Forum Discussion
NimbostratusSSL Orchestrator and Layer 2 Service Integration
Has anyone encountered issues with rSeries Big IP Tenant with the integration of a layer 2 service? In my case, I cannot make the service to come up even though I have the exact VLAN name and tagging set in the OS bare metal, and exactly the same VLAN and tagging configured in the tenant.
5 Replies
- Melissa_C
Moderator
Hello RedBaron​,
I noticed you haven't gotten any response yet and wanted to let you know I am working to find someone who may be able to help you. While I do that if you have any update please make sure to add that to your post.
Thank you for being a part of our community!
-Melissa
- KevinGallaugher
Employee
Hi RedBaron,
Did you assign a Self IP to the VLAN? That will cause them to not appear in the Services screen when creating a Layer 2 Service. Creating the vlan name and tag in F5OS is all that is required. You do not need to make any other network changes in the Tenant.
RedBaronKevin, I finally got to talk to you !
Anyway, here's the dilemma, 2 rSeries with a single tenant each in HA mode. Building the orchestrator requires the interface mapping, VLAN name and tag, mac address bank, and verify the listeners at the rSeries level as you know. Inside the tenant, same VLAN name and tag number manually entered, identical to the rSeries entries. Building the topology, no issues, however, once we deploy it....kaboom, interfaces up, services down on both. We walked line by line in the configuration, rebuild it 3 times, and still the same issue. One thing I discovered was that the active node, the interception rule field was completely empty !, the standby is fully populated, but the service is still down ! Weird. No changes needed, just need to make this layer 2 service work so we can provide the customer with full functionality of the system built. Somehow, the services don't seem to work, red red, but the interfaces up. Another thing, the services are not even generated arp entries on both tenants cli prompt. Strange things indeed !
- RedBaron
BTW, no self IP on the layer service VLAN. IPs only on external, internal, floaters, and HA VLANs
