Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jun 15, 2015

AFM 11.6 and active/active cluster

Hi,   I was not playing a lot with AFM in older version so not sure what were limitations on earlier versions considering clustering.   In 11.6 Release notes there is info "Advanced Firewall Ma...
advanced firewall manager
deployment
design
security
F5Burg_193522's avatar
F5Burg_193522
Icon for Nimbostratus rankNimbostratus
Jul 18, 2015

Hi Guys, I'm having some issue understanding traffic groups, I can't find doc on the following.

 

Consider an Active / Active configuration with two traffic groups. Traffic group A is primary on A device, Traffic group B is primary on the B device. Can you share a subnet between the two traffic groups? I would think this might work if each traffic groups had their own primary float, but I can't find doc that specifically says you can or can't do this. With one float, primary being A device - I would think a VIP who is primary on B device would have issues / possibly asymmetric.

 

I appreciate any insight, or documentation you can point me to on this subject.

 

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jul 18, 2015
    your first question can't really be answered, as a subnet isn't something you assign to a traffic group. if the question is, can you assign virtual IP addresses from the same subnet to different traffic groups the answer is yes. the rest of the question depends a lot on how you get traffic to your big-ips and how the big-ips communicate with the poolmembers. but if required a solution with two floats will be able to handle these situations.