Forum Discussion

ringoseagull_77's avatar
ringoseagull_77
Icon for Nimbostratus rankNimbostratus
Jan 30, 2014
Solved

Do F5s continue to advertise virtual server IPs after they have been disabled or deleted?

I've been doing a migration from a pair of 1500s running 10.2.4 to a pair of 5000's running 11.4.1.

 

After disabling the virtual servers on the old HA pair I enabled them using the same IP addresses on the new F5s. Set up was the same except the new F5s had new self-ips.

 

The websites came up on the new boxes, but after a short time went down, Nagios reporting http errors. We set one new F5 to standby, then the second, which forced the first back into active mode and the websites came back.

 

It has been suggested to me that the new pair do some kind of arp table clearance every 12 hours, and that this might be the cause, in which case the issue might be that they are not configured correctly.

 

From a network perspective, an arp query on the network stacks gave two MAC addresses advertising the same IP address for the migrated websites. One was the MAC address utilised by spanning tree on the active new 5000 and the other was that of the old active 1500.

 

Do F5s ever continue to advertise IPs for virtual servers that have been disabled or is this more likely to be cached elsewhere? I also deleted one of the virtual servers from the 1500s as a further test.

 

Unfortunately the issues were such that I've had to roll back all virtual servers to the 1500s and power down the new 5000s so further trouble shooting is not possible, but if anyone has any info on this that would be greatly appreciated.

 

  • The LTM should not respond to ARP requests for an IP address assigned to a disabled virtual server. I'm guessing that something is cached within your network, or something is still enabled when it shouldn't be on your 1500s.

     

6 Replies

  • The LTM should not respond to ARP requests for an IP address assigned to a disabled virtual server. I'm guessing that something is cached within your network, or something is still enabled when it shouldn't be on your 1500s.

     

  • Thanks Cory, that was my thinking re the 1500s. I can't see why they would be advertising a disabled virtual server.

     

    I would be interested to know what might still have been enabled on them which shouldn't have been. Can you (or anyone else) elaborate?

     

  • If you disabled virtual server on old devices an arp entry for old "virtual server" MAC-address may be cached on router.

     

  • Difficult to say for certain that it was configuration related or not. Disabling the virtual servers on the 1500 pair should have stopped them from responding to ARP requests for the address. If switches in between have the ARP cached though, that really isn't something you can control without manually clearing the cache on the switch.

     

    If you wanted to troubleshoot the behavior further, you could setup a dummy virtual server on your 1500 pair and then go through the exercise of trying to migrate it to the 5000 pair and definitively figure out what the issue is. Not sure if your environment will allow you to do something like this, but it would shed some light on your situation.

     

  • I think that's possible Vitaliy, I'm hoping to rule out the suggestion that it is the 1500 itself advertising the IP.

     

  • Thanks for your answers. I've raised a support case with F5 to try and find out if it is possible for 1500s to advertise the IP's of disabled virtual servers.