For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
May 20, 2017

Max number of Interfaces VE v13 ESXi 5.1

Hi,

I tried to find info about max number of interfaces supported by listed configuration. I know it is working with 6 vNIC but need to increase to 8.

After that I have such error displayed when device is rebooted:

May 20 10:45:24 bigiptest emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all " - failed. -- Syntax Error:(/config/bigip.conf at line: 1510) single quotes are not balanced

I checked bigip.conf and here can't see anything strange at listed position:

security dos bot-signature "/Common/T H A T ' S  G O T T A  H U R T" {
    category "/Common/Exploit Tool"
    rule "headercontent:\"T H A T ' S  G O T T A  H U R T\"; useragentonly; nocase;"
    user-defined false
}    

rule "headercontent:\"T H A T ' S G O T T A H U R T\"; useragentonly; nocase;" is at 1510

After reboot all added interfaces were listed (via GUI or tmsh list interfeces) but no net interface declarations in big_base.conf

So I added them manually but after reboot still the same error.

I tried to follow advice with deleting mcpdb.* files for /var/db/ folder but those files are not present.

Any idea how to fix? Or maybe there is no way to have more than 6 vNIC in BIG-IP VE?

Piotr

2 Replies

  • I don't think the problem is not the number of interfaces, ESXi 5.1 allows for up to 10 on a normal VM, with the management interface it means you can have up to 9 TMM interfaces which I have used many times. See, https://www.vmware.com/pdf/vsphere5/r51/vsphere-51-configuration-maximums.pdf

     

    The reason they are not showing is that the configuration load has not completed successfully.

     

    As the rule is part of the standard 13.0.0 configuration, which I have tested on a default config and it loads correctly, it is either a bug or that somewhere earlier in the configuration is another quote.

     

    You could either open a case with F5 support or start removing chunks of config to see if you can narrow down where the problem is.