For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Carlos_13563's avatar
Carlos_13563
Icon for Cirrus rankCirrus
Apr 15, 2014

Do you need seperate Synch Groups one for LTM and another for APM modules.

We have two 3900 with LTM + APM. We have only one sync failover group and we created many AP's and have been able to sync with no issues. Recently we made a change to an AP try to sync and now both devices are not synced. Call tech support and were instructed to create a manual Sync-Only device group according to documentation found here: http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-access-policies-syncing-11-3-0/1.html?sr=34646938 So do we need one Sync-Failover group and one Sync-Only group for AP sync?

 

application delivery
BIG-IP Access Policy Manager (APM)
design
LTM
security

1 Reply

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Apr 15, 2014

    You should have a Sync-Only group to handle APM synchronizations. That's the reason for the Access Policy Sync section under the Access Profiles config.

     

    Same thing goes for PSM or GTM (though GTM is done differently, it's the same concept of having a specific sync group for the individual module configuration).