[rancid] F5 BIG-IP issue

[Gauthier, Chris]

Chris GauthierSenior Network Engineer | comScore, Inc.
o +1 503-331-2704cgauthier at comscore.com
317 SW Alder St, Suite 500 | Portland | OR97204
............................................................................................................................................................................................................................

On 7/31/17, 3:19 PM, "Rancid-discuss on behalf of heasley" <rancid-discuss-bounces at shrubbery.net on behalf of heas at shrubbery.net> wrote:

    Sun, Jul 30, 2017 at 08:31:15AM +0000, Shaun Krok:
    > Hi Heasley
    > 
    > We have found a new issue where rancid is unable to collect changes from one of our F5 boxes in a QA environment.
    > The F5 appliance has just been upgraded to 13.0 of BIG-IP + ASM module
    > All was fine with the upgrade and rancid
    > A few days later a new beta product of F5 was installed on the box called AVR (not sure what is does but think it has something to do with IP blocking)
    > 
    > The problem  is now when I run : export NOPIPE=YES && ./f5rancid -d il-f5-pri IL &
    > I have 2 files created :
    > 1. il-f5-pri.new
    > 2. il-f5-pri.raw
    > 
    > The f5rancid script stops with the following message: Error: TIMEOUT reached and when looking to the .RAW file I see where it stops but do not know how to fix it.
    > I know it is part of ShowLicence !!
    > On many of our other sites we have ASM and LTM working fine with Rancid.
    > This QA box has the following option module installed and this is where I can see it breaking !
    > 
    > Any help would be much appreciated !
    > 
    > I have tried to use the lates f5rancid file from version 3.6.2 and it also times out in the same place.
    > 
    > If you require can arrange access so you can debug a living box !
    > 
    > Rancid version we are running rancid 3.2.99  is fairly old but very stable !
    > 
    > Thank you
    > 
    > Shaun
    > 
    > 
    > 
    > Below is a section Time Limited Modules :
    > ################
    > Time Limited Modules
    >   IPI Subscription, 1Yr, 1600|HDJUFUK-LATUGAQ|20170729|20180730|SUBSCRIPTION
    > #########
    > 
    > 
    > ###########################################################################################
    > Sys::License
    > Licensed Version         11.2.1
    > Registration key         BDRZF-OIOWS-GOXXE-UPZYR-KUQNSUW
    > Licensed On              2014/02/02
    > Service Check Date       2017/07/29
    > Platform ID              C112
    > Appliance Serial Number  f5-zjxo-xvwn
    > 
    > Active Modules
    >   ASM, Unlimited (FCUIUEO-IXFFTED)
    >   LTM, Base, 2000S (IOJQRSN-NOZEOWZ)
    >     Application Acceleration Manager, Core
    >     IPV6 Gateway
    >     Rate Shaping
    >     Ram Cache
    >     Anti-Virus Checks
    >     Base Endpoint Security Checks
    >     Firewall Checks
    >     Network Access
    >     Secure Virtual Keyboard
    >     APM, Web Application
    >     Machine Certificate Checks
    >     Protected Workspace
    >     Remote Desktop
    >     App Tunnel
    >     ASM, Unlimited
    >     SSL, 2000S
    > 
    > Time Limited Modules
    >   IPI Subscription, 1Yr, 1600|HDJUFUK-LATUGAQ|20170729|20180730|SUBSCRIPTION
    > Error: TIMEOUT reached
    > 
    > ###################################################################################
    
    3.2.99 i think would be just f5rancid/device type f5; is therefore the
    command cat /config/bigip.license?  I though perhaps it was just being
    slow or hanging, but seems unlikely with cat.  so, i suspect you have
    modified the base rancid; how so?
 
Actually, rancid.types.base shows that “bigip” as being for F5 versions 11+ and “f5” being used for versions <=10.  So, he is using the correct type in this case.  I’m about to consider 13, so it would be good to know about.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20170731/7a6e2b88/attachment.html>