Forum Discussion
ASM Policy Sync to DR Location with out LTM configuration
We have two F5 devices with LTM+ASM in Prod and one LTM+ASM in DR all running same version. We have configured PROD in sync-failover hence replication of LTM and ASM configuration takes place from one device to other locally in DC. We have DR LTM+ASM with the same services hosted as in PROD, but the name of virtual server, pool name, node IP varies from DC. We are looking for a option to sync ASM policy elements from DC to DR with out repleting LTM configurations. i.e only ASM configuration are synced. We have mapped the policy to DR virtual servers manually.
Currently we are manually exporting ASM Policy from DC and importing in DR and merging the differences. But as production policy changes are not tracked or scheduled we forget to export and import in DR thus DR policy is not up to update. In case to DR fail-over ASM policy impacts the service as it block the request.
Please let us know if there is any automated/scheduled way to sync only ASM policy elements.
1 Reply
- Chris_Grant
Employee
You would need to configure an ASM sync only group and add all four devices (assuming two in your data center, and two in disaster recovery) to this device group. If you set this to Autosync, then when changes are made to your ASM they would automatically be distributed to all of your devices. As it is not a failover group, traffic objects will not be synced.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com