For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Daniel_55334's avatar
Daniel_55334
Icon for Altostratus rankAltostratus
Apr 08, 2008

LTM network failover

From the manual I got that LTM can use network to determine if the active unit is working fine if network failover is enabled. And for synchronization it is recommended that a separate segment is used...
config
design
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Apr 08, 2008
Sorry I was getting a bit head of myself.

 

 

Network Failover uses the same address as the peer IP address setups for failover and config sync. They use that address to find out the status of the other unit. If an interface goes DOWN it will that message through the network to the other peer signiling a failover. If the secondary lost connectivity to the primary, it will attempt to perform a takeover. This is assuming the primary went off the wire or powered off. If not and the only thing you lost was looking at each others from the peering perspective then you have a situation where both are going to active/active - which is not what you want.

 

 

VLAN Failsafe does rely on the peer for one item, which is the overall cross communication of each other's status. SO if VLAN Failsafe or Gateway failsafe detects a problem it's going to want to send infornation to other unit on its status.