Forum Discussion

Brandon's avatar
Brandon
Icon for Cirrostratus rankCirrostratus
Apr 11, 2014

route domains in lab environment

I am baseing my config of divert unencrypted traffic through and ips by Jason Rahm

 

I am running 11.4.1 3600 I am trying to put my nodes in route domain.

 

When i create the nodes

 

I am using the GUI, also using partations 192.168.2.43 %102 it takes the command but when i look at the config it shows in the deafult route domain.

 

ltm node /Voyager_Encrypt/insidenodeswebs2 { address 192.168.2.44 description encrypt } ltm node /Voyager_Encrypt/insidenodeswebs3 { address 192.168.2.45 description encrypt } ltm node /Voyager_Encrypt/insidenodeswebs4 { address 192.168.2.46 description encrypt }

 

4 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    Is /Voyager_Encrypt/ configured as the 'Partition Default Route Domain' ?

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    I made it the Default Route Domain but the real default route domain was there. Do i need to try to delete the route domain?

     

    The system just hide the RD 102, as this the default. Now it should show %0 if you create, say a VS in RD 0, as it's no more the default.

     

  • So i have another Question.

     

    I have this setup now. I would like to do a tcpdump on a ltm monitor. I have the exact monitor one a http and another a https monitor. the Http monitor works but the https monitor doesnt.

     

    My VS are both https and http. Using the vlan groups and the decrypt encrypt partitions, i believe the https monitor is getting encrypted twice. Just trying to veify. So i was wondering what would be the easiest way to do a tcp dump on a monitor.

     

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus

    You should do tcpdump from the default RD, in your case RD102.

     

    Try rdsh 102 and do tcpdump.

     

    http://support.f5.com/kb/en-us/solutions/public/6000/500/sol6546.html