For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HG's avatar
HG
Icon for Cirrus rankCirrus
Nov 12, 2015

F5 Licensing in Production Network

Hello,

 

I have 2 F5's (VM) in HA pair having only the LTM module enabled (good bundle license). I would like to enable the ASM module as well but I checked on the F5's site and this is available only on the Best Bundle. I have some questions regarding this process.

 

1.Can I buy a license key (addon-key) in order to enable only the ASM module instead of buying the Best Bundle ??

 

2.In case I reactivate a license does this means that the F5 devices will have a downtime during this process ??

 

3.Is it needed to remove the F5 devices from the HA pair Group and then reactivate the license ,enable the ASM module and put them back again into pair ?

 

4.I thing that ASM pairing needs to be done first in a (sync-only) group and then the LTM pairing is gonna take place after that.Is that correct ??

 

Thanks in advance

 

application delivery
ASM Advanced WAF
deployment
LTM
security

2 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Nov 12, 2015
    1. contact your local sales team.
    2. when reactivating license, TMM services are restarted. to limit downtime, reactivate licence on standby member, force failover then reactivate on new standby member.
    3. you can reactivate license and provision ASM without removing devices from cluster.
    4. when you will provision ASM, you will need to define which device-group will be used to synchronize ASM.
  • HG's avatar
    HG
    Icon for Cirrus rankCirrus
    Nov 12, 2015

    Thanks for your answer I was confused with something that I have read regarding the APM module which states:

     

    Attention: Sync-Only groups must be configured before you pair Active-Standby devices. To add an Active-Standby device pair to a Sync-Only device group, first you must reset the trust between the devices. Next, you must remove the devices from the Sync-Failover device group. Next, you must add both devices to a Sync-Only device group. Finally, add the devices as an Active-Standby pair to the Sync-Failover group.