For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sunkwan_Kim_147's avatar
Sunkwan_Kim_147
Icon for Nimbostratus rankNimbostratus
Jun 19, 2014

VLAN GROUP , ARP ISSUE, and can't add peer authority device

Dear all.   I wonder that what determine VG mac address(peer) in fdb table, when i configure vlangroup redundant system.   Is there any criteria ??   and..   when the vlans(ex, in) are i...
availability
design
management
TMOS
TMSH
Kevin_K_51432's avatar
Kevin_K_51432
Historic F5 Account
Jun 19, 2014

Hi Sunkwan, Looks like to establish trust you must use the management IP address (not self IP):

===========================================================
Establishing device trust
Before you begin this task, verify that:

On the Main tab, click Device Management > Device Trust, and then either Peer List or Subordinate List.
Click Add.
Type a device IP address, administrator user name, and administrator password for the remote BIG-IP device with which you want to establish trust. The IP address you specify depends on the type of BIG-IP device:
If the BIG-IP device is a non-VIPRION device, type the management IP address for the device.
If the BIG-IP device is a VIPRION device that is not licensed and provisioned for vCMP, type the primary cluster management IP address for the cluster.
If the BIG-IP device is a VIPRION device that is licensed and provisioned for vCMP, type the cluster management IP address for the guest.
================================================

From

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-device-service-clustering-admin-11-5-0/5.htmlconceptid

Hope this offers some help, Kevin

Sunkwan_Kim_147's avatar
Sunkwan_Kim_147
Icon for Nimbostratus rankNimbostratus
Jun 20, 2014
Thanks, Kevin.K. i have used self ip to establish device trust .. but it works~ in manual , recommended configuration is use management-ip when establish device trust .. right? many thanks .