Forum Discussion

Jinshu_134425's avatar
Jinshu_134425
Icon for Nimbostratus rankNimbostratus
May 31, 2016
Solved

Strange Problem- F5 APM

Hi Folks,

 

We are facing strange behavior on F5 APM which sends RST packets while login to the portal. We have tried all the way to understand the error but failed to solve the issue.

 

Error shows as below. Anyone got same kind of issues or any solutions would be a great help.

 

 

  • Hi,

     

    If you are running bigip 11.5.3 on viprion, you may hit a bug that we get an engineering HF. The issue is fixed in 11.6.1

     

10 Replies

  • Do you see anything in the LTM or APM log files that would help identify the issue?

     

    Have you tried enabling RST cause logging (SOL13223)? You can do that and check the log file, but also take a packet capture of the traffic and get some RST cause information in the data there too.

     

    Do you have any iRules associated on that VIP that may be causing an issue? You could try adding some logging to see if there's a specific point that's erroring out.

     

  • Not able to find anything from F5 logs. Also i have enabled RST logging and found below.

    RST sent from 10.10.10.1:443 to 20.20.20.10:42668, [0x1b61152:8908] {peer} TCP retransmit timeout

    source: 20.20.20.10

    VIP: 10.10.10.1

    This APM policy is created using iAPP and no other iRules enabled on it.

  • Hi,

     

    is the user authenticated to the APM or is it before authentication?

     

    If the user is already authenticated, are you sure webtop and ressources are assigned to the user?

     

    If the user does not have any resource and webtop, the session is allowed in LTM-APM mode to the default pool member of the VS. if no pool is assigned, the F5 send a RST packet.

     

  • It is sometimes before the login page and sometimes after entering the credentials. I have done some research using http watch and found the connection is trying to establish. Screenshot attached.

     

     

  • Hi,

     

    If you are running bigip 11.5.3 on viprion, you may hit a bug that we get an engineering HF. The issue is fixed in 11.6.1

     

    • Jinshu's avatar
      Jinshu
      Icon for Cirrus rankCirrus
      Hi Yann, Could you provide the BUG ID for this issue please.. We are on 11.5.3 vCMP Guests on Viprion chassis/
    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      511893-5 : Client connection timeout after clicking Log In to Access Policy Manager on a Chassis
  • Hi,

     

    If you are running bigip 11.5.3 on viprion, you may hit a bug that we get an engineering HF. The issue is fixed in 11.6.1

     

    • Jinshu's avatar
      Jinshu
      Icon for Cirrus rankCirrus
      Hi Yann, Could you provide the BUG ID for this issue please.. We are on 11.5.3 vCMP Guests on Viprion chassis/
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      511893-5 : Client connection timeout after clicking Log In to Access Policy Manager on a Chassis