Forum Discussion
Add device to device-group on other than management interface
I want to create a device-group for sync-only, on parts of the config amongst three LTMs. The management interfaces do not have visibility of each other, but the 'internal' vlans do. Is there any way to add the devices to the device group without using the management interfaces of the remote devices?
If not, once created, do the devices need to communicate amongst each other over the management interface? I may be able to temporarily allow access through the firewall to add the devices.
4 Replies
- What_Lies_Bene1
Cirrostratus
Stephen, you can use any Self IP address when you setup/add devices to the Device Group so you should be fine post group creation too, although I'm not sure if there is any further communication specific to the DG setup.
By definition the ConfigSync can't use the management interface so you're pretty safe there too.
The only thing I'm not 100% sure of is whether the devices must be on the same V/LAN when setting up the DG (which doesn't appear to be an issue for you anyway) and it seems they must be for ConfigSync. - Hamish
Cirrocumulus
I have device groups that config sync across routers (ie not on same vlan). Works fine.
H - What_Lies_Bene1
Cirrostratus
Thanks Hamish, I'd heard that wasn't possible. - Hamish
Cirrocumulus
Ive not seen any docs that indicate that... Even for failover addresses it isn't really necessary as you can always advertise a route to the VS subnets from the active unit...
H
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com