Forum Discussion

genseek_32178's avatar
genseek_32178
Icon for Nimbostratus rankNimbostratus
Jan 07, 2013

VIP issue

Hi,

 

We have the following VS setup,

 

 

virtual vl100-bz {

 

snatpool bz-vl100

 

pool bz-pl

 

destination 172.20.10.50:https

 

ip protocol tcp

 

persist persist-profile

 

profiles {

 

http-xforward {}

 

tcp{}

 

}

 

vlans 100 enable

 

}

 

Src client - 172.20.10.8

 

snatpool bz-vl100 - 172.20.10.200

 

pool bz-pl - 172.20.10.60 ( Gwy - Router - 10.101.0.100)

 

Probelm-

 

When user access VIP - https://172.20.10.50 - he is NOT able to see pool member hostname in the browser

 

but

 

when user access DIP- https://172.20.10.60 - he is able to see the pool member hostname in the browser,

 

Could the issue be with <http-xforward> profile? Even though pool GWY is not F5, we ve used SNAT to force return traffic from pool member to go via F5 to the client. Still issue persists.

 

Any clues woiud be great?

 

thanks - gseek

 

18 Replies

  •  

    Plear bear with me as i'm new to F5 so..needing much guidance with clarifications

     

     

    [root@ve10:Active] config b virtual vl100-bz profiles { clientssl tcp }

     

     

    Just simply applying the above command it will overwrite the xfwrd profile and replace it with clientssl?

     

     

    also, say, if i were asked to remove only xfrwrd profile and retain rest of the Virtual as it is, what single command with bigpipe i need to use to remove the xfrwrd profile from the VIP w/ touching any other part of VS.

     

  • Just simply applying the above command it will overwrite the xfwrd profile and replace it with clientssl?actually, it will replace all existing profiles with the one in the command line (clientssl and tcp).

    also, say, if i were asked to remove only xfrwrd profile and retain rest of the Virtual as it is, what single command with bigpipe i need to use to remove the xfrwrd profile from the VIP w/ touching any other part of VS. e.g.

    [root@ve10:Active] config  b virtual vl100-bz list
    virtual vl100-bz {
       snatpool bz-vl100
       pool bz-pl
       destination 172.20.10.50:443
       ip protocol 6
       persist persist-profile
       profiles {
          http-xforward {}
          tcp {}
       }
       vlans vlan100 enable
    }
    
    [root@ve10:Active] config  b virtual vl100-bz profile http-xforward delete
    
    [root@ve10:Active] config  b virtual vl100-bz list
    virtual vl100-bz {
       snatpool bz-vl100
       pool bz-pl
       destination 172.20.10.50:443
       ip protocol 6
       persist persist-profile
       vlans vlan100 enable
    }
    

    ps. tcp profile is not shown after deleting http-xforward profile because it is default one.

    by the way, if you are not familiar with bigpipe command, i suggest trying tmsh. it would be easier since there is feature such as context sensitive help, tab-completion.

    v.10 Introduction to the tmsh Command Shell by Don Mac Vittie

    https://devcentral.f5.com/tech-tips/articles/v10-introduction-to-the-tmsh-command-shell
  • if tcp was not a default profile but a custom profile, then it would not get deleted ..right?

     

     

    also,what would be the command to add the xfrwrd profile back to Virtual.

     

     

  • if tcp was not a default profile but a custom profile, then it would not get deleted ..right? it is not deleted. it is just not shown because it is default profile.

     

     

    also,what would be the command to add the xfrwrd profile back to Virtual. just replacing "delete" with "add". :-)
  • thank you so much nitass for your patient replies and bearing with my clarifications.

     

     

    is there any single command in bigip to see all the running configuration, just like " show run".
  • is there any single command in bigip to see all the running configuration, just like " show run".there is show running-config in tmsh.

    root@ve10(Active)(tmos) show ?
    Options:
      current-module  Do not recurse into sub-modes
      running-config  Display configuration settings
      |               Route command output to a filter
    Modules:
      auth            User accounts and authentication
      cli             Local user settings and configuration transactions
      gtm             Global Traffic Manager
      ltm             Local Traffic Manager
      net             Network configuration
      sys             General system configuration
      wom             WAN Optimization
    
  • any command in bigpipe to see full run-config?if one command, can you try "b export"? otherwise, you may try "b base list" and "b list".

     

     

    Bigpipe Utility Reference Guide

     

    http://support.f5.com/content/kb/en-us/products/big-ip_ltm/manuals/product/bigip_utility_reference_guide_10_1_0/_jcr_content/pdfAttach/download/file.res/Bigpipe_Utility_Reference_Guide.pdf

     

     

    sol8435: Overview of Single Configuration Files (9.x - 10.x)

     

    http://support.f5.com/kb/en-us/solutions/public/8000/400/sol8435.html