Forum Discussion

jorgeborges_184's avatar
jorgeborges_184
Icon for Nimbostratus rankNimbostratus
Apr 01, 2015

Traffic-Group Floating IP

I have 2 BigIP 6900s in an active-passive failover configuration. Recently one died and has been turned off. The passive took over as the active member with one problem - devices downstream of the BigIP no longer see traffic as sourced from the "floating IP" of the traffic-group (traffic-group-1), they see it coming from the individual IP of the Big-IP (traffic-group-local-only). Does anybody know how to remedy this?

 

9 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    I take it you mean application traffic and you're using snat automap on your VS? Monitor traffic will use the non floating self IP. You might want to configure Mac masquerade. See SOL13502.

     

    See if that helps,

     

    N

     

  • Hi,

     

    It can depend on version of TMOS, check SOL7698 if you are using one of versions this SOL has in Applied to section.

     

    You can as well check SOL7336: The SNAT Automap and self IP address selection.

     

    I assume that floating Self IP is still available on current active unit and that you did not convert it to Standalone (however I am pretty sure that even then defined floating should be used).

     

    Piotr

     

  • SOL7698 tells me to change the unit id of the floating IP to 1, but I don't see the unit id field.

     

    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      that's a tmos version 10 thing. there were some issues with the unit id interfering with the snatted address (although i think that was 10.2.3).
  • I'm using TMOS 11.3. I also tried creating a snat pool with the IP I want in it, but that didn't work

     

    • dragonflymr's avatar
      dragonflymr
      Icon for Cirrostratus rankCirrostratus
      Well, seems like a bug to me. Are you able to reboot this unit - as old IT remedy for everything :-) If it won't help then I guess only solution is to open support case. Piotr
    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      might be an idea to raise a ticket with f5 support on this. i'd check the log file /var/log/ltm too to see if anything of interest