Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Mar 26, 2016

Yes, and it's generally recommended to do so.

 

I'd even recommend to use two physical interfaces (as Aggregated Trunk) for HA, unless you plan to use all other 7 interfaces for something else. It would make sense to use that HA trunk interface for three things: Config Sync, Network fail-over, Traffic Mirror

 

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Mar 28, 2016
Your active appliance should reboot(or take another chosen action) 90 seconds after disabling a VLAN where the VLAN failsafe feature is enabled, regardless of hardwired failover that is in place. If you use VLAN failsafe feature, the HA VLAN itself doesn't have to be monitored. I do not see a good reason to enable VLAN failsafe feature on HA VLAN. Not to say that it's a best practice or anything, but my personal preference is to never use hardwired failover. It's great due to it's responsiveness, but it can only check the appliance's health on a very low level. I find the network failover feature reliable, and what's most important, it doesn't have any limitations (more on limitations in SOL article). Another option is to have both in place, hardwired failover as well as network failover, but I would rather keep things simple and stick to just one. You can read more on topic here: https://support.f5.com/kb/en-us/solutions/public/2000/300/sol2397.html