Forum Discussion
NimbostratusRadius authentication failing for MGMT
CirrocumulusI'm guessing that you're probably using: the default partition(Common) and route domain(0), you have a default route configured on the network section of the BigIP, and you have a default route for the management port. If that's the case, and you want authentication traffic to originate from the management port. you need to add static routes on the management port. By default BigIP prefers the default route for the default route domain(0) over the default one in the management port for traffic originating from the device like NTP, snmp traps, authentication, etc. If you want the traffic to originate from the management port's IP address you must add the static routes through the CLI.
K13284: Overview of management interface routing (11.x - 12.x) https://support.f5.com/csp/article/K13284
K3669: Overview of management interface routing (9.x - 10.x) https://support.f5.com/csp/article/K3669
Hope this helps!
NimbostratusHi Guys, I am using BIG-IP 12.1.2 Build 1.0.271 Hotfix HF1
wlopez i believe you're right on this. I see Partition Default Route Domain under the routing table with an ID of 0. Nothing in here routing to my NPS server.
I added the below route to point my NPS server out of the management interface, but not showing under "ip route show table main"
sys management-route NPS { gateway 10.24.18.1 network 10.29.22.104/32 } sys management-route default { description configured-statically gateway 10.24.18.1 mtu 1500 network default
config ip rule show
0: from all lookup local 245: from 10.24.18.11 lookup 245 32766: from all lookup main
