For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

acorreia's avatar
acorreia
Icon for Nimbostratus rankNimbostratus
Sep 15, 2023

F5 LTM/APM Disaster Recovery Options?

I wanted to pose a question to everyone to see what they are doing in a similar situation.  We have two HA pairs of LTMs, one for internal apps and one for external facing apps. The pair for exter...
application delivery
Paulius's avatar
Paulius
Icon for MVP rankMVP
Sep 15, 2023

acorreia Your best bet would probably be to create an SCF and then go and change the IPs to be the appropriate ones before importing the configuration of the SCF. I assume this is because you do not want to configure the DR F5 pair from scratch? The following is how to work with SCFs.

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-6-0/31.html

If it were me and the DR devices really haven't been configured I would update the master key on the DR pair to match what your prod environment uses and then import the configuration using a UCS. Once you have the configuration imported them go and change all the IPs to be what they need to be. Using the UCS will most likely be considerably more work than the SCF because some configuration pieces will require deleting dependencies first before you can change the configuration.