Applies To:

Show Versions Show Versions

sol14215: BIG-IP VIPRION blades may be marked down when using Packet Filters
Known IssueKnown Issue

Original Publication Date: 02/21/2013
Updated Date: 06/24/2013

Description

BIG-IP VIPRION blades may be marked down when using Packet Filters.

This issue occurs when all of the following conditions are met:

  • You have a VIPRION BIG-IP system.
  • You have enabled Packet Filters with the Unhandled packet Action option set to Reject or Discard.

This issue occurs because the packet filter filters internal MPI communication between blades.

Impact

BIG-IP VIPRION blades are marked down and fail over to other hosts in the device group.

Symptoms

As a result of this issue, you may encounter the following symptoms:

  • You may see error messages in the /var/log/ltm file. For example:

     err tmm[<pid>]: 01340003:3: Cluster error: Local MPI connections failed, bringing down my blade, and an automatic MPI recovery is underway.

  • Blades are marked down in the BIG-IP Configuration utility.

Status

F5 Product Development has assigned ID 390540 to this issue, and has confirmed that this issue exists in the products listed in the Applies To box. For information about releases or hotfixes that resolve this issue, refer to the following table:

Type of Fix
Versions Fixed
Related Articles
Release 11.4.0 SOL2200: Most recent versions of F5 software
Hotfix 11.3.0 HF5
SOL9502: BIG-IP hotfix matrix

Workaround

To work around this issue, add a packet filter rule to allow MPI traffic between blades. To do so, perform the following procedure:

Impact of workaround: None.

  1. Log in to the BIG-IP Configuration utility.
  2. Click Network.
  3. Click Packet Filters.
  4. Click  Rules.
  5. Click Create.
  6. In the Name box, type the following:

    MPINet_Allow

  7. In the Order box, select First.
  8. In the Action box, select Accept.
  9. In the Rate Class box, select None.
  10. In the VLAN / Tunnel box, select *ALL.
  11. In the Logging box, select Disabled.
  12. Under Filter Expression Method, select Enter Expression Text.
  13. In the Filter Expression box, type the following:

    ( src net 127.0.0.0/8 ) and ( dst net 127.0.0.0/8 )

  14. Click Finished.

Supplemental Information

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)