Forum Discussion

eesun_276598's avatar
Oct 11, 2016

Getting Sync error message

Hi I made configuration on one(6) of two F5. When I sync from the F5-6 to F5-2 (chose Snyc device to group), I got error message which show the sync unsuccessful. Please see the picture. Any one can give some suggestion to solve the issue? Thank you

 

 

  • I just noticed that if I do some configuration on Cert, the Sync fail. If I do configuration on something like, change node etc, the Sync is successful. Anyone can explain it for me? Thank you so much!

     

  • We've run into a few of these types of errors as administrators, both with SSL certificate work and Access Policy Manager changes. Based on our experience the root cause is making a change on one of the devices, then removing the change, then making the change again using the same name. Because the name was the same, yet it tied to some internal identifier, there was an unreconcilable conflict and the sync could not resolve it. I found the error by doing a diff on the bigip.conf of the two devices.

     

    I would suggest you copy the bigip.conf file from both devices, perform a diff on the two files and compare line 6194 to see (a) what may be different and or (b) if that reflects a recent change you made on one of the devices, remove that change, attempt to sync and if successful, re-add the change and sync again.

     

  • Thank you for your reply. Now I just found the Snyc can work in my F5 after any change of configuration except creating Cert. I do not know how to solve the issue

     

    • Troy_Murray_196's avatar
      Troy_Murray_196
      Icon for Cirrus rankCirrus

      So if you export the Certificate and Key that you recently created / uploaded, then delete them, then sync the devices, the sync completes successfully?

       

      If so, if you import the key then the certificate back into your system and attempt the sync again, is it successful?

       

  • After I created Cert, I cannot Snyc to other F5. If I delete the Cert, I can Snyc to the other F5. If i do some other any config, then I can sync to other F5 successfully. it is strange