For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NZ_David_20489's avatar
NZ_David_20489
Icon for Nimbostratus rankNimbostratus
Mar 12, 2014

Can you have non-sync'd, non-HA config on an existing F5 LTM HA pair?

Hi we have a existing HA pair of LTMs across two Data Centers, all existing configuration is sync'd and the pair provides full failover.

 

We have a requirement to apply site specific configuration to only one of the LTMs in the pair. For this new configuration, the second LTM will not: (1) be in these new VLANs (2) be a failover for the first LTM (3) be sync'd to the First LTM

 

I've been looking into traffic-groups without any real conclusion, is this configuration possible? If so how and any concerns?

 

4 Replies

  • What version are you on? If it is 11.x You could do a sync-only device group and only have the one LTM in that group.

     

  • Thanks for the quick response Joe Yep Version 11.X.

     

    Does a Sync-only traffic gourp meet the requirements mentioned intially?

     

  • Sync-only DG will meet all three requirements, assuming that you do not create floating IPs on the new VLANs.

     

    You'll need to create a separate partition/folder for this sync-only device group. See this link for more details.