BigIP Report Old

Thanks for the reminder Tim and thank you for your contributions! Updated the beta file with the new code.

/Patrik

Hi Patrik, Keen to get this working for our company, I know the IPs and credentails are 100% correct, but I get this: Successfully loaded the config file 2018-10-04 16:24:29 Configuring the console window 2018-10-04 16:24:29 Pre-execution checks 2018-10-04 16:24:29 Loaded F5 iControl snapin 2018-10-04 16:24:29 Pre execution checks was successful 2018-10-04 16:24:29 Enabling TLS1.2 2018-10-04 16:24:29 Getting data from 10.X.X.X 2018-10-04 16:24:42 The script failed to connect to 10.x.x.x 2018-10-04 16:24:42 Verifying load balancer data to make sure th 2018-10-04 16:24:42 Missing data from device group containing 10 2018-10-04 16:24:42 Missing load balancer data, no report will b 2018-10-04 16:24:42 There were errors while generating the repor 2018-10-04 16:24:42 No error mail reporting enabled/configured

I have followed all instructions and am running bigipreport in the scripts folder 5.0.9 I believe. Help is appreciated,

Hi!

Are you confident that the firewall is open from the server running the script to the F5?

/Patrik

Hi Tim, Patrik,

Exactly the expected result ! Thank you for your precious help ;) Your script is awesome and really usefull !

Bye :)

Hi Patrik, yes, my Web Server is allowed to speak to the F5s, I can HTTPS and SSH to them from the same box..

Try opening a PowerShell session on your web server and then try these two steps manually:

> Add-PSSnapIn iControlSnapIn
> Initialize-F5.iControl -HostName 10.x.x.x -UserName (fill in) -Password (fill in)

It should respond with "True". Then try:

> $F5 = Get-F5.iControl
> $F5.SystemInet.get_hostname()

and you should get the name of your F5.

On top of Tims suggestions you can also check your management ciphers by running

tmsh list sys httpd ssl-ciphersuite

I've also seen issues with proxies. Have you captured traffic to verify that you actually reach the F5 device? Are you running the script as another user and if so, have you tested to run the script as that user?

I made a script for getting some troubleshooting data, could you please configure and run it?

https://github.com/epacke/BigIPReport/blob/master/HelpScripts/TroubleShoot.ps1

/Patrik

TLS is not in the list. and the other command results:

Initialize- : Could not initialize connection with supplied information At line:1 char:1 + Initialize- -HostName 10.X.X.X -Username XXXX -Passwor ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : PermissionDenied: (10.X.X.X:String) [Initialize- + FullyQualifiedErrorId : 2,iControlSnapIn.CmdLet.Global.InitializeiControl

Where do I enable TLS?

It would not say TLS when running the command. To get the actual protocol you'd need to run this:

tmsh list sys httpd ssl-ciphersuite | awk '/^ /{print $2}' | xargs tmm --clientciphers

Did you try the troubleshooting script?

Updated with new contributions from Tim Riker. Thanks a bunch Tim!

Will convert this to a non-beta as soon as I've gotten the opportunity to test it in a larger environment. Sorry for the delay!

/Patrik