configuration
32 TopicsLooking for Setup Advice
Hello, I am looking for some advise for setting up a F5 Big-IP that can accomplish the following things. I only have one public IP address but will be hosting muliple services. I am looking at setting up one VIP that's open to public with ports that are required then when hitting FQDN that it redirects to VIP that is hosting service. Example mysite1.domain.com goes to VIP 10.10.10.100, mysite2.domain.com goes to VIP 10.10.10.110, so on. Is this done by iRule, reverse proxy, or policy. What's the best pratice for setting something up like this. Thanks in advance for the help.Solved1.7KViews0likes8CommentsSimple balancing doesn't work
Good morning community, I have to configure, for my work, a F5 VE. So, I download F5 VE 13.1.4 in my lab @home and install it on VMWare to make practice and understand the F5 basics. What I did is configure internal and external network VPN and assign related IP. Then Pool/Nodes and a Virtual Server listening on port 5000. Everything looks good: From F5 I can reach both nodes, even with a simple telnet on port 5000. From external network I can reach external F5 interface. The problem is that F5 doesn't route connection to the pool. This is my network topology: As I wrote, external network can reach VSERVER at 10.3.0.100 on port 5000. Then from F5 I can reach nodes in the pool always on port 5000. The problem here is when from a client (external network) I try to connect to VSERVER, it seems the connection is ESTABLISHED for a while, but not forwarded to internal network. While I tried to establish a connection from a client from external network (10.3.0.128), this is what happen: 1 0.000000 10.3.0.128 → 10.3.0.100 TCP 70 61440 → 5000 [SYN] Seq=0 Win=64240 2 0.000219 10.3.0.100 → 10.3.0.128 TCP 66 5000 → 61440 [SYN, ACK] Seq=0 Ack=1 3 0.002661 10.3.0.128 → 10.3.0.100 TCP 58 61440 → 5000 [ACK] Seq=1 Ack=1 4 0.006505 10.3.0.128 → 10.2.0.129 TCP 66 61440 → 5000 [SYN] Seq=0 Win=4380 5 0.059742 10.3.0.128 → 10.3.0.100 IPA 115 unknown 0x30 6 0.059768 10.3.0.100 → 10.3.0.128 TCP 58 5000 → 61440 [ACK] Seq=1 Ack=58 7 3.003461 10.3.0.128 → 10.2.0.129 TCP 66 [TCP Retransmission] 61440 → 5000 [SYN] Seq=0 Win=4380 Len=0 MSS=1460 SACK_PERM=1 10 12.004963 10.3.0.100 → 10.3.0.128 TCP 113 5000 → 61440 [RST, ACK] Seq=1 Ack=58 11 12.004980 10.3.0.128 → 10.2.0.129 TCP 106 61440 → 5000 [RST, ACK] Seq=1 Ack=1 I'm getting crazy since configuration should be ok, could someone help me? Thank you very much, LucasSolved1.3KViews0likes2CommentsASM Guided Configuration not working
Hello, I want to test the AWAF with guided configuration. yesterday with version 14.1.2.1 I had always error 403 when i click on the menue, today i made a update to 14.1.2.2, now i get a 404 could someone point me where to search for the error? thanks Karl982Views0likes8CommentsHow do I configure an F5 LTM VE Lab on my Laptop and drive traffic to it to generate logs?
I have successfully installed the F5 LTM VE Lab on VMWare Fusion 6, but I'm unclear how to configure it so that I can drive traffic through it from my browser (I am open to driving traffic in other ways, such as using blitz.io) with a macro. I'm unclear on the details of setting up the underlying network to do so. I have the configuration worksheet, but I'm not clear how to define the IPs and VLAN groups to achieve this objective: http://support.f5.com/content/kb/en-us/products/big-ip_ltm/manuals/product/configuration_worksheet/_jcr_content/pdfAttach/download/file.res/Configuration_Worksheet_-_BIG-IP_Local_Traffic_Manager.pdf977Views0likes32CommentsAAA for Big-IQ CLI/TMSH Login
Hi, I have tried to use AAA server for authentication and authorization Big-IQ web GUI login. I configured on Big-IQ web GUI and find out that it doesn't work to authenticate user who log in into TMSH/CLI. Is there separate configuration to authenticate user through AAA server for CLI/tmsh? Thank you916Views0likes1CommentGeneral Database error - Configuration - Options
Just received and starting configuring an F5 2000s. All seems to be working well, but get the following message in the GUI, when selecting System-Logs-Configuration-Options "General database error retrieving information" Trying to get some decent logging. So far the system seems to be doing minimal logging. I've done nothing at this point trying to configure remote syslog servers or anything else, so this is pretty much a factory configuration as far as logging goes. Do I have a problem that needs to go to support, or is there just something I need to do in the configuration?714Views0likes7CommentsHA reports tmm NOT ready
Can anyone shed some light on the following logs: I have a viprion with 2 blades. I can't configure the blades in HA Active Standby setup. Would setting up an HA with the 2 blades help eliminate this problem? I don't fully understand the deployment of our Viprion chasis having 2 blades. It has 2 F5 Big IP and all virtual servers created on the other doesn't reflect onto the other. I believe they are 2 complete different units? Not sure. Any replies would be appreciated. Thank you in advance.699Views0likes0CommentsBest way to trace/troubleshoot traffic between Remedy web server and app server.
I was wondering, if we have a remedy web server pool and vip and a remedy app server pool and vip, what's the best way to trace/monitor/troubleshoot traffic from the web server pool to the app server pool? This is BMC remedy 8. Thanks.667Views0likes4CommentsExport GTM Configuration to Text File
Hello all, Trying to go through our GTM Wide IPs and confirm whether or not the " Verify Virtual Server Availability" check box is selected. I figured I could export the config via SCF and then search but it only shows the high level system items in the SCF file and not the GTM configurations. Is there a way to do this? Thanks, BrianSolved655Views0likes2CommentsR-Series Tenant - Need to change Vlan tag
I need to change all of the vlans on my LTM-tenant (15.1.10.4) - The changes are on the tag not the name - I need to keep the names the same and change the tag numbers. [ vlan Core 1978 to vlan Core 978 - about 13 vlans total ]. Put the tenant in provisioned mode. Started by deleting the vlan in the Host f5OS gui (removing the vlan from the LAG and the tenant - then deleting the vlan). Then created a new vlan with the same name and different tag. Then added the vlan to the LAG and tenant. Deployed the tenant. R-Series LAG and tenant setup looks perfect. Tenant still has the old vlan. Found instructions for this procedure which include deleting the vlan from the tenant - which results in the error -- Cannot delete Resource vlan - because Virtual Server references it -- or something like that... -Dave MehlbergSolved649Views0likes8Comments