For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Yazid_Abdesslam's avatar
Yazid_Abdesslam
Icon for Nimbostratus rankNimbostratus
Sep 29, 2015

HA gone standby/standby

Hello Guys,

 

What can cause the HA pair to go Standby/Standby

 

We got Two Clusters (2x 4000 LTM) + (2x 6900 LTM - prod)

 

We are progressively migrating our configuration from 6900 to 4000

 

When removing tag from a VLAN from (6900 pair) and add it to (4000 pair) the (6900 pair) gone standby/standby & all traffic ran down.

 

Thank you for usual support

 

application delivery
availability
deployment
LTM
management
TMSH

5 Replies

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Sep 29, 2015
    Have you opened a case with F5 support. This would be a Sev1 case if this is in production.
  • Yazid_Abdesslam's avatar
    Yazid_Abdesslam
    Icon for Nimbostratus rankNimbostratus
    Sep 29, 2015
    I had to remove back the vLAN from 4000 pair & reconfigure it to 6900 pair & re-add all VS / SNAT / Selfs / Pools Everything is OK now. But our migration was not successful :(
  • Jana's avatar
    Jana
    Icon for Altostratus rankAltostratus
    Sep 30, 2015

    Check if you have vlan-failsafe configured on vlans and if the action is set to failover. If so, the vlan-failsafe action will try to trigger a failover when the bigip sees no traffic on the vlan. Check the logs to see for messages like

    Sep 23 04:54:52 dc0-lab-ltm0a.test.com notice sod[5532]: 01140029:5: HA vlan_fs /Common/VLAN27 fails action is failover.
Sep 23 04:54:52 dc0-lab-ltm0a.test.com notice sod[5644]: 01140029:5: HA vlan_fs /Common/VLAN27 fails action is failover.

    You will have to remove vlan-failsafe before making any changes to trunks, vlans or selfips, which affects the traffic flow.

  • Yazid_Abdesslam's avatar
    Yazid_Abdesslam
    Icon for Nimbostratus rankNimbostratus
    Oct 01, 2015

    Thank you for reply Jana, Indeed, Everything was correct after un-checking fail-safe option. But I don't understand why pair gone standby/standby. I mean, a loss of traffic on only one VLAN over both boxes is not supposed impact all other VLANS, should it?

     

    Thank you Again,

     

    • Jana's avatar
      Jana
      Icon for Altostratus rankAltostratus
      Oct 02, 2015
      Yes, both the devices go into standby mode when vlan-failsafe is triggered with action as failover, even on a single vlan that is unavailable. You might want to look at the Fast failover feature that uses HA group https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-concepts-11-1-0/tmos_high_avail.html1026652