Forum Discussion
Implementing primary and secondary mirroring IP addresses
Hello,
I'm new to F5 and I'm implementing HA features in a production environement. This is an active-standby model with 2 devices in version 11.4.
I wonder how the mirroring addresses acknowledge each other because there is no mention of peer address here, only local addresses.
I explain: I want to configure both primary and secondary addresses for mirroring. And a dedicated VLAN for mirroring functionality. We can't link physically one device to the other, so the link will go through a switch.
The question is: Do I need to implement 2 different mirroring VLANs for primary and secondary? or a single VLAN is enough? (How does the device know to what IP address send the mirroring traffic?) If it is a single VLAN, then both IP can receive at the same time..?)
Please let me know if this is not clear, I can explain further
2 Replies
- nathe
Cirrocumulus
Merry95,
"Do I need to implement 2 different mirroring VLANs for primary and secondary?" - you don't need to but it's recommended. Further recommendation is to create a specific VLAN for failover/mirroring (which it appears you'll be doing) and add this VLAN to the primary and the internal VLAN to the secondary. This means there's redundancy for this process.
"How does the device know to what IP address send the mirroring traffic?" - you configure local addresses on both BIG-IPs. Hence, when you create your device group BIG-IPa will learn what IP address to use on BIG-IPb.
"If it is a single VLAN, then both IP can receive at the same time..?)" - I don't follow this question to be honest.
Hope this helps,
N
- JG
Cumulonimbus
From Manual Chapter: Managing Connection Mirroring:
"The system uses the selected IP address in the event that the primary mirroring address becomes unavailable."
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com