For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kgaigl's avatar
kgaigl
Icon for Cirrocumulus rankCirrocumulus
May 10, 2022
Solved

K14823198: ASM guided configuration not synced to peer device after upgrade impact

Hello, after Upgrade an active/standby cluster to 16.1.2.2 I ran into this: https://support.f5.com/csp/article/K14823198 now I've 2 questions: 1. do I have to run this commands on active or stand...
application delivery
asm
Guided-Configuration
security
  • kgaigl's avatar
    kgaigl
    Jun 02, 2022

    Solution:

    F5-Support provided me a Script "ha-sync" and after run 

    /var/tmp/ha-sync --force -H 192.168.97.2 -D device-group-failover-21b78xxxx

    everything's ok now

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
May 13, 2022

Hello,

 

After the upgrade please share if everything is ok and if you saw any issues so we can close the question.

kgaigl's avatar
kgaigl
Icon for Cirrocumulus rankCirrocumulus
May 18, 2022

I'm in contact with the support, they told me to change in Ressource Provisioning the Management from Small to Large, now:

[root@ldb-ara31-brz-00:Standby:In Sync] ~ # restcurl shared/gossip |egrep '\"status\"|\"gossipPeerGroup\"'
  "status": "ACTIVE",
  "gossipPeerGroup": "tm-shared-all-big-ips",

in the overview of the Security Policies the Policies are present and attached to the VS, but under Guided Configuration, the Policies are still not present.

It looks like a displaying Error.

tried to export/import the Policies, get an Error, Policy already exists

tried to create a new Policy, this will also not displayed on the standby