For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harry1's avatar
Harry1
Icon for Nimbostratus rankNimbostratus
Dec 08, 2015

Need to configure GTM ....

Dear Friends,

 

i need to configure GTM from scratch between two locations as an active passive. there is 2 mpls links and one internet public link. i have some queries here:

 

as we have multiple links connected with DC-DR. can we get all these monitored with GTM .if any one links goes down at DC side still it should be the active one unless all the links in down state at DC.

 

what will be the configuration if possible in this case and where i can find this configuration.

 

how many type of use case can be created for customer.when testing DC-DR GTM failover .

 

Regards Prak

 

application delivery
BIG-IP

6 Replies

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Dec 08, 2015

    Can you confirm below as your desired setup? Correct me if I misunderstood anything

     

    2 Data Centers (only one Data Center manages traffic at a time, no GTM load-balancing)

     

    2 Appliances in Active-Standby HA Cluster (one Appliance per Data Center)

     

     

    You want to implement:

     

    HA cluster to refrain from automatic cluster failover if just one or two external links are unavailable.

     

  • Harry1's avatar
    Harry1
    Icon for Nimbostratus rankNimbostratus
    Dec 08, 2015

    First of all Thank you so much for your reply. i was keenly waiting for this.

     

    yes you are right.

     

    2 Data Centers (only one Data Center manages traffic at a time, no GTM load-balancing) -- correct, i dont want load balancing at the moment . only active passive kind of setup.

     

    i dont want to do any failover of GTM till there is one link is up out of three external links.

     

    Thanks

     

    • Hannes_Rapp's avatar
      Hannes_Rapp
      Icon for Nimbostratus rankNimbostratus
      Dec 08, 2015
      Thanks for confirmation, I'm currently not working, but I can check it tomorrow. Hope you're not in a rush. Reply with another message if you see no reply tomorrow. Good evening!
    • Harry1's avatar
      Harry1
      Icon for Nimbostratus rankNimbostratus
      Dec 09, 2015
      Hi Hannes, please share if you have something related to GTM. now here is some change . we are going to deploy GTM in routed mode (2 armed). dont need to terminate multiple ISP. group synchronization will be through same link.now want to understand about LISTENER. where does it come in pictue and what would be the configuration in local dns ,public dns and in GTM?
  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Dec 09, 2015

    Good evening. I'll try to answer your questions,

     

    In regards to GTM Listener break-down, have a look at: https://support.f5.com/kb/en-us/products/big-ip_gtm/manuals/product/gtm_config_guide_10_1/gtm_listeners.html1010790. The guide is for v10, but its still very relevant for BigIP v11.

     

    To summarize the guide, with GTM Listeners you can create exceptional configurations. They are not mandatory.

     

    This is what you may consider a default GTM/DNS setup:

     

    1. Your ISP DNS (handles all external IP ranges and public domains that do not belong to you)

     

    2. F5 GTM DNS (handles all external IP ranges and external domains that belong to you. Just configure Wide IPs, no need for GTM Listeners, unless you have exceptional requirements)

     

    3. Internal Network DNS (handles all internal IP ranges and domains)

     

     

    For reference, here's some stuff you can do with GTM Listeners:

     

    As an exception to 1,

     

    you can configure a GTM Listener to intercept an outgoing request to 8.8.8.8 (belongs to Google), and say it resolves to 'hahaha.ihackedgoogle.com' instead.

     

    As an exception to 2,

     

    you can configure a GTM Listener to bypass GTM DNS resolution for an external IP 1.1.1.1 (lets say it belongs to You), and have it routed to your Internal Network DNS server for an answer.

     

    As another exception to 3,

     

    you can configure a GTM Listener using an internal IP, i.e. 192.168.1.1, and have your GTM provide an answer instead of your Internal Network DNS server, as would happen otherwise.