested on 10.2.1 and it worked. Which version are you testing on? I'll see if I can find info on this.

     

     

    Thanks, Aaron

     

     

    BIG-IP 9.4.7 Build 320.1 Final
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 24, 2011
    I think changing the VLAN tag was supported starting in 10.0 as noted in CR33990 and the 10.0.0 release notes.

     

     

     

    10.0.0 release notes:

     

    http://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnotes10_0_0.html

     

     

    Editable VLAN tags

     

    With this release, you can now change the VLAN tag that you initially assigned to a VLAN without having to delete and then recreate the VLAN.

     

     

     

    Until then you'll need to remove references to the VLAN, delete it and recreate it with the updated tag. You could simplify this process slightly by renaming the bigip.conf, loading the config, editing the bigip_base.conf, renaming the bigip.conf back and reloading the config. Note I haven't tested this, but it seems like it should work.

     

     

    Aaron
  • Gorf_33479's avatar
    Gorf_33479
    Icon for Nimbostratus rankNimbostratus
    Feb 24, 2011
    lame. Well maybe this is just a good excuse to consider updating to the 10.x firmware.

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 24, 2011
    Yep... the request was around for ages and was finally implemented. There are a lot of great reasons to upgrade to 10.2.1. This is one of them.

     

     

    Aaron