For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

martin_58353's avatar
martin_58353
Icon for Cirrus rankCirrus
May 11, 2017

unable to create DNS listener

I'd like to create DNS/GTM listener using CLI inside specific partition, but no success:

cd /PARTITION
create /gtm listener NAME { address 1.2.3.4 profiles replace-all-with { /Common/udp_gtm_dns } }

01020036:3: The requested profile (/PARTITION/udp_gtm_dns) was not found.

Why "/PARTITION/udp_gtm_dns" was not found when I requested "/Common/udp_gtm_dns"?

I tried create listener from /Common/ partition like this (profile definition is not needed because it is default setting):

cd /Common
create /gtm listener /PARTITION/NAME { address 1.2.3.4 }

It works but address is created like "/Common/1.2.3.4%92:53" and not like "/PARTITION/1.2.3.4%92:53" (PARTITION has default routing-domain id 92)

Where can be a problem?

application delivery
BIG-IP DNS

5 Replies

  • oscarnet_69487's avatar
    oscarnet_69487
    Icon for Nimbostratus rankNimbostratus
    May 12, 2017

    HI Martin :

     

    i guess you step have some mistake

     

    1 check partition

     

    (cfg-sync Standalone)(Active)(/Common)(tmos) list auth partition

     

    2 check you route domain vlan

     

    3 create listener in partition datacenter1 and route-domain 92

     

    5 check listener

     

    6 on the web GUI is like it.

     

    wish to help you.

     

    Have a good day!

     

    • martin_58353's avatar
      martin_58353
      Icon for Cirrus rankCirrus
      May 15, 2017

      I do the same, but it is not working:

      root@(DT1B18GTM01)(cfg-sync In Sync)(Active)(/Common)(tmos) cd /PARTITION
root@(DT1B18GTM01)(cfg-sync In Sync)(Active)(/PARTITION)(tmos) create /gtm listener NAME { address 1.2.3.4%92 profiles replace-all-with { /Common/udp_gtm_dns } }
01020036:3: The requested profile (/PARTITION/udp_gtm_dns) was not found.

      the requested profile was not found. but why "/PARTITION/udp_gtm_dns" and not "/Common/..."??

      can you tell me sw version on your side? maybe it's a bug for 12.1.2 version. or?

    • martin_58353's avatar
      martin_58353
      Icon for Cirrus rankCirrus
      May 16, 2017

      yes, sure. when I use GUI, it is created correctly. But when I use CLI for configuration the same part, config has an issue as I described. It looks like a (new) bug. I will try version 13.0.0.

       

      I found other issue connected to GTM: I'm also confused about using route-domain for (GTM) server-objects configuration. It looks that server object can be associated only with default route-domain (rd0). It's completely wrong. Listener IS possible to create with non-default RD but server object NO? This is not a good idea.

       

  • martin_58353's avatar
    martin_58353
    Icon for Cirrus rankCirrus
    May 16, 2017

    The same issue in 13.0.0 HF2. there is a wrong partition path for default profile udp_gtm_dns.

     cd /PARTITION
 create /gtm listener NAME { address 10.153.0.10%92 profiles replace-all-with { /Common/udp_gtm_dns } }      
01020036:3: The requested profile (/PARTITION/udp_gtm_dns) was not found.

    But, it is working using GUI. Here is configuration:

     list /gtm listener 
gtm listener NAME {
    address 10.153.0.10%92
    ip-protocol udp
    mask 255.255.255.255
    partition PARTITION
    port domain
    profiles {
        /Common/dns { }
        /Common/udp_gtm_dns { }
    }
    translate-address disabled
    translate-port disabled
    vlans {
        VLAN-92
    }
    vlans-enabled
}

    It seems that issue is connected to 12.1.2 (maybe 12.x) also for 13.0.0, because for 11.6.x it is working correctly.