Geolocation restrict and redirect to a URL
hi all, Currently we have geolocation restriction enforced, where we only allow user from location APAC and those who are not from APAC region will get the default response page "The requested URL has been rejected. Please contact your administrator", is there a way to configure and redirect them to a custom URL? I tried to test using irules but it doesnt seem to be working. Thanks.
Pool & members showing up in active LB but in standby it is showing down.
I am seeing one pool & its pool member is showing up on active load balancer but on standby it is showing down. Both devices are in sync. On standby pool, session monitor is not showing. Is this some configuration issue or issue is from server end tmos)# list ltm pool ent-abc-ghaw-389_pool ltm pool ent-abc-ghaw-389_pool { members { 10.140.10.14:ldap { address 10.140.10.14 session monitor-enabled state up } 10.142.102.37:ldap { address 10.142.102.37 session monitor-enabled state up } 10.142.102.47:ldap { address 10.142.102.47 session monitor-enabled state up } } monitor tcp } ==================== session monitor is not showing. This is config on standby device mos)# list ltm pool ent-abc-ghaw-389_pool ltm pool ent-abc-ghaw-389_pool { members { 10.140.10.14:ldap { address 10.140.10.14 state down } 10.142.102.37:ldap { address 10.142.102.37 state down } 10.142.102.47:ldap { address 10.142.102.47 state down } } monitor tcp }
F5 | LTM | Server Hello packet is not coming
Hi Team, Hope you all are doing great! i have an issue, where i have F5 LTM VS (Standard - SSL Passthrough (no client/server SSL profile). Issue - URL is not accessible, getting error message site can't be reach. Bypassing LB it works properly. I took packet capture and observed that TCP Hnadshake is happeing but SSL handshake is not happening. Client hello is coming but Server hello is not happenning and no error message in packet capture. Please let me know if issue is with F5 or not. Regards, RAQSLB VIP Is Not Responding to Syn Packet from Client
Hi Team, Hope all of you are doing good. I have below issue :- We have pool of clients (set of proxy server, 1.1.1.1 - 1.1.1.6) , F5 is getting traffic from all Client IP and responding back, except for IP 1.1.1.5. From 1.1.1.5, traffic is getting initiated but its not reaching F5. We can see traffic generated from Client reaeching to firewall and then switch but not seeing same time at F5. Sniffer at firewall says that F5 is not responding for syn packet, but how F5 will reply if it is not seeing SYN packet? Please help to look into this from F5 perspective. Regards, RAQS
F5 BIG-IP LTM pool no outbound traffic
Hello, I am trying to setup a new virtual server (port 80) on F5 BIG-IP. I can ping the VIP and all its member IP. I can ping to the self IP of the F5 from the member server. Service is http and it's running normaly when I'm accessing the server directly, but it gave me a blank page if I access it using the VIP. When I check the pool statistics, it shows bits & packet IN but no bits & packets OUT. I am totally new into this BIG-IP thing, can someone please guide me as clear as possible of what I should do to get this working? Thanks in advance :)Installing Backup
Hi All, I need to import UCS backup from an F5 VM which is running on ver15.1.2.1 to a new VM which is running on ver12.1.5.3. Is it possible or I have to do an upgrade on new VM to make the version same on both? I know that I need to take master key of the existing VM while importing the backup? What should I do about the existing license in the UCS file --> running this command will work "load sys ucs no-license" or I have to run any other to command to make this work? What other steps are need to import the UCS file successfully? How to confirm whether the complete config is imported or not? Sorry for asking so may questions, I tried searching for all these but no help. Thanks, Ashish Solanki
Azure App Services and routing,protecting with F5
Is it possible for Azure F5 LTM module to load balance or route traffic to Azure Web apps? I have web app http://xyz.azurewebapp.net and I want to route this traffic form Azure F5 LTM module www.mycompany.com. The reason for routing through F5 is to secure it and block unwanted url to be accessible by the public and also domain verification is not an option for us. Azure app gateway does this for us, want to see if F5 can do this. Any pointer is appreciated.Health Monitor for 3389 port Pool members
Hi All, I have VIP configured for port 3389 and the pool members are also configured with port number 3389 [TCP]. I need to configure customized healt monitor for the pool members, can someone plz help me what should be the send and receive string and all other settings. As of now I am using default tcp health monitor. Regards, Ashish Solanki
WHICH VIRTUAL SERVER IS APPLIED TO AN INTERMEDIATE IRULE FOR HIGH SPEED LOGGING.
I would like to ask which virtual server, will be applied to an intermediate irule. The irule listed on Devcentral for high speed logging on f5 to arcsight or splunk on the following devcentral article https://devcentral.f5.com/articles/irules-high-speed-logging-spray-those-log-statements is ltm rule testrule { when CLIENT_ACCEPTED { set lpAll [HSL::open -publisher /Common/lpAll] } when HTTP_REQUEST { HSL::send $lpAll "<190> [IP::client_addr]:[TCP::client_port]-[IP::local_addr]:[TCP::local_port]; [HTTP::host][HTTP::uri]" } } However,i'll like to know which virtual server,the irule will be attached to. Thanks
