Forum Discussion

Eclipse_246639's avatar
Eclipse_246639
Icon for Nimbostratus rankNimbostratus
Feb 18, 2016

BigIP 11.3 LTM Pair not Clustering into HA

Hi all,

 

Relatively new to the BigIP arena, but I've enjoyed labbing the ADC's up in VM Workstation....until I got to HA, which has me a little stumped.

 

My issue arises when I run though the Setup Utility to enter the HA info (as I think it's 11.6 that has the specific HA wizard?). I complete it on my secondary unit, move over to my primary and enter the necessary in too.

 

I then use the utility to form the HA cluster and my primary unit can find the secondary unit and prints the trust info and additional info about the other appliance. However, when I should then see the cluster form, but just require a config sync, I don't for some reason. I see a red Disconnected state on the one appliance and then a blue Disconnected state on the other unit.

 

I've configured them to talk over a specific HA interface and they are able to ping one another successfully over that link. Also when I tcpdump that interface (1.3 in this instance) I see pretty much one way traffic and then a reset from the other device - a syn is sent and no syn ack is returned.

 

I'll see if I can upload some images to assist, but would appreciate any tips on possible fixes - but please do bear in mind I've only been labbing these for a week :)

 

Cheers.

 

  • I've used the Lab licensed VEs quite a bit and they will support clustering. I think the cost is $100-$125 including support so it's a good deal. Also if your non-prod environment is relatively light you can use them for that.

     

  • In addition, within Device Management > Device Trust the status seems to be sat at Changes Pending, but I've tried several times to sync the config from the appliance with Nodes, Pools & Members to the pretty much bare ADC without success. Within Device Management > Overview I see my group made up of 2 members - however Changes Pending is listed under the Sync Status. A sync does not resolve this. Then under Devices I see my two devices, one stating Changes Pending and the other with a Sync Status of Disconnected. This is a little confusing as the appliance was able to pull back information about the peer, but for a reason that evades me, can't cluster.
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Just a quick thought, under Device Management - Devices - Device Connectivity, do you have all the options configured here? ConfigSync, Network Failover and Mirroring?
  • Hi Nathan, I can't find exactly where you mean, but from a ConfigSync, Net Failover and Mirroring perspective I configured these using the wizard.
  • Hi Pete, I have selected Allow All just to cover all the bases, but as I understand it whichever option you choose in the port lockdown, the three required ports are permitted regardless, i.e. UDP/1026, TCP/1028 and TCP/4353. I wonder though, do the v11.3 LTM 90 day licences support HA, or do I need a 30 day fully featured licence, or a "lab" licence?
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    I believe that's it. It's a known limitation of the trial LTM that you can't do HA. There should be other posts on DC to confirm this. I certainly think this is the issue.
  • Thanks, Nathan. I will see if I can get a couple of the full, 30 day licences and retry over the weekend.
  • I've used the Lab licensed VEs quite a bit and they will support clustering. I think the cost is $100-$125 including support so it's a good deal. Also if your non-prod environment is relatively light you can use them for that.

     

    • Eclipse_246639's avatar
      Eclipse_246639
      Icon for Nimbostratus rankNimbostratus
      Thanks, Steve. I will first try the 30 day fully-featured licence (if I can obtain more than one), otherwise weigh up purchasing the lab licences.