Forum Discussion
VIP issue
Hi,
We have the following VS setup,
virtual vl100-bz {
snatpool bz-vl100
pool bz-pl
destination 172.20.10.50:https
ip protocol tcp
persist persist-profile
profiles {
http-xforward {}
tcp{}
}
vlans 100 enable
}
Src client - 172.20.10.8
snatpool bz-vl100 - 172.20.10.200
pool bz-pl - 172.20.10.60 ( Gwy - Router - 10.101.0.100)
Probelm-
When user access VIP - https://172.20.10.50 - he is NOT able to see pool member hostname in the browser
but
when user access DIP- https://172.20.10.60 - he is able to see the pool member hostname in the browser,
Could the issue be with <http-xforward> profile? Even though pool GWY is not F5, we ve used SNAT to force return traffic from pool member to go via F5 to the client. Still issue persists.
Any clues woiud be great?
thanks - gseek
18 Replies
- genseek_32178
Nimbostratus
Plear bear with me as i'm new to F5 so..needing much guidance with clarifications
[root@ve10:Active] config b virtual vl100-bz profiles { clientssl tcp }
Just simply applying the above command it will overwrite the xfwrd profile and replace it with clientssl?
also, say, if i were asked to remove only xfrwrd profile and retain rest of the Virtual as it is, what single command with bigpipe i need to use to remove the xfrwrd profile from the VIP w/ touching any other part of VS. - nitass
Employee
Just simply applying the above command it will overwrite the xfwrd profile and replace it with clientssl?actually, it will replace all existing profiles with the one in the command line (clientssl and tcp).
also, say, if i were asked to remove only xfrwrd profile and retain rest of the Virtual as it is, what single command with bigpipe i need to use to remove the xfrwrd profile from the VIP w/ touching any other part of VS. e.g.[root@ve10:Active] config b virtual vl100-bz list virtual vl100-bz { snatpool bz-vl100 pool bz-pl destination 172.20.10.50:443 ip protocol 6 persist persist-profile profiles { http-xforward {} tcp {} } vlans vlan100 enable } [root@ve10:Active] config b virtual vl100-bz profile http-xforward delete [root@ve10:Active] config b virtual vl100-bz list virtual vl100-bz { snatpool bz-vl100 pool bz-pl destination 172.20.10.50:443 ip protocol 6 persist persist-profile vlans vlan100 enable }
ps. tcp profile is not shown after deleting http-xforward profile because it is default one.
by the way, if you are not familiar with bigpipe command, i suggest trying tmsh. it would be easier since there is feature such as context sensitive help, tab-completion.
v.10 Introduction to the tmsh Command Shell by Don Mac Vittie
https://devcentral.f5.com/tech-tips/articles/v10-introduction-to-the-tmsh-command-shell - genseek_32178
Nimbostratus
if tcp was not a default profile but a custom profile, then it would not get deleted ..right?
also,what would be the command to add the xfrwrd profile back to Virtual. - nitass
Employee
if tcp was not a default profile but a custom profile, then it would not get deleted ..right? it is not deleted. it is just not shown because it is default profile.
also,what would be the command to add the xfrwrd profile back to Virtual. just replacing "delete" with "add". :-) - genseek_32178
Nimbostratus
thank you so much nitass for your patient replies and bearing with my clarifications.
is there any single command in bigip to see all the running configuration, just like " show run". - nitass
Employee
is there any single command in bigip to see all the running configuration, just like " show run".there is show running-config in tmsh.root@ve10(Active)(tmos) show ? Options: current-module Do not recurse into sub-modes running-config Display configuration settings | Route command output to a filter Modules: auth User accounts and authentication cli Local user settings and configuration transactions gtm Global Traffic Manager ltm Local Traffic Manager net Network configuration sys General system configuration wom WAN Optimization - genseek_32178
Nimbostratus
any command in bigpipe to see full run-config? - nitass
Employee
any command in bigpipe to see full run-config?if one command, can you try "b export"? otherwise, you may try "b base list" and "b list".
Bigpipe Utility Reference Guide
http://support.f5.com/content/kb/en-us/products/big-ip_ltm/manuals/product/bigip_utility_reference_guide_10_1_0/_jcr_content/pdfAttach/download/file.res/Bigpipe_Utility_Reference_Guide.pdf
sol8435: Overview of Single Configuration Files (9.x - 10.x)
http://support.f5.com/kb/en-us/solutions/public/8000/400/sol8435.html
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com