Forum Discussion
NimbostratusMultiple traffic groups with HA groups
I have the following setup:
I have two LTMs active/standby mode. I have two DCs (server-subnets) attached to these.
DC1- traffic-group-1 with a corresponding HA-group1. HA-group-1 has two links in it - 1.1 and 1.2 DC2- traffic-group-2 with a corresponding HA-group2. HA-group-2 has two links in it - 1.5 and 1.6
Bigip1 is active for both traffic-groups
I ran this test: 1. I failed link 1.1 by shutting down the port on the cisco-switch-side. 2. bigip2 becomes active for traffic-gp1 (great) 3. bigip1 remains active for traffic-gp2 (also great)
But now my application traffic for VIP (.10) in traffic-group-2 is being handled by bigip2 (this is the standby unit for this traffic group). On my upstream router, I am seeing the mac-address for the VIP (.10) change from bigip1 to bigip2. I did not expect that to happen. There should have been no change in traffic-group-2 in this test scenario. Isn't that how its supposed to work? Thanks for any insights.
2 Replies
Chris_GrantEmployee
If the traffic group is active on BigIP1,you should not be seeing traffic sent to BigIP2. Have you taken a traffic capture at the time of the failover to see if the BigIP is sending out Gratuitous ARPs? The easiest way to troubleshoot this would be to open a support ticket. You can reach support by calling 1-888-882-7525 or internationally 800 11 ASK 4 F5. Make sure you have your BigIP's serial number available as you will need it to open the case.
- Stanislas_Piro2
Cumulonimbus
Hi,
When using multiple traffic groups, you must be sure all objects handing the connection are in the same traffic group.
- Virtual Address
- SNAT List (when using SNAT)
- Floating IP (when using automap)
If a virtual address handing the connection is configured in traffic-group-2 and SNAT is configured with an object enabled in traffic-group-1, server packets will be sent to the wrong Mac address.
