Forum Discussion

Jonathan_Galent's avatar
Aug 03, 2017

Problem using VPE policy macro created by iApp in v13 (works in v11) - Configuration error: Can't associate Access Policy Item folder does not exist

I have an iApp that I wrote that creates APM VPE policy macros for an existing APM policy that you specify. You are then able to assign the macro in the policy using the VPE tool. The functionality works perfectly in version 11 of BIG-IP APM.

I am testing the iApp against version 13 of BIG-IP APM and I get the following error when trying to add the macro (which is created successfully) in an existing policy:

Unable to execute transaction because of: 01070734:3: Configuration error: Can't associate Access Policy Item (/Common/Existing_mac_DemoExisting.app/keyid_macro_1) folder does not exist

In this case I can't find any reference to

/Common/Existing_mac_DemoExisting.app/keyid_macro_1
in the bigip.conf configuration file, so I'm not sure how it is concocting that path. I don't have any other problems with my iApp in V13 so far - I'm pretty well versed with iApps / APM in general.

Screenshot from adding macro successfully in V11:

Screenshot from failing to add macro in V13:

The macros are created by the iApp look like this in the bigip.conf file:

I am using the F5 BIG-IP BEST AMI image out on the EC2 marketplace for both versions.

3 Replies

  • V13 is BIG-IP 13.0.0 Build 2.0.1671 Hotfix HF2 and V11 is BIG-IP 11.6.0 Build 7.0.446 Hotfix HF7

     

  • Only solution I've found with this problem so far is to create my macros in /Common which isn't great. I tried stepping through the most simple implementation of an empty macro / policy and still get the error.