Forum Discussion

Justin_Kitagawa's avatar
Justin_Kitagawa
Icon for Nimbostratus rankNimbostratus
Sep 19, 2007

Creating a VLAN puts F5 into INOPERATIVE mode

Hi.

 

 

We are using the Java iControl SOAP API to create a VLAN. Below is a code snippet of what we are trying to do:

 

 

networkingVLANBindingStub = (NetworkingVLANBindingStub)new NetworkingVLANLocator().getNetworkingVLANPort(url);

 

networkingVLANBindingStub.setTimeout(60000);

 

 

String[] vLanName = {"Vlan"+vlanTag};

 

long [] vLanId = {vlanTag};// tag

 

long [] time = {5};// ???

 

String [] mac = {"00:00:00:00:00:00"};

 

CommonEnabledState[] commonEnabledState = {CommonEnabledState.STATE_ENABLED};

 

 

NetworkingVLANMemberEntry member = new NetworkingVLANMemberEntry();

 

member.setMember_name(memberName);

 

member.setMember_type(NetworkingMemberType.MEMBER_INTERFACE);

 

member.setTag_state(NetworkingMemberTagType.MEMBER_TAGGED);

 

 

NetworkingVLANMemberEntry[][] networkingVLANMembers = {{member}};

 

 

networkingVLANBindingStub.create(vLanName,vLanId,networkingVLANMembers,commonEnabledState,time,mac);

 

 

 

The API returns OK without exceptions. We can see the VLAN in the BigIP admin UI, but in a connected ssh terminal we see

 

 

[root@company:INOPERATIVE] user1

 

 

What can be the problem? This is a very serious issue that is keeping us from moving forward.

 

 

Justin
dev
devops
iControl

1 Reply

Sort By
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Sep 19, 2007
    It looks as if you are using the API correctly if the VLAN is created. As to why it's causing an INOPERATIVE state, is likely due to the fact on the parameters you've passed in. You are putting "5" in for the failsafe_timeout. The default value in the GUI is 90 seconds. You might want to bump that up a bit. The other thing that sticks out is the MAC Masquerade address you are passing in of 00:00:00:00:00:00:00:00. Not sure if that is valid for a shared MAC address.

     

     

    I'd go with these steps in diagnosing the problem.

     

     

    1. Create the VLAN in the GUI with your parameters.

     

    2. Check the ssh connection to make sure it is not in the INOPERATIVE state.

     

    3. Go into the admin GUI and look at the properties for that VLAN.

     

    4. Create a VLAN with your iControl code.

     

    5. Go into the admin GUI and compare the values with the ones from the GUI created VLAN.

     

    6. Check the ssl connection to make sure it is not in the INOPERATIVE state.

     

     

    If the configuration is identical between the two VLANs and the iControl created on is the only one causing an INOPERATIVE state, let me know. We may have to escalate this to product support.

     

     

    -Joe