For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Angelo's avatar
Angelo
Icon for Nimbostratus rankNimbostratus
Dec 11, 2012

Radius configuration

Hi   I need to load balance 5 radius servers through the F5. I setup the VIP but for some reason it's not working. this is my virtual server...   tm virtual vs_cisco_ise {   destination...
config
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Dec 13, 2012

OK. By site i assume you mean website? That would use a different Virtual Server and perhaps SNAT? Regardless, I assume you are saying that proves the routing to the server from the F5 is good yes?

 

 

If so, it's time to do some tcpdumps I'd say. Can you do a tcpdump on the 'external' VLAN that the traffic enters the device through and then another on the 'internal' VLAN that the traffic should leave the device through. Actually, do it on both like so: tcpdump –i all –nn –v –X –s0 port 1812 and see what's what. If you'd rather save it to a file and use Wireshark for analysis, use this to create a file you can pull off the device: tcpdump –i all -nn –w /tmp/radiuscapture –v –s0 port 1812.