Forum Discussion

Russell_77729's avatar
Russell_77729
Icon for Nimbostratus rankNimbostratus
Feb 10, 2015

Advertised route via OSPFv2

We use the advanced routing module (a module I'm not familiar with) in the F5 to advertise routes via OSPFv2 to to a network that uses the F5 as the default gateway. There are two Forwarding (IP) virtual servers one handling traffic into this network listening for a destination of 192.168.86.0/24 on any port and one for outbound traffic listening for a destination of any on any port.

For some reason my standby F5 is also advertising itself as the default route. I have worked with my Cisco guys to verify there are no static routes (their first assumption) and OSPFv2 is the only routing protocol enabled. I thought when we configured the routing module that both units were configured the same, but apparently not. Any help in running this down would be greatly appreciated since I inherited this I'm not really sure where to look next.

This is from our core data center switch:

        Type-5 AS External Link States 

    Link ID         ADV Router      Age        Seq       Checksum Tag
    0.0.0.0         Standby F5 IP   1246       0x800009d9 0x2b20    0

17 Replies

  • Under Route Advertisement, can you uncheck this feature to verify the outcome? If your active box goes down you would expect the standby unit to advertise the route to the up stream routers.

     

    Judging from what your saying, you are seeing routes advertised by the standby unit with a better metric?

     

    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      I see the 192.168.86.0 route advertised from both, but I see the 0.0.0.0 route advertised only from the standby. Neither unit should be advertising 0.0.0.0 but both should be advertising 192.168.86.0.
    • NikhilB's avatar
      NikhilB
      Icon for Employee rankEmployee
      OK. So am assuming you have route advertisement turned off for 0.0.0.0 route on both devices?
    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      Correct. ltm virtual-address 0.0.0.0 { address any app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask any metadata none partition Common route-advertisement disabled server-scope any traffic-group traffic-group-1 unit 1 }
  • NikhilB_149913's avatar
    NikhilB_149913
    Historic F5 Account

    Under Route Advertisement, can you uncheck this feature to verify the outcome? If your active box goes down you would expect the standby unit to advertise the route to the up stream routers.

     

    Judging from what your saying, you are seeing routes advertised by the standby unit with a better metric?

     

    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      I see the 192.168.86.0 route advertised from both, but I see the 0.0.0.0 route advertised only from the standby. Neither unit should be advertising 0.0.0.0 but both should be advertising 192.168.86.0.
    • NikhilB_149913's avatar
      NikhilB_149913
      Historic F5 Account
      OK. So am assuming you have route advertisement turned off for 0.0.0.0 route on both devices?
    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      Correct. ltm virtual-address 0.0.0.0 { address any app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask any metadata none partition Common route-advertisement disabled server-scope any traffic-group traffic-group-1 unit 1 }
  • can you provide the output from the tmsh command

    list ltm virtual-address 192.168.86.0 all-properties
    ?

    I want to see what traffic-group the network virtual-address is associated with.

    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      ltm virtual-address 192.168.86.0 { address 192.168.86.0 app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask 255.255.255.0 metadata none partition Common route-advertisement enabled server-scope none traffic-group traffic-group-1 unit 1 }
    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      That was the standby unit, here is the active unit. ltm virtual-address 192.168.86.0 { address 192.168.86.0 app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask 255.255.255.0 metadata none partition Common route-advertisement enabled server-scope none traffic-group traffic-group-1 unit 1 }
  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus

    can you provide the output from the tmsh command

    list ltm virtual-address 192.168.86.0 all-properties
    ?

    I want to see what traffic-group the network virtual-address is associated with.

    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      ltm virtual-address 192.168.86.0 { address 192.168.86.0 app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask 255.255.255.0 metadata none partition Common route-advertisement enabled server-scope none traffic-group traffic-group-1 unit 1 }
    • shaggy's avatar
      shaggy
      Icon for Nimbostratus rankNimbostratus
      can you post the same config from the standby unit?
    • Russell_77729's avatar
      Russell_77729
      Icon for Nimbostratus rankNimbostratus
      That was the standby unit, here is the active unit. ltm virtual-address 192.168.86.0 { address 192.168.86.0 app-service none arp disabled auto-delete true connection-limit 0 description none enabled yes floating enabled icmp-echo disabled inherited-traffic-group false mask 255.255.255.0 metadata none partition Common route-advertisement enabled server-scope none traffic-group traffic-group-1 unit 1 }