Migrating VIPs from one LTM pair to a new LTM pair

Are you moving them one at a time? Or all at once? There's several choices to follow.

 

 

If you're moving everything, you could force the unit to standby. A VLAN failsafe on a known down network is always good for that.

 

 

If you're migrating one at a time (And don't want to migrate by changing the IP in DNS), you could also change the IP of the old VS to a VLAN that doesn't exist outside the LTM. That way you still have the old config around (I like this method myself where you can't reliable alter the IP address of the service. I configure the NEW VS with a new IP for testing. Then when people are happy, swap the IP's between the old & new VS).

 

 

My favourite of course (IMO :) is just changing the IP. That way everything is all setup and tested as working ahead of time. The go-live is a simple DNS update. Failback is another DNS update. You set the DNS TTL way down to the minimum before the cutover so the DNS propagation is quick. If it's NATéd you can achieve the equivalent by just changing the firewall NAT rules. (I hate NAT BTW, so never recommend this one).

 

 

H