Forum Discussion
NimbostratusCookie profile is not behaving properly
Hello All,
I have VIP created on Big IP 6900, with cookie profile. below is the config of VIP
virtual vs_portail {
snatpool snat_vs_portail
pool pool_portail
destination 10.155.65.4:http
ip protocol tcp
persist persist_portail
profiles {
http_portail {}
onec_vs_portail {}
tcp-lan-optimized {
serverside
}
tcp-wan-optimized {
clientside
}
}
vlans INTERCO enable
}
profile persist persist_portail {
defaults from cookie
mode cookie
cookie name "F5_PORTAIL"
}
I have below problem
1) when users log in for the 1st time, a Cookie is generated... say, he is node P1, (so the Cookie is valid only for P1)
2) and then he navigates to different pages... during this time, the NODE is changed (say to P2)
3) but still in his browser, the cookie is OLD cookie which is valid for P1 and not for P2... hence it throws error (invalid cookie, because of which access is denied)
I don’t know why he is switched from one node to another though he is just navigating in the portal without logout or clearing cookies.
Can someone suggest how to deal with this issue?
Regards,
Kalpesh
3 Replies
- nitass
Employee
configuration looks okay to me. i suggest gathering data (tcpdump, http sniffer such as httpwatch, qkview) and opening a support case.
tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host 10.155.65.4 or host x.x.x.x or host y.y.y.y
x.x.x.x is pool member1 ip
y.y.y.y is pool member2 ip 
What_Lies_Bene1Cirrostratus
So, does the F5 insert this cookie or the server? What's the logic here?
Kalpesh_48932Hi Nitass
Even it looks ok for Me. but earlier it was working when this VIP was active on BIG IP 6400 device. recently we migrated this to BIGIP 6900 and found that cookie profile is not behaving in normal way.
