Forum Discussion

juniorb2000's avatar
juniorb2000
Icon for Nimbostratus rankNimbostratus
Aug 15, 2018

BIGIP Device Trust for HA over TMM Interface

Hi,

 

Looking to install a pair of HA i4600s LTM (Active/Standby), likely to be running 13.1.1.

 

Historically I have always configured Device Trust for HA pairs over the physical copper management ports. However, in this instance, they will be going into an OOB network (which is really just for emergency access), so I would like to remove the dependency on that network. As such, are there any issues with establishing Device Trust for HA over an Inband TMM interface?

 

One other thing to note if it's relevant, these will later connected to a BIG-IQ that will definitely be on the Inband TMM side.

 

Many thanks in advance,

 

J

 

application delivery
LTM
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Aug 16, 2018

    You can build the device trust using self-IPs across tmm (non-floating self-ips only).

     

    You need to allow ssh on the port lockdown of those self-ips.

     

    However, you should always include the Management port in the HA unicast failover settings as well as a self-ip, to allow the HA status to be communicated between the devices even if tmm is down.