Forum Discussion

b_136889's avatar
b_136889
Icon for Nimbostratus rankNimbostratus
Apr 24, 2014

Configuring a bigip LTM VE interfaces in openstack.

Hi , I have launched a bigip vm on openstack. It comes up with 3 interfaces.eht0 ,eth1, eth2. Did a config and got a management network IP on eth0. Trying to make one more interface work. Todo so logged into the bigip web interface and created 2 vlans and attached it to the 1.1 and 1.2 interface. Assigned the ip address to vlan1.1 and vlan1.2, but I am not able to ping them. Is there anything I am missing ? I have assigned 10.0.0.104 to vlan1.2 and if I ping this from a router I see that I am getting a ICMP echo request on eth2.

 

application delivery
cloud
deployment
LTM
openstack

3 Replies

Sort By
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 24, 2014

    Sorry it's not clear where you can't ping from. It works from the router so where doesn't it work from?

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 24, 2014

    Check the Port Lockdown settings for each interface.

     

    Where VE is concerned, enable Promiscuous Mode and Forged Transmits for VMware or whatever the equivalent is in other hypervisors.

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 25, 2014

    OK, so I know nothing about OpenStack (for now). Does it have it's own hypervisor?

     

    Just going back to basics, you have two virtual 'traffic' interfaces;

     

    *How are these configured at the hypervisor end?

     

    *Is the hypervisor expecting tagged or untagged packets?

     

    *Did you assign the two VLANs you created to the two interfaces as tagged or untagged?

     

    *You can't assign two untagged VLANs to a single interface so I guess you know where I'm going with this.

     

    *As I mentioned before, whatever the hypervisor, is there an option to enable Promiscuous Mode and Forged Transmits?

     

    *The 'router' you mention, is it physical or virtual? Is it in the same 'port group' or whatever?

     

    *Have you tried the ping from the F5 to the router?