Extending disk space on BIG-IP VE
I have been researching how to expand the storage on K14952, this indicates that the storage of the following directories should be expanded: /var /var/log /config /shared /appdata However, it does not detail how much these directories should grow or increase. What would be the growth recommendation? Is growth at personal discretion? Regards https://my.f5.com/manage/s/article/K14952
Max number of Interfaces VE v13 ESXi 5.1
Hi, I tried to find info about max number of interfaces supported by listed configuration. I know it is working with 6 vNIC but need to increase to 8. After that I have such error displayed when device is rebooted: May 20 10:45:24 bigiptest emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all " - failed. -- Syntax Error:(/config/bigip.conf at line: 1510) single quotes are not balanced I checked bigip.conf and here can't see anything strange at listed position: security dos bot-signature "/Common/T H A T ' S G O T T A H U R T" { category "/Common/Exploit Tool" rule "headercontent:\"T H A T ' S G O T T A H U R T\"; useragentonly; nocase;" user-defined false } rule "headercontent:\"T H A T ' S G O T T A H U R T\"; useragentonly; nocase;" is at 1510 After reboot all added interfaces were listed (via GUI or tmsh list interfeces) but no net interface declarations in big_base.conf So I added them manually but after reboot still the same error. I tried to follow advice with deleting mcpdb.* files for /var/db/ folder but those files are not present. Any idea how to fix? Or maybe there is no way to have more than 6 vNIC in BIG-IP VE? Piotr
Bandwidth Utilization warning
I am running a virtual edition BigIP system with a licensing limit of 24mbps. I get these messages in my syslog all the time. <133>Dec 19 16:28:09 testf51 notice tmm2[14781]: 01010045:5: Bandwidth utilization is 20 Mbps, exceeded 75% of Licensed 24 Mbps <133>Dec 19 16:28:09 testf51 notice tmm[14781]: 01010045:5: Bandwidth utilization is 28 Mbps, exceeded 75% of Licensed 24 Mbps <133>Dec 19 16:28:10 testf51 notice tmm2[14781]: 01010045:5: Bandwidth utilization is 20 Mbps, exceeded 75% of Licensed 24 Mbps <133>Dec 19 16:28:11 testf51 notice tmm2[14781]: 01010045:5: Bandwidth utilization is 20 Mbps, exceeded 75% of Licensed 24 Mbps My question is, does the VE throttle the traffic if it reaches 24mbps? If so, why do I see 28mbps and some times 30mbps in the log message? How is it exceeding the license and how high can it go? Thanks
BIG-IQ :: Add Hard Disk to VE
Ok, my Google-fu is lacking today. More coffee needed perhaps. But for the life of me, I cannot figure out how to add another disk (virtual hard drive) to my BIG-IQ VE. I don't want to expand the current disk... which is what I am finding all of the articles pertain to (and which I already know how to do). My desire is to add another HD (via HD2) to the VE. Any ideas on how to accomplish this? root@(big-iq)(cfg-sync Standalone)(Active)(/Common)(tmos) show sys hardware Sys::Hardware Chassis Information Chassis Name Chassis Type Maximum MAC Count 1 Registration Key - Hardware Version Information Name HD1 Type physical-disk Model Virtual disk Parameters -- -- Manufacturer VMware SerialNumber VMware-sda Size 95.00G Firmware Version 1.0 Media Type HDD Name HD2 Type physical-disk Model Virtual disk Parameters -- -- Manufacturer VMware SerialNumber VMware-sdb Size 95.00G Firmware Version 1.0 Media Type HDD It seems that the VE can see the drive... but I can't install to it: root@(big-iq)(cfg-sync Standalone)(Active)(/Common)(tmos) install sys software image BIG-IQ-6.1.0-0.0.1224.iso create-volume volume HD2.1 root@(big-iq)(cfg-sync Standalone)(Active)(/Common)(tmos) root@(big-iq)(cfg-sync Standalone)(Active)(/Common)(tmos) show sys software status ----------------------------------------------------------------------------------- Sys::Software Status Volume Product Version Build Active Status ----------------------------------------------------------------------------------- HD1.1 BIG-IQ 6.0.0 0.0.1674 yes complete HD2.1 BIG-IQ 6.1.0 0.0.1224 no failed (Can't find requested disk HD2.) I assume I am missing a step here. Thanks in advance! -R
root password recovery on VE with remote authentication
I'm trying to reset the root password on a VE LTM. When I try to go to the GUI, I get a 500 gateway error. When I try to log in via SSH, my password doesn't work. I can reboot into single user mode following K4178 and mount the filesystems and "chroot /sysroot" per K35811337. However, when I run "passwd root", I get an error saying "the user root is currently authenticated from a remote source" Root shouldn't be remotely authenticated. Any suggestions of how to proceed from here? There's nothing important in the configuration currently, so I'm not concerned with keeping the existing config intact.Please help me find the correct ISO file for upgrade
Hi Expert , We have LAB device and we would like to upgrade the ISO ., currently We are using BIG-IP v12.1.3.6 (Build 0.0.3) . Can you please help me find the correct file to upgrade this version . Preferably 15.1.3.10.0.18 . Platform ID Z100 Platform Name BIG-IP Virtual Edition Software Version BIG-IP v12.1.3.6 (Build 0.0.3) BIG-IP, VE, LAB (IOOLGXS-LVFSKGB)
BIG-IP LTM VE virtual hardware upgrade: Migrate to new virtual appliance or upgrade in place?
We have 2 instances of BIG-IP LTM VE deployed in separate environments and both were deployed to their respective vSphere environments several years ago and are still running at VMware HW Version 7, though the BIG-IP LTM versions running on them are currently 14.1.6. We have been upgrading them by ISO files (standard software upgrade procedure) without changing the VMs' configurations or virtual hardware versions. We have since upgraded our vSphere environments to 6.7 U3, and we plan to upgrade the BIG-IP LTM VE appliances we have to version 15.1.x from 14.1.x (and later, our physical F5 BIG-IP nodes from 13.1.x to 15.1.x). What is the best approach or path to upgrading both the virtual hardware and software versions running on them? Do I just upgrade the virtual HW in place to the latest available, or is it better/easier to deploy the 15.1.x VE OVA and just backup/copy/migrate the configs (UCS..?) over to the new appliance? If upgrading HW in place, does the VM need to be powered off? I want the most stable upgrade method possible, since the HW upgrade is a big jump up, especially when also upgrading a major OS version. Note, we can easily power the virtual F5 appliances down as these are in test environments.Restoring a VE with a UCS
Hello All, I am fairly new (1 year or so) working with the Virtual edition and am now writing a disaster recovery document for our deployment. I am hoping someone out there has done it before I attempt it. I took the troubleshooting class so I know that if the vm crashes and you have to import a new ovf that when you recover from the UCS you have to issue a no license switch. What I would like to know before that would be how much of the networking do you need to rebuild before you use the UCS. We do not have a management network so I have to access the VEs from a self-ip that allows HTTPS and SSH. Could I create the external vlan, the self-ip that allows me to scp the ucs to the new re-licensed (I would have already released the license and using the offline license tool relicensed it) and restore from tmsh the rest of the configuration, or do I need to create all of the vlans, and the external, internal and HA sef-ips as well? Any input would be much appreciated!Floating IPs and VIPs stop responding after a VMotion
I have many active/standby pairs of VEs hosted in VMWare ESXi 6.0, 6.5, and 6.7. Our organization puts an insane amount of weight on availability. We have noticed that it is significantly less impactful to our various applications to Vmotion a F5 rather than fail over to the peer and Vmotion in standby state. There is a catch though. The F5 does not initiate outbound traffic on subnets that are dedicated for VIPs and thus the CAM table on the upstream switch does not get updated and traffic is black holed. This is not an issue for the majority of our VIP subnets because there is always some traffic coming and going on it but in some environments, where a VIP subnet is relatively quiet, traffic is black holed until the table on the switch times out. I can fix this for self IPs by creating a pool with the SVI in it and an ICMP monitor. I have not found a way to fix this for floating IPs and VIPs short of doing a fail over to force a GARP. I could create a forwarding VIP in each of the subnets and stick VMs behind them to constantly send pings but this would be a logistical nightmare. Any thoughts?
