Forum Discussion

SLowes_85801's avatar
SLowes_85801
Icon for Nimbostratus rankNimbostratus
Jan 20, 2016

Adding Sync-Only device group to existing Active/Standby pairs

Hi,

 

We're hoping to Sync some APM policies across 2 separate pairs of Active/Standby devices. The config guides say you're supposed to create the Sync-Only device groups before creating the Sync-Failover group.

 

However we have existing A/S pairs already in production and it would be fairly painful to have to break the existing clusters to create the Sync-Only group for APM. Is there any way around this - some other method to add a Sync-Only group to the existing clusters without having to break the sync-failover group?

 

thanks,

 

Stuart

 

For reference, this is the entry in the manual regarding Sync-Only group creation:

 

Important: Sync-Only groups must be configured before you pair Active-Standby devices. To add an Active-Standby device pair to a Sync-Only device group, first you must reset the trust between the devices. Next, you must remove the devices from the Sync-Failover device group. Next, you must add both devices to a Sync-Only device group. Finally, add the devices as an Active-Standby pair to the Sync-Failover group.

 

application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)

3 Replies

  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Jan 21, 2016

    hello,

     

    I had a couple of weeks ago a support case opened with exactly that use-case/question. Answer was:

     

    "the sequential procedure for setting up access policy sync entails configuring a sync-only group first before having a sync-failover group. This means that any prior sync-failover configuration would have to be altered."

     

    That means the Sync-Failover configuration must be temporarily un-done, Sync-Only configuration done and then the Sync-Failover configuration done again.

     

    Alex

     

  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Mar 10, 2016

    Hi

    for your information, I have raised a RFE regarding this (my target is APM Policy Sync only)

    Bug alias 578618 [RFE][APM] Add APM SyncOnly when Sync-Failover device already exist.

    Feel free to open a support case and link it to this BUGID 😉

    Alex