Issue on management route

[romolo82]

Hi everybody,

I added a static route on the management interface to send logs towards Syslog server; if I type the ip route get "IP address" command, I can notice that destination address should be reached by the right interface (management).

But if I perform a tcpdump on the mgmt interface, with a filter on the destination IP address, I can notice that the source IP address becomes another, NOT the management IP.

Can youhelp me to solve this issue?

Thanks a lot in advance, best regards.

[Nikoolayy1 · Accepted solution]

Maybe you are hitting the bug below:

K26457459: Syslog messages are sent with incorrect source IP

https://support.f5.com/csp/article/K26457459

https://cdn.f5.com/product/bugtracker/ID747676.html

[romolo82]

I add that in the routing tble there is a default route that use the interface with  the wrong IP address that now is forwarding logs; but a static route shouldnt' be preferred than a default route?

[Nikoolayy1 · Accepted solution]

Dataplane is often prefered than managment when sourcing the traffic:

K13284: Overview of management interface routing (11.x - 17.x)

https://support.f5.com/csp/article/K13284

[romolo82]

Thanks a lot!

[Lidev]

Hi romolo82,
I have encountered this problem before 🙂
Have you set the local IP parameter on Syslog Configuration remote logging ?
K26457459: Syslog messages are sent with incorrect source IP 

regards

[Nikoolayy1]

Yup, so did I and this why I also thought about K26457459 🙂

[Lidev]

Oups, my bad 😝
sorry Nikoolayy1, I had just seen the link to the bug-id and not the K articles !

[Nikoolayy1]

Ah no problem as if we find the solution who cares as I got interested and I have time for now till the next project 😀

[Nikoolayy1 · Accepted solution]

Maybe you are hitting the bug below:

K26457459: Syslog messages are sent with incorrect source IP

https://support.f5.com/csp/article/K26457459

https://cdn.f5.com/product/bugtracker/ID747676.html

[PSFletchTheTek]

Just to clarify, Did you set this route via cli or UI?
if its management it has to be the cli, the ui is only the data plane for prod traffic.
K13284 commands are key here and make sure your gateway is correct!

[Paulius]

@romolo82 Would it be possible to provide us the routing table and the output of the "list sys management-route" on your device along with the destination IP so we can take a look?

[romolo82]

Thanks a lot, I solved with this solution: https://support.f5.com/csp/article/K26457459