For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brandon's avatar
Brandon
Icon for Cirrostratus rankCirrostratus
Apr 11, 2014

route domains in lab environment

I am baseing my config of divert unencrypted traffic through and ips by Jason Rahm

 

I am running 11.4.1 3600 I am trying to put my nodes in route domain.

 

When i create the nodes

 

I am using the GUI, also using partations 192.168.2.43 %102 it takes the command but when i look at the config it shows in the deafult route domain.

 

ltm node /Voyager_Encrypt/insidenodeswebs2 { address 192.168.2.44 description encrypt } ltm node /Voyager_Encrypt/insidenodeswebs3 { address 192.168.2.45 description encrypt } ltm node /Voyager_Encrypt/insidenodeswebs4 { address 192.168.2.46 description encrypt }

 

4 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    Is /Voyager_Encrypt/ configured as the 'Partition Default Route Domain' ?

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    I made it the Default Route Domain but the real default route domain was there. Do i need to try to delete the route domain?

     

    The system just hide the RD 102, as this the default. Now it should show %0 if you create, say a VS in RD 0, as it's no more the default.

     

  • So i have another Question.

     

    I have this setup now. I would like to do a tcpdump on a ltm monitor. I have the exact monitor one a http and another a https monitor. the Http monitor works but the https monitor doesnt.

     

    My VS are both https and http. Using the vlan groups and the decrypt encrypt partitions, i believe the https monitor is getting encrypted twice. Just trying to veify. So i was wondering what would be the easiest way to do a tcp dump on a monitor.

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    You should do tcpdump from the default RD, in your case RD102.

     

    Try rdsh 102 and do tcpdump.

     

    http://support.f5.com/kb/en-us/solutions/public/6000/500/sol6546.html