For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

genseek_32178's avatar
genseek_32178
Icon for Nimbostratus rankNimbostratus
Jan 16, 2012

Virtual Server Cmds

Hi,     In our environment, we have Virtual Servers configured in the following way,     virtual apps_critical_BTK   {   pool bzt_pool destination 200.36.134.131:https   ip pr...
basic
getting started
new to f5
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 17, 2012
When you're testing this, make sure in the GUI that it says VLAN and Tunnel Traffic: All VLANs and Tunnels. If you select Enabled On but don't select any VLANs then the VS won't accept connections.

This bad config will show up in the bigip.conf as: 


 v11.1
ltm virtual ltm_ve_1_http_vs {
    destination 10.1.0.113:http
    ip-protocol tcp
    mask 255.255.255.255
    profiles {
        http { }
        tcp { }
    }
    rules {
        name_to_ipv6_geo_rule
    }
    snat automap
    vlans-enabled
}

I'm not sure what you mean for your second question. By VIP do you mean virtual server IP address (ie, virtual address)? The VLAN config for a virtual server is only looked at for the inbound (or ingress) traffic. You don't need the virtual server enabled on the VLAN the servers are on if the servers are not originating connections to the virtual server.

Aaron