For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Craigus_200691's avatar
Craigus_200691
Icon for Nimbostratus rankNimbostratus
Feb 25, 2016

No AD authentication after upgrading to BigIP-V12HF1

Hi,   I am in the middle of an upgrade of our BigIP units (HA pair) from 11.6HF4 to 12HF1   the units have taken the previous configuration and did so without any errors, post upgrade we are u...
application delivery
BIG-IP
LTM
security
ssmbs_284761's avatar
ssmbs_284761
Icon for Nimbostratus rankNimbostratus
Feb 08, 2019

Thanks for the answer. I did a capture and sent it to support, have not yet heard back. I can look at the management port on the one that is online (this is a HA pair):

 

root@(dc2-bigip-test)(cfg-sync Disconnected)(Active)(/Common)(tmos) list /sys management-ip sys management-ip 10.10.29.60/24 { description configured-statically

 

And this is the management port of the one that is offline (that we are working on).

 

root@(dc1-bigip-test)(cfg-sync Disconnected)(ForcedOffline)(/Common)(tmos) list /sys management-ip sys management-ip 10.10.29.59/24 { description configured-statically }

 

So, they at least exist! Looking at the pcap file I generated/sent, I can at least see LDAP communication between our BigIP and the domain controller (for our AD) that says, "success".

 

  • ssmbs_284761's avatar
    ssmbs_284761
    Icon for Nimbostratus rankNimbostratus
    Feb 08, 2019

    I did just now hear back from support:

     

    the BIG-IP is using TMM interfaces to communicate to the configured LDAP AD servers and we don't see any issue in term of connectivity between them.

     

    It seems that is not the problem, but thanks for the information.