Hot answers tagged

7 votes
Accepted

F5 as a backbone router

Pushing full routes into a load balancer is about as far from best practice as you can get. Give it a default route to an actual router and a static route back to your subnets and it should be able ...
user avatar
  • 6,026
7 votes

can we use Cisco 4900M switch for converting single mode (1G) to multi mode (10G) interface

Yes, you can (assuming you have the correct optics). Whenever you have a speed mismatch like this, you can run into queueing problems. If the switch receives traffic from the 10G interface and ...
user avatar
  • 62.5k
6 votes
Accepted

F5 BigIQ communication with BigIP

F5 has a REST API available, documentation and examples can be found on https://devcentral.f5.com. If you have some programming skills, writing some scripts in python to do things isn't that hard. ...
user avatar
  • 15.6k
6 votes
Accepted

How to find out F5 platform type via CLI?

# show sys hardware will display you all the information you're looking for As example: ... Platform Name BIG-IP i2600 ...
user avatar
5 votes
Accepted

F5 `show sys version` only shows 3 digit only

According to F5 download resource, 13.1.3 is older than 13.1.3.2
user avatar
5 votes
Accepted

How does NMAP know that the device is a F5 load balancer

NMAP uses quite a number of observable features to guess a device's operating system and details. Easily seen for local hosts is the ethernet address, which has 24-bit Organisationally Unique ...
user avatar
  • 15.9k
5 votes

How can we reset a service account password in the F5 CLI?

Using tmsh to modify the system maintenance account passwords Impact of procedure: Performing the following procedure should not have a negative impact on your system. Log in to the TMOS Shell (tmsh)...
user avatar
5 votes
Accepted

How do you configure the Password Memory on the F5 Big IP?

Last login: Mon Nov 24 11:12:09 2014 from 1.1.1.1 bp>!bash [JH@F5:Standby] ~ # tmsh JH@F5(Standby)(tmos)# modify auth password-policy password-memory ? Specifies the number of ...
user avatar
  • 6,440
4 votes
Accepted

F5 VIP required to have on External VLAN?

SelfIP is for sure needed on External as that's where it will arp out for the VIP address. The one on VLAN 10 should be used so it can locally contact the box, otherwise it will refer to the route ...
user avatar
  • 566
3 votes

F5 backup whole bigIP configuration and save UCS

(tmos)# save /sys ucs Configuration Items: foobar.ucs I guess you are under tmos shell, right? I mean you have to enter in tmos shell running the command "tmsh". Then, you have to write the rest ...
user avatar
3 votes

How does NMAP know that the device is a F5 load balancer

nmap probes the target machine for open TCP/UDP ports. When it finds an open port, it sends "probe" data to that port and sees what, if anything, comes back. This "probe" data that nmap sends depends ...
user avatar
  • 2,396
3 votes
Accepted

F5 loading balancing - Routing requests to specific server in pool when specified in the request?

You could do this with iRules. The admin override would request the page adding a cookie like so: http://somesite.com?override=web1 Then the iRule would look for an an HTTP Cookie of override ...
user avatar
  • 13.9k
3 votes

F5 auto SNAT not working

SNAT automap applied to a VIP will only affect traffic that has arrived inbound to the VIP. It won't affect traffic initiated from your real servers heading outbound. For that, you will need to ...
user avatar
  • 13.9k
3 votes

F5 as a backbone router

Not enough points to comment in agreement with mxrx yet, or vote his answer up, so I'll answer in agreement. The BIG-IP can do routing well yes, but in support of application delivery. But if you ...
user avatar
3 votes
Accepted

F5 Routing - Default Route or IP Forwarding Virtual Server?

You're not alone, there is often confusion about the Forwarding Virtual Server, and what role it serves in an F5 LTM. Not having watched the video in question, I can only speculate on exactly what ...
user avatar
  • 8,258
2 votes

F5 Load Balancer : Firewall and server shows source as client machine IP not F5 IP

On the F5 you can run tmsh show sys connection to display ltm connections. This will output the following information that will be useful for finding out what the F5 actually does: cs-client-addr - ...
user avatar
  • 41
2 votes
Accepted

F5 Load Balancer : Firewall and server shows source as client machine IP not F5 IP

Loadbalancing on F5 can work this way, if you configured it to do so, but without any configuration details it's impossible to tell if that's the case here. In many cases seeing the actual IP ...
user avatar
  • 15.6k
2 votes
Accepted

Cisco STP issue with BIG IP F5 trunk

If your F5 is in passthrough mode, that means it is transparent to BPDUs -- The C3850 and Nexus switch see each other as directly connected STP neighbors. So it makes sense that you can't block the ...
user avatar
  • 62.5k
2 votes
Accepted

Automate creation of F5 user accounts using SSH and TMSH

Step 1: Enable SSH public key authentication on the F5 account you want to use for automation: MY_KEY=$(cat ~/.ssh/id_rsa.pub) WAF_IP=10.0.0.100 SSH_OPTIONS=' -p 50001 ' #Optional if you need to ...
user avatar
  • 151
2 votes
Accepted

F5 backup whole bigIP configuration and save UCS

I had an operator role. I needed to have an administrator or iRule Manager(or something similar?) role only for this to show up!
user avatar
  • 235
2 votes

Where should I locate F5 Load Balancer in Network Segmentation?

As @Zac67 already mentioned, there's not one best practice here. There are a few things to consider here: what function does the firewall have? Does it just do stateless inspection? Or is it a ...
user avatar
  • 15.6k
2 votes
Accepted

When should I create a new F5 LTM virtual server compared to using an existing one with a policy?

Evaluating those policies (I assume done with iRules) costs CPU resources for every HTTP request made to the load balancer. If you have some heavy traffic sites, this can affect the performance of the ...
user avatar
  • 15.6k
1 vote

F5 Policy Based Routing - how do you change next hop without any conditions?

I haven't tested this, but I assume your attempts don't work because you don't have any match clause to tell the F5 when to apply this rule. So it should be something like this: when CLIENT_ACCEPTED { ...
user avatar
  • 15.6k
1 vote

How to find out F5 platform type via CLI?

if you want to view it through the webUI. Device Management > Devices > select the device > then look for "Platform Name" ie: i2600
user avatar
1 vote
Accepted

Site-to-Site IPSEC through load balancer with persistence

That won't work. Whipping the IPsec termination around breaks the protocol. Also, there'd be only one tunnel at any given time. You need to create one IPsec tunnel for each WAN connection and then ...
user avatar
  • 70.5k
1 vote

How to troubleshoot VPN packet issues?

You can collect the logs in a way when the issue is in live. Try to Run wireshark on your Laptop, ask them to collect the logs and at the same time if you can try to ping any global IP like (8.8.8.8)...
user avatar
1 vote

can we use Cisco 4900M switch for converting single mode (1G) to multi mode (10G) interface

None of the modules/linecards that were available for the Cat4900M had GBIC or SFP slots. Quoting from what is left at cisco.com about the Cat4900M The Catalyst 4900M offers eight fixed wire-speed ...
user avatar
1 vote

F5 on AWS BGP configuration

The tmos in the prompt indicates that you are already inside the tmsh shell. No need to prefix commands with tmsh. You would only do this if you were in the bash shell (to get there from tmos, type ...
user avatar
  • 949
1 vote

F5 VIP required to have on External VLAN?

Without assuming anything, if you want a VIP in the External network (VLAN 20) and be able to access nodes in the Internal network (VLAN 10) via that VIP then you should add both VLANs with Self IPs ...
user avatar
  • 111

Only top scored, non community-wiki answers of a minimum length are eligible