2.6.1. Lab – Modify and Troubleshoot Virtual Servers¶

2.6.1.1. Task – Troubleshooting virtual servers¶

By now, I am sure you are dying to know what’s up with the purple_vs. Here’s a chance to find out. You are going to some troubleshooting with a little guidance.

1. Go to Network Maps and take a look at the status of the purple_vs and its components.

   It is obvious that all pool members are offline which could be anything, a network issue, a server issue, a BIG-IP configuration issue.

   Attention

   Q1. Where would you start?

2. SSH to bigip01 at 10.1.1.245.

   Attention

   Q2. Attempt to ping he pool members. Does it work? What does this tell you?

   Q3. Attempt a curl -i against the pool members. Does it work? What does this tell you?

   Q4. Since the problem affects all pool members, what would you suspect as a possible issue?

3. Find the issue with the pool members and correct the issue.

   Hint

   You may want to read https://support.f5.com/csp/article/K2167

   Attention

   Q5. Did you correct the issue? (If not go to Appendix 1 – Answer Key and see how the issue was fixed)

   Q6. Now the pool is working and purple_vs is available can you access the page through the virtual?

   Q7. What is your next step in debugging? Is the virtual server processing traffic?

4. You need to watch traffic from your PC to the BIG-IP virtual server and from the BIG-IP to the pool.

   Attention

   Q8. What command(s) could you use to watch traffic hit the virtual server and leave toward the pool?

   (Try to figure it out, if you need help go to Appendix 1 – Answer Key and my version of the commands)

   Attention

   Q9. Did you see traffic hit the virtual server? Did you see BIG-IP send traffic to a pool member?

   Q10. Did you see the return traffic? If there was no response, what is your step?

5. The server’s default gateway is 10.1.20.240, which is an unused IP address on the 10.1.20.0/24 network. There were two ways to resolve the virtual server issue. Your purple_vs should now be available.

   (If you need help go to **Appendix 1 – Answer Key* and my version of the commands)*

2.6.1.2. Task – Working with profiles¶

1. Create new virtual server secure_vs 10.1.10.100:443 with TCP profile, Automap and www_pool.

2. Browse to https://10.1.10.100 and observe tcpdump.

   Attention

   Q1. Did site work? Why not?

3. Change SSL Profile to include clientssl then update

4. Browse to https://10.1.10.100 and observe tcpdump

   Attention

   Q2. Did site work?

5. Enable cookies Default Persistence Profile and update? Note error and troubleshoot to fix.

   Attention

   Q3. What was needed to add cookie persistence?

6. Browse to https://10.1.10.100/index.php and select Display Cookie on bottom of page.

   Attention

   Q4. What is the name of the cookie inserted begin with?

7. Create new pool secure_pool with members of 10.1.20.11:443, 10.1.20.12:443 and 10.1.20.13:443 and assign to sure_vs.

8. Browse to https://10.1.10.100

   Attention

   Q5. Did site work?

9. Troubleshoot and fix.

   Attention

   Q6. What profile was needed to correct the error?