Forum Discussion

Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
Jan 04, 2022

How to sync the config in CLI when we have multiple traffic-group ( Active-Active)

Hi Experts !!!   How to sync the config via cli in Active-Active setup .   Example : We have 2 f5 named BIGIP-A and BIGIP-B and 2 traffic-group-1 is active in BIGIP-A and traffic-group-2 i...
active-active
application delivery
BIG-IP
config sync
LTM
CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Jan 05, 2022

Whichever is the group with the disalignment .. "show /cm sync-status" command should help you clarify this, but I'd guess your main Device Group will be the sync-failover one.

 

The others you see are likely the default BIGIP device groups, device_trust_group is a sinc-only auto-sync group which is created when you perform device trust for the first time and handles device trust, while you might also see datasync-global-dg if you have WAF provisioned, this is a sync-only manual-sync group that handles metadata and attack signature update sync between the two units. It's unlikely to see those groups out of sync in daily administration and you will have some high-priority problems to be handled if they are.

 

 

  • Blue_whale's avatar
    Blue_whale
    Icon for Cirrocumulus rankCirrocumulus
    Jan 06, 2022

    Whichever is the group with the disalignment . ? What do you mean by this ? please explain .

    • CA_Valli's avatar
      CA_Valli
      Icon for MVP rankMVP
      Jan 07, 2022

      You have 3 Device Groups, each verifying its own sync status.

      Each one of them might be out of sync. You can check this with the "show /cm sync status" command as I stated in my previous comment.

       

      Whichever is the group with the disalignment must be synced. So if only one is, sync that one. If two DG's are out of sync, you will need to sync both.

       

      K15419 details this operation, you can check KB's for more information on sync process.