Updated Date: 07/07/2026
Viewing SFF configurations using TMSH
The following TMSH output shows the SFF configurations that the SFC controller creates, excluding PEM policy rules. (The SFC controller updates the sfc-action field of existing rules but does not create them.)
This syntax shows the configuration for the SFFs only, and not for the other service nodes.
SFF1:
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net sfc
net sfc chain sfc_chain1 {
hops {
0 {
nexthop-endpoint-ip 4.100.5.30
service-index 255
}
}
path-id 761
}
net sfc sf sf1-1 {
egress-interface sff-sf-vlan
ingress-interface sf-sff-vlan
ip-address 1.2.3.4
}
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net tunnels
net tunnels tunnel __f5_sfc_app___tunnel {
description "Created by F5-SFC-Agent"
if-index 320
key 100
local-address 4.10.5.20
profile __f5_sfc_app___profile
}
net tunnels vxlan __f5_sfc_app___profile {
app-service none
description "Created by F5-SFC-Agent"
encapsulation-type vxlan-gpe
flooding-type multipoint
port 4790
}
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net self
net self __f5_sfc_app____non-floating {
address 4.100.5.20/32
description "Created by F5-SFC-Agent"
traffic-group traffic-group-local-only
vlan __f5_sfc_app___tunnel
}
net self 4.10.5.20 {
address 4.10.5.20/24
traffic-group traffic-group-local-only
vlan external
}
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list ltm virtual
ltm virtual __f5_sfc_app__ {
creation-time 2018-06-06:19:08:30
description "Created by F5-SFC-Agent"
destination 0.0.0.0:any
last-modified-time 2018-06-06:19:08:30
mask any
profiles {
fastL4 { }
}
source 0.0.0.0/0
translate-address disabled
translate-port disabled
vlans {
__f5_sfc_app___tunnel
}
vlans-enabled
vs-index 8
}
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list ltm virtual
ltm virtual __f5_sfc_app__ {
creation-time 2018-06-06:19:08:30
description "Created by F5-SFC-Agent"
destination 0.0.0.0:any
last-modified-time 2018-06-06:19:08:30
mask any
profiles {
fastL4 { }
}
source 0.0.0.0/0
translate-address disabled
translate-port disabled
vlans {
__f5_sfc_app___tunnel
}
vlans-enabled
vs-index 8
}
root@(bigip1)(cfg-sync Standalone)(Active)(/Common)(tmos)# list pem policy
pem policy P1 {
rules {
Rule1 {
http-redirect {
redirect-url https://a.com
}
insert-content {
tag-name abcd
value-content 1
}
precedence 6
}
Rule2 {
precedence 9
sfc-action {
path-name /Common/sfc_chain1
}
}
}
}
pem policy P2 {
rules {
Rule8 {
precedence 8
sfc-action {
path-name /Common/sfc_chain1
}
}
}
}
pem policy P3 {
rules {
R1 {
precedence 8
}
R2 {
precedence 6
sfc-action {
path-name /Common/sfc_chain1
}
}
R3 {
precedence 3
sfc-action {
path-name /Common/sfc_chain1
}
}
}
}SFF2:
root@(bigip2)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net sfc
net sfc chain sfc_chain1 {
hops {
1 {
nexthop-service sf2-1
service-index 255
}
2 {
nexthop-terminate
service-index 254
}
}
path-id 761
}
net sfc sf sf2-1 {
egress-interface sf-tunnel
ingress-interface sf-tunnel
ip-address 10.192.17.224
nsh-aware enabled
}
root@(bigip2)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net tunnels
net tunnels tunnel __f5_sfc_app___tunnel {
description "Created by F5-SFC-Agent"
if-index 288
key 100
local-address 4.10.5.30
profile __f5_sfc_app___profile
}
net tunnels vxlan __f5_sfc_app___profile {
app-service none
description "Created by F5-SFC-Agent"
encapsulation-type vxlan-gpe
flooding-type multipoint
port 4790
}
root@(bigip2)(cfg-sync Standalone)(Active)(/Common)(tmos)# list net fdb tunnel
net fdb tunnel __f5_sfc_app___tunnel {
records {
ff:ff:ff:ff:ff:ff {
endpoints { 4.10.5.20 4.10.5.30 }
}
}
}
root@(bigip2)(cfg-sync Standalone)(Active)(/Common)(tmos)# list ltm virtual
ltm virtual __f5_sfc_app__ {
creation-time 2018-06-06:19:08:47
description "Created by F5-SFC-Agent"
destination 0.0.0.0:any
last-modified-time 2018-06-06:19:08:47
mask any
profiles {
fastL4 { }
}
source 0.0.0.0/0
translate-address disabled
translate-port disabled
vlans {
__f5_sfc_app___tunnel
}
vlans-enabled
vs-index 9
}