cancel
Showing results for 
Search instead for 
Did you mean: 

Cookie profile is not behaving properly

Kalpesh_48932
Nimbostratus
Nimbostratus

Hello All,

 

I have VIP created on Big IP 6900, with cookie profile. below is the config of VIP

 

 

 

virtual vs_portail {

 

snatpool snat_vs_portail

 

pool pool_portail

 

destination 10.155.65.4:http

 

ip protocol tcp

 

persist persist_portail

 

profiles {

 

http_portail {}

 

onec_vs_portail {}

 

tcp-lan-optimized {

 

serverside

 

}

 

tcp-wan-optimized {

 

clientside

 

}

 

}

 

vlans INTERCO enable

 

}

 

 

profile persist persist_portail {

 

defaults from cookie

 

mode cookie

 

cookie name "F5_PORTAIL"

 

}

 

 

 

 

 

I have below problem

 

 

 

1) when users log in for the 1st time, a Cookie is generated... say, he is node P1, (so the Cookie is valid only for P1)

 

2) and then he navigates to different pages... during this time, the NODE is changed (say to P2)

 

3) but still in his browser, the cookie is OLD cookie which is valid for P1 and not for P2... hence it throws error (invalid cookie, because of which access is denied)

 

 

I don’t know why he is switched from one node to another though he is just navigating in the portal without logout or clearing cookies.

 

 

Can someone suggest how to deal with this issue?

 

 

Regards,

 

Kalpesh

 

3 REPLIES 3

nitass
F5 Employee
F5 Employee
configuration looks okay to me. i suggest gathering data (tcpdump, http sniffer such as httpwatch, qkview) and opening a support case.

 

 

tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host 10.155.65.4 or host x.x.x.x or host y.y.y.y

 

x.x.x.x is pool member1 ip

 

y.y.y.y is pool member2 ip

What_Lies_Bene1
Cirrostratus
Cirrostratus
So, does the F5 insert this cookie or the server? What's the logic here?

Kalpesh_48932
Nimbostratus
Nimbostratus
Hi Nitass

 

 

Even it looks ok for Me. but earlier it was working when this VIP was active on BIG IP 6400 device. recently we migrated this to BIGIP 6900 and found that cookie profile is not behaving in normal way.