For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

francisco_1_162's avatar
francisco_1_162
Icon for Nimbostratus rankNimbostratus
Oct 02, 2010

configsync problem

Hello All,

 

 

Is auto-configsync feature available in v10.x. We managed lots of F5 boxes and maunal configsync is becoming a problem.

 

 

Also is there a sript (php or something else) we could use to get the boxes to send out email notification when a device is out of synch?

 

 

Francisco.
config
design

4 Replies

  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Oct 02, 2010
    F5's Enterprise Manager alerts when configs are out of sync. Crazy question...if you're already on the box making changes that trigger a config sync being needed, why not sync then? Or are you using some other method of changing them?
  • francisco_1_162's avatar
    francisco_1_162
    Icon for Nimbostratus rankNimbostratus
    Oct 05, 2010
    hey chris,

     

     

    well we have few guys making changes and sometimes not taking in to consideration these boxes will not auto-synch. hence why we need to have something in place...

     

     

    Francsco.
  • George_Watkins_'s avatar
    George_Watkins_
    Historic F5 Account
    Oct 05, 2010
    Hi francisco_1,

     

     

    I've done this in the past using Opsview (or Nagios) to poll SNMP on the BIG-IP. The object you're looking for is "sysAttrConfigsyncState". If it returns 0 - you are in sync; 1 - local config modified; 2 - peer config modified; 3 - both independently modified. Download the F5 SNMP MIB from the "Welcome" page of your BIG-IP and search for that object name in F5-BIGIP-SYSTEM-MIB.txt.

     

     

    Hope this help,

     

     

    George
  • George_Watkins_'s avatar
    George_Watkins_
    Historic F5 Account
    Oct 05, 2010
    One more thing, you're probably already aware of this, but BIG-IP uses the clocks on the units to determine if things are "in sync". Be sure to check and make sure you have NTP configured on both of those units. If they are more they are more than a second or two off, then they will constantly be falling out of sync.

     

     

    -George