F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

theXfactor82_91's avatar
theXfactor82_91
Icon for Nimbostratus rankNimbostratus
Aug 13, 2013

Can you perform a ConfigSync over the Management IP??

I'm replacing our Production End Of Life Active-Standby 8400's with new 2200's running v11.4. Normally I would have ConfigSync setup to use the non floating Self Helper IP's for the internal or external VLAN. In this case I have both of those interfaces shutdown as they are using the same addresses as the current production units. Is there any way to get the ConfigSync to happen over the Management IP addresses which are the only IP's on the boxes not shutdown? It does not show up as an option in the dropdown list under System > HA > Device Connectivity > ConfigSync.

 

design
management

4 Replies

  • afedden_1985's avatar
    afedden_1985
    Icon for Cirrus rankCirrus
    Aug 13, 2013

    What we did was create a new Vlan called peernet vlan 4094 and assigned it to the ingress interfaces of each box then created 2 new self IPs 192.168.1.1 on and 192.168.1.2 on the standby then you can select these IPs for config sync from the menu Device management>Devices>the device>Device Connectivity >select config sync to select the local 192.168.1.x ip address. this is part of the setup to build trusts and device groups with a HA pair. I don't think using the Management Ips is recommended

     

  • theXfactor82_91's avatar
    theXfactor82_91
    Icon for Nimbostratus rankNimbostratus
    Aug 13, 2013

    I just wanted a a temporary fix while these boxes were offline. Once I am able to perform a sync I would switch back to the ingress VLAN's self-helper IP for the ConfigSync.

     

    Fadhil I tried command you suggested by I still do not get the Mgmt IP as an option within the GUI dropdox box.

     

  • fadhil_104666's avatar
    fadhil_104666
    Icon for Nimbostratus rankNimbostratus
    Aug 13, 2013

    I haven't tried it yet, but if it's not showed in GUI then you must change it in tmsh (a lot of 'hidden' configuration doesn't exist in the GUI).

    If you see http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14348.html in the workaround section shown steps (except step 4) to change the configsync address and do the sync.

    tmsh
list cm device-group  devices
modify cm device  configsync-ip

    But as a fair warning, F5 doesn't recommend this. http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14135.html