Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

How to adjust VIP setting from an iApp

Hi,

I have to adjust virtual-address settings from an iApp.

The iApp create a single VS, with an unused destination-IP. So the associated VIP is automatically created. But I have to advertise this IP inside OSPF, so I would-like to do this in the iApp.

If I use this line :

iapp::conf create ltm virtual-address /Common/${::vs__vip} route-advertisement enabled

the VIP is created with required parameters, but the virtual-ip is depending on the application :

  • 1.1.1.6 without iapp::conf create ltm virtual-address
  • 1.1.1.10 with iapp::conf create ltm virtual-address

Image Text

And the VIP cannot be modified, either inside or outside the iApp (changing traffic-group of the iApp or of the VIP for example) because of the application dependence.

Do you know how to set default VIP settings ? Like advertisement, arp, etc.

Thank you for your responses,

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Adding "app-service none" to the virtual-address command will detach it from the iapp, allowing you to modify it at-will later on. (Note that since it is no longer managed by the iapp, the virtual-address will not be deleted when the iapp is deleted.)

iapp::conf create ltm virtual-address /Common/$::vs__vip route-advertisement enabled app-service none

0
Comments on this Answer
Comment made 28-Dec-2016 by Sébastien B. 69

Hi Fred,

With app-service none this application dependency disappear in VIP list, but it's still impossible to modify the iApp traffic-group :

Image Text

Do you have any idea?

0
Comment made 28-Dec-2016 by Fred Slater

There must be more to it. I cannot reproduce your problem by simply changing the traffic-group.

0
Comment made 28-Dec-2016 by Sébastien B. 69

Hi,

I've recreate a simplified iApp to test that.

You should manage to import this template.

  1. Create an instance with 10.10.10.10 as vip and traffic-group-X as iApp traffic-group (should be ok)
  2. Modify the vip with 10.10.10.11 (should be ok)
  3. Modify the iApp traffic-group with traffic-group-Y ("should" not be ok)

01070734:3: Configuration error: The virtual address (/Common/10.9.8.7) can not be modified because it is in use by application (/Common/t.app/t) that does not have a matching traffic group

Do you have the same error?

0
Comment made 28-Dec-2016 by Fred Slater

Thank you. I am able to reproduce it now. I added a traffic-group parameter directly into the iapp, which did not help by itself, but if you change the traffic-group to the same value in both in the iapp presentation and in the Template Selection section simultaneously, it works.

implementation

set static { ip-protocol tcp snat automap }
set vip ${::vs__vip}

iapp::conf create ltm virtual ${tmsh::app_name}_HTTP destination ${vip}:80 $static
iapp::conf create ltm virtual-address /Common/${vip} arp disabled route-advertisement enabled traffic-group $::vs__traffic_group

presentation

section vs {
    string vip
    choice traffic_group tcl {
        return [iapp::get_items cm traffic-group]
    }
}

If you would, please open a case with F5 Support and refer to ID636035.

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Hi,

I just stumbled across this question when I hit exactly the same problem: I want to use an iApp for the mass deployment of VIPs that will be cloned to a second traffic group.

Running 12.1.2 it seems impossible to detach a virtual-server from the iApp (even though app-service none will hide the link to the application in the virtual address list, it seems the iApp itself does not forget about it...). Of course I could change the iApp to cover only one traffic group and replicate the config manually / scripted to the seconds traffic group but I really would like to get it solved using only a single iApp.

Do you see a potential other solution?

Thanks, Sebastian

0
Comments on this Answer
Comment made 21-Aug-2017 by Fred Slater

Did the workaround I described above not work? What do you mean by "impossible to detach a virtual-server?" What error are you getting?

0