vpn
110 TopicsVPN Communication Error with F5 BIG-IP Edge Client
While using the F5 BIG-IP Edge Client (F5 RemoteAccess), the session timer configured on the server is set to 8 hours. The user continuously generated traffic by sending PING requests to DNS. However, after approximately 10 minutes, a VPN communication error occurred. The attached file contains logs up to the point of failure. I observed that a GetBestRouteToDestination error occurred, after which communication with the internal VPN network was no longer possible. At this time, I am unable to determine whether the communication failure preceded the error or vice versa. I try F5 official support, but I don't have any license, so I can't anything. I try contact distributor in my country, but they not response. Please help us resolve this issue and ensure stable, continuous communication.16Views0likes1Commentsetup F5vpn using key stored in TPM?
Can I setup an F5VPN connection using a key generated and stored inside the TPM of my Linux laptop? Platform is Debian 13? AFAICT f5fpc is based upon openssl (which could imply PKCS#11 support), but the documentation doesn't mention it. https://techdocs.f5.com/en-us/edge-client-7-2-4-1/big-ip-access-policy-manager-edge-client-and-application-configuration-7-2-4-1/clients-for-linux.html The openconnect F5 implementation is not an option, unfortunately, due to company policy.48Views0likes1CommentWayland support on Linux Edge client
What I did Booted Debian bookworm version 12.12 Started the Wayland compositor kwin-wayland version 4:5.27.5-3 Launched f5vpn version 7262.0.0.2 Expected result f5vpn GUI starts Actual result Did not start, and printed an error: qt.qpa.plugin: Could not find the Qt platform plugin "wayland" in "" More info In order to support Wayland, the Wayland qt6 libraries need to be bundled with the Linux Edge client. In particular, the /opt/f5/vpn/platforms/ directory should include libqwayland.so .350Views0likes0CommentsAPM VPN LDAP POOL can't contact ldap server.
Hi, I have a question regarding APM VPN and LDAP authentication. When I configure the LDAP server using the direct LDAP Server IP, the authentication works fine. However, when I use a Pool with the same LDAP Server IP, it shows the error message: "Can't contact LDAP server." From the packet capture, it seems that no traffic is being sent out at all. Is there any specific configuration I need to adjust for LDAP Pool settings? Thank you.506Views0likes14CommentsHow to nexthop all requests from VPN clients?
I have VPN access configured under APM, and a Virtual Server acting the access point. The VPN is working well. I now need to route all traffic (all requests) coming from VPN clients to another router. I don't want the BIG-IP unit to make the routing decisions and distribute the traffic, but want to next-hop all VPN traffic to a central router and have it routed from that one. (Leaving all other traffic that is not from VPN clients unaffected and still routed normally by the BIG-IP.) I can't use a static route for it, since those are destination based and what I need is effectively source based. I've tried to add an iRule to the Virtual Server: when HTTP_REQUEST { nexthop [VLAN] [Router IP] } I've also tried a few other events, such as CLIENT_ACCEPTED and HTTP_REQUEST_SEND, but I can't get it to work. Any advices on how I can next-hop all requests from VPN clients to another router?Solved246Views0likes7CommentsF5 BigIP APM VPN some LDAP field are base64 encoded
We have F5 BigIP APM (16.1.5.2) for VPN SSL and for some user some LDAP field are base64 encoded (because of french accent). I have try in Variable Assignement : session.ldap.last.attr.displayName = set encoded [mcget {session.ldap.last.attr.displayName}] set decoded [b64decode $encoded] return $decoded But in log 2025-04-17 19:06:54 x.x.x.x - err apmd[1069]: 01490086:3: /Common/AP:Common:77c07d2d: Rule evaluation failed with error: invalid command name "b64decode" Is it possible to have the good syntax for this conversion ? Thank youSolved366Views0likes1CommentDNS resolve issues on Ubuntu 24 LTS with f5fpc
Hi, Problems connecting to vpn after upgrading to ubuntu 24.04 | DevCentral After switching to Ubuntu 24 LTS, I encountered the connection issues as described here https://community.f5.com/discussions/TechnicalForum/problems-connecting-to-vpn-after-upgrading-to-ubuntu-24-04/329549 . Applying the fix symlinking /etc/resolv.conf made things work partly. What I am seeing is that, after connecting with f5fpc, /etc/resolv.conf contains the two nameservers of my vpn domain (great), but also still my local lan nameserver (192.168.1.1 , not so great). This makes that about 1 in 3 DNS requests for hosts on the vpn side fail. $ cat /etc/resolv.conf 17 │ nameserver 192.168.20.2 18 │ nameserver 192.168.20.25 19 │ nameserver 192.168.1.1 20 │ search . Any ideas what could be causing this ?1.1KViews0likes0CommentsNeed to log the VPN Pool IP Address on the Edge Firewall Logs
Dears Greeting I am Using the F5 APM as a VPN Solution On the Edge Firewall Logs i can see ONLY the SELF IP Addresses and NOT the the Assigned VPN Pool IP Address that is configured under the Network Access Profile on the APM Config, I am Using a One Arm Deployment When i am try to remove the SNAT from the Virtual Server , and Network Access Profile on the APM interchangeably and with each other , I cannot reach the services154Views0likes1Comment