For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JRichter_151775's avatar
JRichter_151775
Icon for Nimbostratus rankNimbostratus
Jun 05, 2014

GTM Config Sync not working

I have a F5 ticket open on this but while waiting on them I thought I'd see if anyone ran in to this.....I have two pair of F5 4200 appliances running 11.5.1, each pair is a HA pair located in seperate data centers. I have successfully gotten them to communicate to the point where I have created a GTM sync group, can successfully run gmt_add on them and the configuration transfers fine when they join the others, but after all of them are connected and everything shows green, if I create a WideIP on one of them the change does not propagate out to the others. I have ran all of the troubleshooting commands in the GTM sync and iQuery troubleshoot guide for 11.x and all look like this should be working.....no errors, etc. My GTM logs do not show any errors either. I had my regional F5 SE looking at it and suggested I open a ticket, just curious if anyone had any other ideas or seen this before.

 

BIG-IP DNS
deployment

6 Replies

    • JRichter_151775's avatar
      JRichter_151775
      Icon for Nimbostratus rankNimbostratus
      Jun 05, 2014
      The link in 11.5 is now Configuration --> DNS --> Settings --> GLSB --> General, and yes, all of them are enabled & group names are the same.
  • Domai's avatar
    Domai
    Icon for Altostratus rankAltostratus
    Jun 05, 2014

    When u run - run /cm watch-devicegroup-device do you see the change in cid.id between all the devices new vs old config?

     

  • Domai's avatar
    Domai
    Icon for Altostratus rankAltostratus
    Jun 05, 2014

    Oh one thing do you have the device certs added to the "Trusted server certs"? All the other GTM's device certs I mean? You must have added or else iquery would not have worked...

     

  • Mike_P__194875's avatar
    Mike_P__194875
    Icon for Nimbostratus rankNimbostratus
    Jan 25, 2017

    I know this is an old issue but for anyone who might run into this in the future I had this same problem. After reviewing logs for /var/log/gtm on both gtm devices I noticed a recurring error that turned out to be an improperly named wideip someone had created that was preventing sync from completing properly. Deleted that wideip and everything was fine after. So it's definitely worth checking out logs and looking for weird things in your config.

     

  • merlin87_119679's avatar
    merlin87_119679
    Icon for Nimbostratus rankNimbostratus
    Dec 20, 2017

    I just ran into a similar issue where gtm sync messages in the log where complaining about a pool. Turns out the pool members were pointing to a dname which can only be added via a tmsh command and the person that added them just copied the name they were pointing the pool to straight from a bind server configuration file which had a period at that end of the entry. Well gtm didn't like that from a sync perspective, which caused gtm object sync to stop between four data-centers....uggg