09-Jan-2023 07:13
Hi everybody,
I added a static route on the management interface to send logs towards Syslog server; if I type the ip route get "IP address" command, I can notice that destination address should be reached by the right interface (management).
But if I perform a tcpdump on the mgmt interface, with a filter on the destination IP address, I can notice that the source IP address becomes another, NOT the management IP.
Can youhelp me to solve this issue?
Thanks a lot in advance, best regards.
Solved! Go to Solution.
09-Jan-2023 07:45
Maybe you are hitting the bug below:
K26457459: Syslog messages are sent with incorrect source IP
09-Jan-2023 07:46
Dataplane is often prefered than managment when sourcing the traffic:
K13284: Overview of management interface routing (11.x - 17.x)
https://support.f5.com/csp/article/K13284
09-Jan-2023 07:29
I add that in the routing tble there is a default route that use the interface with the wrong IP address that now is forwarding logs; but a static route shouldnt' be preferred than a default route?
09-Jan-2023 07:46
Dataplane is often prefered than managment when sourcing the traffic:
K13284: Overview of management interface routing (11.x - 17.x)
https://support.f5.com/csp/article/K13284
10-Jan-2023 05:21
Thanks a lot!
09-Jan-2023 23:51
Hi romolo82,
I have encountered this problem before 🙂
Have you set the local IP parameter on Syslog Configuration remote logging ?
K26457459: Syslog messages are sent with incorrect source IP
regards
10-Jan-2023 02:41
Yup, so did I and this why I also thought about K26457459 🙂
10-Jan-2023 02:48
Oups, my bad 😝
sorry Nikoolayy1, I had just seen the link to the bug-id and not the K articles !
10-Jan-2023 02:55
Ah no problem as if we find the solution who cares as I got interested and I have time for now till the next project 😀
09-Jan-2023 07:45
Maybe you are hitting the bug below:
K26457459: Syslog messages are sent with incorrect source IP
09-Jan-2023 08:15
Just to clarify, Did you set this route via cli or UI?
if its management it has to be the cli, the ui is only the data plane for prod traffic.
K13284 commands are key here and make sure your gateway is correct!
09-Jan-2023 10:49
@romolo82 Would it be possible to provide us the routing table and the output of the "list sys management-route" on your device along with the destination IP so we can take a look?
10-Jan-2023 05:24
Thanks a lot, I solved with this solution: https://support.f5.com/csp/article/K26457459