For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aaron_33366's avatar
Aaron_33366
Icon for Nimbostratus rankNimbostratus
Feb 13, 2015

F5 sync options

I am looking for some help on F5 sync’ing options. I have opened an F5 support ticket with the below opening notes. However I thought I would reach out to the this forum as well. I wonder if this is even possible?

 

---F5 opening case notes---

 

I have some questions about config syncing on the F5s that I would like to discuss. We currently have 2 F5s in an active/standby failover config in our Minneapolis (MSP) location and we also have 2 F5s in the same setup in our Madison (MSN) location. The MSP location is production location and the MSN is our DR location. I would like to take the config that we have on our MSP location and sync it to the MSN F5s. However I don’t want the MSP and the MSN devices to be a failover group. I believe this is possible but I wanted to discuss this with F5 support. We already have the active/standby sync-failover group created in MSP and in MSN so that we have device redundancy in each location. What I believe we need to do now is to add all 4 devices to the trust list and then create a sync-only group and this will allow us to manually sync our config from MSP to MSN.

 

---End F5 opening case notes---

 

I have found some links that sort of show this as being possible.

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-redundant-systems-config-11-1-0/5.html https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-device-service-clustering-11-2-1/6.html

 

In addition to the above info I have create a diagram of what I am looking to do. It is below.

 

application delivery
availability
design
LTM
sync options
trust domain

16 Replies

Show More
  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Apr 12, 2017

    Here is my 5 step hack:

    1. Grab the archives from  and 
2. From , overlay these files and directories INTO 
    a. config/bigip_base.conf
    b. config/f5-rest-device-id
    c. config/.bigip_emergency.conf
    d. config/.cluster.conf
    e. config/bigip.license
    g. var/tmp/cert_temp
3. Copy the new UCS to  under /var/local/ucs
4. Restore the archive via "tmsh load sys ucs "

    Please feel free to test more...

  • KernelPanic's avatar
    KernelPanic
    Icon for Nimbostratus rankNimbostratus
    Nov 28, 2017

    I'd like to know the icontrol rest python f5-sdk code to read failover and sync statate, make a change to active unit and sync to group from active. This seems like regular maintenance to me but the only reference I find are SOAP.