How to replace F5 LTM which is failed from HA stack, I dont have backup config of failed BIG IP F5
Hi, Dear F5 Community and Seniors, One of my F5 failed from HA(Total 2 F5) and I want to replace it with other F5 obtained after RMA. Unfortunately i dont have backup file of that failed f5, now other f5 is acting as Master/Primary F5. Can you please share process of best possible solution in that case. So that i can make this new f5 as ssecondary and syn config from HA Active member because i have plenty of VIPs and Pools which colud not create manually. Furthermore, active HA F5 firmware version is BIGIP-13.0.0.0.0.1645.iso All the answers will be welcomed. Please share as per you expert commnets and way out to treat this issue.
Pool & members showing up in active LB but in standby it is showing down.
I am seeing one pool & its pool member is showing up on active load balancer but on standby it is showing down. Both devices are in sync. On standby pool, session monitor is not showing. Is this some configuration issue or issue is from server end tmos)# list ltm pool ent-abc-ghaw-389_pool ltm pool ent-abc-ghaw-389_pool { members { 10.140.10.14:ldap { address 10.140.10.14 session monitor-enabled state up } 10.142.102.37:ldap { address 10.142.102.37 session monitor-enabled state up } 10.142.102.47:ldap { address 10.142.102.47 session monitor-enabled state up } } monitor tcp } ==================== session monitor is not showing. This is config on standby device mos)# list ltm pool ent-abc-ghaw-389_pool ltm pool ent-abc-ghaw-389_pool { members { 10.140.10.14:ldap { address 10.140.10.14 state down } 10.142.102.37:ldap { address 10.142.102.37 state down } 10.142.102.47:ldap { address 10.142.102.47 state down } } monitor tcp }
Need to Re-ip the VIPs, Self-ips and mgmt IPs
Hi Experts, I have following requirement: I have to re-ip some VIPs which are currently on 4.x.x.x/24 network to 10.x.x.x/24. Can I reconfigure the old VIPs with new IPs I have self-ip(static and floating) in External and Internal Vlans , which are also need to be re-ip to 10.x.x.x/24 segment. Can I change the IPs or do I need to create new self-Ips for external and internal VLans. I have a default route on my LTMs pointing to L3 switch : list /net route all-properties net route /Common/Gateway { description none gw 4.x.x.1 mtu 0 network default partition Common } Do I need to delete this default route and create a new route which will be a L3 SVI in 10.x.x.1 Can I keep the old default route and create a new for 10.x.x.1 , will that work. Can I use forwarding VIP. Also if I remove the old self-ips and the old default G/w , will it create any outage.. I am planning to do the configuration changes on Standby device first and then make it as Active and once tested successfully, I will sync the devices. Kindly assist.. It will be great help and much appreciate it !
Geolocation restrict and redirect to a URL
hi all, Currently we have geolocation restriction enforced, where we only allow user from location APAC and those who are not from APAC region will get the default response page "The requested URL has been rejected. Please contact your administrator", is there a way to configure and redirect them to a custom URL? I tried to test using irules but it doesnt seem to be working. Thanks.
F5 | LTM | Server Hello packet is not coming
Hi Team, Hope you all are doing great! i have an issue, where i have F5 LTM VS (Standard - SSL Passthrough (no client/server SSL profile). Issue - URL is not accessible, getting error message site can't be reach. Bypassing LB it works properly. I took packet capture and observed that TCP Hnadshake is happeing but SSL handshake is not happening. Client hello is coming but Server hello is not happenning and no error message in packet capture. Please let me know if issue is with F5 or not. Regards, RAQSLB VIP Is Not Responding to Syn Packet from Client
Hi Team, Hope all of you are doing good. I have below issue :- We have pool of clients (set of proxy server, 1.1.1.1 - 1.1.1.6) , F5 is getting traffic from all Client IP and responding back, except for IP 1.1.1.5. From 1.1.1.5, traffic is getting initiated but its not reaching F5. We can see traffic generated from Client reaeching to firewall and then switch but not seeing same time at F5. Sniffer at firewall says that F5 is not responding for syn packet, but how F5 will reply if it is not seeing SYN packet? Please help to look into this from F5 perspective. Regards, RAQS
F5 BIG-IP LTM pool no outbound traffic
Hello, I am trying to setup a new virtual server (port 80) on F5 BIG-IP. I can ping the VIP and all its member IP. I can ping to the self IP of the F5 from the member server. Service is http and it's running normaly when I'm accessing the server directly, but it gave me a blank page if I access it using the VIP. When I check the pool statistics, it shows bits & packet IN but no bits & packets OUT. I am totally new into this BIG-IP thing, can someone please guide me as clear as possible of what I should do to get this working? Thanks in advance :)Installing Backup
Hi All, I need to import UCS backup from an F5 VM which is running on ver15.1.2.1 to a new VM which is running on ver12.1.5.3. Is it possible or I have to do an upgrade on new VM to make the version same on both? I know that I need to take master key of the existing VM while importing the backup? What should I do about the existing license in the UCS file --> running this command will work "load sys ucs no-license" or I have to run any other to command to make this work? What other steps are need to import the UCS file successfully? How to confirm whether the complete config is imported or not? Sorry for asking so may questions, I tried searching for all these but no help. Thanks, Ashish Solanki
Azure App Services and routing,protecting with F5
Is it possible for Azure F5 LTM module to load balance or route traffic to Azure Web apps? I have web app http://xyz.azurewebapp.net and I want to route this traffic form Azure F5 LTM module www.mycompany.com. The reason for routing through F5 is to secure it and block unwanted url to be accessible by the public and also domain verification is not an option for us. Azure app gateway does this for us, want to see if F5 can do this. Any pointer is appreciated.
