Failed to add new DNS machine to the existing DNS sync-group
hi, I want to add a new dns (gtm) system to the existing dns (gtm) sync-group, but failed. I followed the instructions described on this doc link https://techdocs.f5.com/kb/en-us/products/big-ip-dns/manuals/product/bigip-dns-implementations-12-1-0/3.html when I ran the last step by running the command "tmsh run gtm gtp_add" to add new dns system to the existing dns sync-group, the return result is "Exiting" and the new DNS failed to copy the config from existing dns system. Can someone please help to advise, thanks. the port lockdown are set to "allow all" on the self-ip (external interface).
When POST request access policy is used, it is not forwarded to the server behind.
Hello, I have a virtual server (Virtual-ext with policy Forward-int) that forwards all traffic from the internet to the inside with policy. I have an Access policy (Auth-AccPolicy) that I run for authentication on my virtual server (Virtual-int) serving internally. The post method is used in java scripts within the page. But when the Acces -policy is activated the post methods are not forwarded to the back. Why are POST methods affected by Acces policy? I can't find anything on this. My version is : 15.1.3.1 I would be grateful if you could share me information about the solution.On the R4800 series, sometimes ICMP does not work properly. Reboot fixes the problem
Problem definition. Tenant A is deployed in Box X, Tenant B is deployed in Box Y. (L2 syncro vlan is done between the two boxes) Tenant A pings Bye and gets a response, while Tenant B pings A and gets an unreachable message. When Box Y is rebooted, everything starts to work normally for a while, but after a while the connection is lost again. Has anyone ever encountered this problem?
What ports does GTM use when measuring RTT
Hi, I'm trying to configure GTM pools using round trip time load balancing method without using ICMP in case it is blocked by firewall headed to LDNS. According to documentation, RTT can be measured by using several metrics collection protocols other than ICMP, such as TCP/UDP/DNS_REV/DNS_DOT https://my.f5.com/manage/s/article/K6480 I've tried some tests by exculding ICMP from metrics collection protocols and choosing TCP/UDP/DNS_REV/DNS_DOT on the selected check box, but it still seems to check with ICMP echo. I would like to make sure what ports GTM measures RTT when using those protocols so that they can be allowed on firewall.SNMP OIDs for monitoring
I am trying to get the correct OIDs for monitoring F5s CPU, memory, disk Partition and power. We tried snmpwalk for UCD-SNMP-MIB:ssCpuSystem and ssCpuUser and did not get a response on R-series F5 using snmpwalk/OPmanager. Can someone please let me know the correct OIDs for F5OS R series host and Tenants and iSeries F5s Is sysMultiHostCpuUsageRatio5s and sysTmmStatTmUsageRatio5s from System MIB correct for CPU? I am being told they see 98%, but its not 98. What is the OID for TMM CPU and Memory. What to monitor to get High CPU Load Thanks
Post SSO hidden form session variable display garbled on server
Hello everyone, Use this irule to create a session variable. when ACCESS_ACL_ALLOWED { ACCESS::session data set session.mylab.sso.returnuri [HTTP::uri] } Set up SSO profile hidden form returnURL %{session.mylab.sso.returnuri} Why returnURL is garbled displayed on the web application debug log? thanks.F5 Cluster IP addresses
Im trying to find clear documentation that tells me what requirements / restrictions we have on IP addresses that are required to operate a cluster. My main question is do the various addresses assigned to support the cluster require being in the same subnet. The design that we are looking at roughly is 4 Velos appliances (2 in each DC). There will be a tenant on each appliance which will be clustered together. Ideally we prefer not to stretch L2 and operate with L3 as much as possible. So i want to confirm if appliances in DC1 can reside on 1 subnet and appliances in DC2 can reside on another subnet. Each Tenant would essentially be on a stick / one-arm for data. All traffic would come in and leave on the same interface. The F5 does not directly sit in any of the networks where servers reside. I will be using BGP & RHI to inject routes into the rest of the network to ensure traffic finds the correct active F5. for example F5a-DC1-Ten1a = VLAN-HA - 172.28.0.1 and VLAN-Routed - 192.168.250.1 F5b-DC1-Ten1b = VLAN-HA - 172.28.0.2 and VLAN-Routed - 192.168.250.2 F5a-DC2-Ten1a = VLAN-HA - 172.29.0.1 and VLAN-Routed - 192.168.251.1 F5a-DC2-Ten1b = VLAN-HA - 172.29.0.2 and VLAN-Routed - 192.168.251.2 Sorry if I've not made much sense.
