For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

insert12_38638's avatar
insert12_38638
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

HA configuration

Hi, Quick question of failover LTM 1600 (11.2.3 ) for one of our customer. The failover connection between the two F5 units is a single cabled connection. HA is configured and working adequately but dual physical interfaces is required to provide an aggregated trunk connection. In order to avoid a risk of an individual cable or interface failure affecting service. Current configuration holds a Sync VLAN with one interface e.g 1.4 belongs to that vlan. To achieve aggregated trunk connection, we are planning to add another port e.1.5 to same VLAN on both LTM. Ports 1.5 configuration would be similar as of 1.4. I can also see a Serial failover cable is plugged in between these two LTM using HA ports but in configuration I can only see network failover is setup. To test this configuration we can disable 1.4 ports of both LTM and can manually failover to verify this setup. Do I need to disable this serial cable as well? Can anyone please confirm if this a valid approach ? what else precaution I need to ensure ? Thanks

 

deployment
design

2 Replies

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jun 11, 2014

    I can also see a Serial failover cable is plugged in between these two LTM using HA ports but in configuration I can only see network failover is setup.

    there is no configuration for serial failover. anyway, you can use tmsh command to check serial failover cable status.

    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) show sys failover ?
Options:
  cable  Displays the status that the failover daemon detects on the serial cable from its failover peer. It also shows what the failover peer detects on the serial cable. An active BIG-IP will see a zero from its failover peer. A standby BIG-IP will see a one from its failover peer.
  |      Route command output to a filter

    To test this configuration we can disable 1.4 ports of both LTM and can manually failover to verify this setup. Do I need to disable this serial cable as well?

    you have to remove serial failover cable when testing network failover.

    If you configure a BIG-IP high-availability pair to use network failover and the hardwired failover cable also connects the two units, hardwired failover always has precedence; if network failover traffic is compromised, the two units do not fail over because the hardwired failover cable still connects them.

    sol2397: Comparison of hardwired failover and network failover features

    http://support.f5.com/kb/en-us/solutions/public/2000/300/sol2397.html
  • insert12_38638's avatar
    insert12_38638
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2014

    Thanks for clarification Nitass .Command does show the output !!!! I will test this accordingly and will also update this post with outcomes. Thanks.