For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

josh_schmidbaue's avatar
josh_schmidbaue
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

self IP's, floating IP's and config sync

New to the F5 world. I'm learning the product by putting documentation and experience together with setting up F5 LTM 11.3 from installation to configuration in our lab environment.

 

The end goal is to have them in an active/standby pair. I went through this doc for the initial setup: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-1-0/2.html then I stumbled on this (have not proceeded to do this) https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-2-0/5.html

 

Unsure if I did this correctly to start with...but to the questions:

 

What does config sync actually sync? I've read it sync's only the self/floating IP's to the other. I guess it doesn't include virtual server configs?

 

Once configsync is done, shouldn't I see all the configs on the standby device?

 

Do I need to create the virtual servers on both LTM's in order to have the standby to take effect?

 

Thanks!

 

BIG-IP
devops
LTM

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 18, 2015

    Josh,

     

    QU. What does config sync actually sync? I've read it sync's only the self/floating IP's to the other. I guess it doesn't include virtual server configs?

     

    Ans. It syncs shared configurations, so floating self-ips and listener objects like virtual servers, snats, nats etc. And, of course, the configuration objects that make up these objects e.g. nodes/pools/monitors etc.

     

    QU. Once configsync is done, shouldn't I see all the configs on the standby device?

     

    Ans. Yes

     

    QU. Do I need to create the virtual servers on both LTM's in order to have the standby to take effect?

     

    Ans. the config sync process will do this but, yes, you need the same VS configuration on both boxes.

     

    Check out askf5 for terms like DSC (HA basically) and traffic-groups (what is logically shared between bigips).

     

    Hope this helps,

     

    N

     

  • josh_schmidbaue's avatar
    josh_schmidbaue
    Icon for Nimbostratus rankNimbostratus
    Nov 18, 2015

    Thank you this helped. I saw that there was a problem with the device group. I ended up changing my device group type from sync-only to sync-Failover. That put my two F5's into an active/standby and the virtual servers were able to populate to the other.

     

    Thanks!

     

    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      Nov 18, 2015
      Great news Josh. Mark up if happy.