Forum Discussion

Kalpesh_48932's avatar
Kalpesh_48932
Icon for Nimbostratus rankNimbostratus
Jan 03, 2013

Cookie profile is not behaving properly

Hello All,

 

I have VIP created on Big IP 6900, with cookie profile. below is the config of VIP

 

 

 

virtual vs_portail {

 

snatpool snat_vs_portail

 

pool pool_portail

 

destination 10.155.65.4:http

 

ip protocol tcp

 

persist persist_portail

 

profiles {

 

http_portail {}

 

onec_vs_portail {}

 

tcp-lan-optimized {

 

serverside

 

}

 

tcp-wan-optimized {

 

clientside

 

}

 

}

 

vlans INTERCO enable

 

}

 

 

profile persist persist_portail {

 

defaults from cookie

 

mode cookie

 

cookie name "F5_PORTAIL"

 

}

 

 

 

 

 

I have below problem

 

 

 

1) when users log in for the 1st time, a Cookie is generated... say, he is node P1, (so the Cookie is valid only for P1)

 

2) and then he navigates to different pages... during this time, the NODE is changed (say to P2)

 

3) but still in his browser, the cookie is OLD cookie which is valid for P1 and not for P2... hence it throws error (invalid cookie, because of which access is denied)

 

 

I don’t know why he is switched from one node to another though he is just navigating in the portal without logout or clearing cookies.

 

 

Can someone suggest how to deal with this issue?

 

 

Regards,

 

Kalpesh

 

3 Replies

  • configuration looks okay to me. i suggest gathering data (tcpdump, http sniffer such as httpwatch, qkview) and opening a support case.

     

     

    tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host 10.155.65.4 or host x.x.x.x or host y.y.y.y

     

    x.x.x.x is pool member1 ip

     

    y.y.y.y is pool member2 ip
  • Hi Nitass

     

     

    Even it looks ok for Me. but earlier it was working when this VIP was active on BIG IP 6400 device. recently we migrated this to BIGIP 6900 and found that cookie profile is not behaving in normal way.