Forum Discussion

ashwini_6784's avatar
ashwini_6784
Icon for Nimbostratus rankNimbostratus
Sep 30, 2011

Problem in Synchronising configuration for BIGIP LTM VE

Hi.

 

 

I'm using 2 units of BIGIP LTM VE load balancer with Active/Active mode. Now when I try to do ConfigSync, its throwing an error saying:

 

 

Checking configuration on local system and peer system...

 

Peer's IP address: 172.30.140.42

 

Caught SOAP exception: Failed to connect to host 172.30.140.42, port 443: Connection timed out

 

Connection failure. Make sure the endpoint/port is correct, and

 

Allow Protocol TCP/443 is allowed for the Primary Failover Address

 

Error: There is a problem accessing the peer system.

 

BIGpipe parsing error:

 

01110034:3: The configuration for running config-sync is incorrect.

 

 

Not able to understand the root cause and how can I solve this.

 

 

Please need immediate help on this.

 

 

Thank you
  • Hi Ashwini,

     

     

    Is 172.30.140.42 the correct IP for the peer self IP address? Do you have port lockdown on that self IP set to one of these: allow 443, allow default or allow all?

     

     

    You can run csTest.pl to get help troubleshooting this:

     

     

    sol7024: Overview of the ConfigSync process

     

    http://support.f5.com/kb/en-us/solutions/public/7000/000/sol7024.html

     

     

    Aaron
  • Hi Hoolio,

     

     

    Thanks for quick reply.

     

     

    Yes, thats the correct self IP of the peer, and the port lockdown is Allow Default on both units.

     

     

    I ran csTest.pl and got the following result:

     

     

    config csTest.pl

     

    Status of daemons:

     

    Warning: BigDB daemon (bigdbd) is not running.

     

    Configsync configuration:

     

    Failover address (Self): 172.30.140.41

     

    Peer IP address: 172.30.140.42

     

    Configsync port: 443

     

    Configsync username: admin

     

    Acceptable time difference: 600 seconds

     

    Configsync auto detect status:

     

    3 - Config modified on both systems, manual intervention required

     

    Network connection status:

     

    Local system is listening on configsync port (443).

     

    Error: Ping test failed (256). Make sure the end point

     

    (172.30.140.42) is correct and available on the network.

     

     

    So how can I proceed now?
  • Hi Aaron,

     

     

    In some F5 manual i saw that, For Active/Active mode, we have to set the default routes of our backend servers, to the floating IP address of either unit1 or unit2.

     

     

    I have not created routs with these IPs anywhere.

     

     

    Can that be the cause of the problem?

     

     

    Can you please tell how to configure these routes.

     

     

    I'm unable to find any option for this.

     

     

     

    Thank you

     

    ashwini

     

  • Are you able to ping 172.30.140.42 from the other unit? Can you use curl from the command line to make an HTTPS request to the peer?

     

     

    curl -k https://172.30.140.42

     

     

    I'd get config sync working before you worry about routing to/from the pool members.

     

     

    Aaron
  • Hi

     

     

    Now we have switched it to Active/Standby mode. Facing a new exception while performing ConfigSync:

     

     

    Checking configuration on local system and peer system...

     

    Peer's IP address: 172.30.140.42

     

    Caught SOAP exception: Unexpected return code: 401 F5 Authorization Required

     

    Authorization failure. Make sure user ID and password are correct.

     

    Error: There is a problem accessing the peer system.

     

    BIGpipe parsing error:

     

    01110034:3: The configuration for running config-sync is incorrect.

     

     

    I'm able to ping peer self IPs from both units.

     

     

    And in ConfigSync we have chosen for basic configuration.

     

     

    Any help?
  • I performed curl -k https://172.30.140.42

     

     

    And got something like below:

     

     

    curl -k https://172.30.140.42 BIG-IP®- Redirect // Hide error message container if browser supports javascript and web s tandards if (document.getElementById) { document.write('') document.write('content { display: none; }') document.write('') } // Redirect user to start page when window loads window.onload = function() { location.href = '/xui/?content=/tmui/tmui/system/settings/redire ct.jsp' } if (document.getElementById) { document.write('Redirect...') } JavaSc ript not enabled / supported This configuration utility requires JavaScript in order to f unction properly. If your browser supports JavaScript, check your "Options& quot; or "Preferences" section to enable this feature. Browse r does not suport basic W3C standards This configuration utility has been designed to work with we b browsers that support standards created by the Wo rld Wide Web Consortium (W3C). The web browser you are using does not suppor t these standards, and therefore will not operate properly with this configurati on utility. To learn more about W3C standards and compatible web browsers, pleas e visit http://www.webstandards.or g/upgrade. [root@TMHRED123:Active] config
  • Hi Friends,

     

     

    I'm running two virtual LTM's in ubuntu 8.10 OS in Active/Standby mode. I'm not able to sync the config from active to standby and wise versa and the error message given below:

     

     

    Loading the configuration:

     

     

    /sbin/restorecon: Error while labeling files under /var/ts

     

     

     

    Please help me to sync the config successfully.

     

     

    Regards,

     

     

    Swethan