Geneve tunneling for AWS GWLB

[Renato]

Hi!

We are trying to set up a Geneve tunnel between AWS GWLB and BIG-IP VE AdvWAF, but the BIG-IP is returning reset with cause "RST from BIG-IP internal Linux host".

Has anyone ever used this before?

Thanks!

Renato A. Ferreira

[Dario_Garrido]

Hello Renato.

This message is displayed when:

"The BIG-IP system receives a RST acknowledgement (ACK) in response to terminating a service check."

REF - https://support.f5.com/csp/article/K13223

Have you checked that your self-ip is allowing that communication?

REF - https://support.f5.com/csp/article/K17333

I recommend you to follow this guidelines:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-0-0/1.html

Regards,

Dario.

[forsan]

Hi,

I ran into this issue as well. I was running multi nic with this configuration:

sys db provision.1nic value forced_enable

set this to disabled.

setdb provision.1nic disable

This is a BUG.

Br

Andréas

[forsan]

Hi Renato,

did you manage to integrate F5 and AWS GWLB?

Br

Andréas