# How to sync the config in CLI when we have multiple traffic-group ( Active-Active)

**URL:** <https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346>\
**Category:** Technical Forums\
**Tags:** big-ip, ltm, application-delivery, config-sync\
**Created:** [January 4, 2022, 8:32pm UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346 "2022-01-04T20:32:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Blue\_whale](https://avatars.discourse-cdn.com/v4/letter/b/76d3ee/32.png) [@Blue\_whale](https://community.f5.com/u/Blue_whale)\
**Post date:** [January 4, 2022, 8:32pm UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/1 "2022-01-04T20:32:19Z")

</div>

Hi Experts !!!

How to sync the config via cli in Active-Active setup .

Example :

We have 2 f5 named BIGIP-A and BIGIP-B and 2 traffic-group-1 is active in BIGIP-A and traffic-group-2 is Active in BIGIP-2 .

On BIGIP-A I configure a VIP which is Active in traffic-group-2 , in this case how do I sync the config in CLI .

I need CLI command to sync the config when the F5 HA status are in Acive-Active setup .

---

<div class="post-metadata">

**Author:** ![CA\_Valli](https://avatars.discourse-cdn.com/v4/letter/c/9dc877/32.png) [@CA\_Valli](https://community.f5.com/u/CA_Valli)\
**Post date:** [January 5, 2022, 8:40am UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/2 "2022-01-05T08:40:06Z")

</div>

You’re confusing Traffic and Device Groups.

Config Sync is commanded by Device Groups, not Traffic Groups, so an Active/Active scenario doesn’t necessarily mean there will be separate Config Sync.

You can have multiple Device Groups for config sync, either with separate devices (in a 2+ unit HA environment) or for separate modules (eg. set WAF to automatic sync ), but if you only have one device group for your HA units, the will also be only one configsync option available.

Command will be (v11 to v16)

```tcl
run /cm config-sync <sync_direction> <sync_group>

```

Where \<sync\_group\> is your Device Group name (not traffic group!) and \<sync\_direction\> will either be to-group or from-group depending on which unit will receive/push the configuration.

---

<div class="post-metadata">

**Author:** ![Blue\_whale](https://avatars.discourse-cdn.com/v4/letter/b/76d3ee/32.png) [@Blue\_whale](https://community.f5.com/u/Blue_whale)\
**Post date:** [January 5, 2022, 8:58am UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/3 "2022-01-05T08:58:08Z")

</div>

Thanks for the clarification .

But in cli which \<sync-group\> should I be using for sync …I see 2 sync only groups and 1 sync-failover group .

---

<div class="post-metadata">

**Author:** ![CA\_Valli](https://avatars.discourse-cdn.com/v4/letter/c/9dc877/32.png) [@CA\_Valli](https://community.f5.com/u/CA_Valli)\
**Post date:** [January 5, 2022, 9:12am UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/4 "2022-01-05T09:12:12Z")

</div>

Whichever is the group with the disalignment .. “show /cm sync-status” command should help you clarify this, but I’d guess your main Device Group will be the sync-failover one.

The others you see are likely the default BIGIP device groups, device\_trust\_group is a sinc-only auto-sync group which is created when you perform device trust for the first time and handles device trust, while you might also see datasync-global-dg if you have WAF provisioned, this is a sync-only manual-sync group that handles metadata and attack signature update sync between the two units. It’s unlikely to see those groups out of sync in daily administration and you will have some high-priority problems to be handled if they are.

---

<div class="post-metadata">

**Author:** ![Blue\_whale](https://avatars.discourse-cdn.com/v4/letter/b/76d3ee/32.png) [@Blue\_whale](https://community.f5.com/u/Blue_whale)\
**Post date:** [January 6, 2022, 12:31pm UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/5 "2022-01-06T12:31:22Z")

</div>

**Whichever is the group with the disalignment . ?** What do you mean by this ? please explain .

---

<div class="post-metadata">

**Author:** ![CA\_Valli](https://avatars.discourse-cdn.com/v4/letter/c/9dc877/32.png) [@CA\_Valli](https://community.f5.com/u/CA_Valli)\
**Post date:** [January 7, 2022, 11:44am UTC](https://community.f5.com/t/how-to-sync-the-config-in-cli-when-we-have-multiple-traffic-group-active-active/48346/6 "2022-01-07T11:44:34Z")

</div>

You have 3 Device Groups, each verifying its own sync status.

Each one of them might be out of sync. You can check this with the “show /cm sync status” command as I stated in my previous comment.

Whichever is the group with the disalignment must be synced. So if only one is, sync that one. If two DG’s are out of sync, you will need to sync both.

[**K15419**](https://support.f5.com/csp/article/K15419#:~:text=Log%20in%20to%20the%20Configuration,designation%20for%20the%20device%20group.) details this operation, you can check KB’s for more information on sync process.
