MAC address of deleted VS IP address still responsive
Hello, We're decommissioning a very old pair of BIG-IP 3900 appliances running 12.1.2 b0.0.249, and faced with an issue that once the VS was deleted the IP is still responsive to ping, and according to arp table, the MAC is bound to the SelfIP on the standby unit. I found K11091 which mentions a workaround although it's related to the situation when the SelfIP is deleted. Any hints would be greatly appreciated. Thank you.
VS Precedence
Hi I have a question relating to VS precedence and which VS would process the packet in the following example: Packet - destination IP > 10.10.10.10 destination port > TCP/80 VIP-A 10.10.10.0:80 protocol tcp mask 255.255.255.0 VIP-B 10.10.10.10:80 protocol udp mask 255.255.255.255 My understanding having read https://support.f5.com/kb/en-us/solutions/public/6000/400/sol6459.html is that there is a higher emphasis on the VS with the longest subnet match. However, in the in above example, this would be VIP-B - but the protocol for this VS is UDP. Would VIP-B process the request and subsequently drop traffic - or is the BigIP intelligent enough to match on a VS with a lower precedence, but one that has the correct protocol configured? Many thanks Lee
VS Precedence
Hi I have a question relating to VS precedence and which VS would process the packet in the following example: Packet - destination IP > 10.10.10.10 destination port > TCP/80 VIP-A 10.10.10.0:80 protocol tcp mask 255.255.255.0 VIP-B 10.10.10.10:80 protocol udp mask 255.255.255.255 My understanding having read https://support.f5.com/kb/en-us/solutions/public/6000/400/sol6459.html is that there is a higher emphasis on the VS with the longest subnet match. However, in the in above example, this would be VIP-B - but the protocol for this VS is UDP. Would VIP-B process the request and subsequently drop traffic - or is the BigIP intelligent enough to match on a VS with a lower precedence, but one that has the correct protocol configured? Many thanks Lee
Automation iRules that assign in VS to pipeline CI/CD
Hi Everyone, I want to ask about automation iRules that assaign in VS F5 to pipeline CI/CD. So, our client want automaticly if they install or deploy the iRules on their source Repository pipeline CI/CD, this iRules will be automaticly applied in VS F5 in question. Is that possible ? If possible, what are the requirement and how to configure it (step by step) Thankyouu.
Self IP in different subnet and VS and pool members are in same subnet then Self ip
Hi Team, I'm working on one of the installation where the requirement is that VS - e.g 10.10.10.X and pool members are in same subnet 10.10.10.X whereas F5 Self IPs will be in different subnet e.g 10.10.20.X and would like to understand how the routing will work for traffic hitting to VS (We need switch/router to point the route to F5 self IP e.g 10.10.20.1 for the subnet 10.10.10.X ) and from VS to pool members and return traffic from pool members to client. Can someone help?Check where SSL profile is used
Morning :) I've inherited an F5, and the previous admin was a little bit off with his SSL management. I need to do some cleaning up, and one question came up. I've already found a way to figure out which profiles are using particular SSL certificates. Now I need to move a step forward and find a matching VS for my SSL profiles Is there an easy tmsh command which could achieve that (or at least move me one step closer)?
Redirect policies to
Hello Guys, I Have the following scenario: User requests www.submarino.com.br => IP 200.40.3.2 => VS HTTPS (192.19.0.30) => submarino.crt User requests www.submarinocompras.com.br => IP 200.40.3.2 => VS HTTPS (192.19.0.30) => submarinocompras.crt I'm using Redirect policies for this to work, because the VS is the same to all websites. As it's a HTTPS website it requires digital certs and when the redirect policy matches submarino.com.br I need it to use this crt: submarino.crt. But I've never used irules and really don't know how to do it, can anyone help me out? Thanks in advance and Regards!