Forum Discussion

Krishna_251070's avatar
Krishna_251070
Icon for Nimbostratus rankNimbostratus
Mar 06, 2018

F5 LTM Monitor

Hello Experts,

I have this configuration written in a Cisco ACE config. I want to convert this to F5 config. Can anyone please help me to write the F5 equivalent config?

probe https ACE_PROBE
  port 8447
  faildetect 2
  ssl version all
  request method get url /path/file.html
  expect status 200 200

1 Reply

  • Taking it ine by line:

    port 8447
    

    The port 8447 is only needed as part of the monitor if the pool member is not using port 8447, else you can ignore it.

    faildetect 2
    

    Cisco ACE probes uses a failure count but the F5 uses a timeout, so to get the same you need to set a monitor interval of 15 (the Cisco ACE default for http probes) and a timeout of 31 (2 x interval + 1)

    ssl version all
    

    Use the default HTTPS monitor cipersuite configuration

    request method get url /path/file.html
    

    The request (send) will be a HTTP 1.0 request from the ACE so you can use the following on the F5

    GET /path/file.html HTTP/1.0
    

    finally

    expect status 200 200
    

    In the receive of the monitor configure you are looking for the status response of 200 OK

    200 ok
    

    Complete monitor config:

    ltm monitor https /Common/ACE_PROBE {
        adaptive disabled
        cipherlist DEFAULT:+SHA:+3DES:+kEDH
        compatibility enabled
        defaults-from /Common/https
        destination *:*
        interval 15
        ip-dscp 0
        recv "200 ok"
        send "GET /path/file.html HTTP/1.0"
        time-until-up 0
        timeout 31
    }