BIG-IP Sync-Failover - Sync Failed
Hi, In a project we're running a device-group in Sync-Failover* mode with Manual Sync type. After a change on the Active unit trying to sync from the Active unit to the device-group, Sync Failed with the information below: Sync Summary Status Sync Failed Summary A validation error occurred while syncing to a remote device Details Sync error on 2nd-unit: Load failed from 1st-unit 01070110:3: Node address 'node' is referenced by a member of pool 'pool'. Recommended action: Review the error message and determine corrective action on the device We're totally sure that nothing had been changed manually on the 2nd node, and both nodes were in sync before the change on 1st node. The Last Sync Type field for both nodes shows Manual Full Node. I couldn't find anything on this case; is it safe to just manipulate the configuration on the 2nd node and then sync from 2nd node to the device-group? Many thanks in advance!
bigip_add and gtm_add scripts with sync groups
Two questions: 1.) If a new GTM is being introduced into a sync group with 3 existing GTMs, is there a requirement to run the "gtm_add " three times (one for each existing GTM) or is it enough to just target one of the three existing members in the "gtm_add " command. I would think that just targeting one of the existing GTMs would be enough to synch the config from the group, but I'm not sure about the certificate exchange. That makes me question if I need to execute the command three times, pointing to each individual GTM member. 2.) Same scenario with adding a new LTM to the GTM synch group. Would I have to run "bigip_add " one time for each of the existing three GTM members upon adding the LTM, or just select one of the three members to point the "bigip_add " command at? Thanks
BIG-IP : iControl API retrieve device-groups and members
F5 BIG-IP Virtual Edition v11.4.1 (Build 635.0) LTM on ESXi Does iControl API provide methods to retrieve the following info : -- list of device-groups a device belongs to ? Main > Device Management > Device Groups > Device Group List -- device-group members Properties > Members Please note that Management.DeviceGroup class constructor doesn’t take any args – so how to specify the hostname/ip ? In other iControl classes ( such as System.ConfigSync ) the constructor accepts args ( hostname, username, password, timeout ) that are used to connect to the BIG-IP device for all of the class member methods.
DNS delegation to a GTM sync group
Hi, I've an average working knowledge on GTMs and have been exploring on how or in fact if a GTM in a sync group could delegate a query to another. I've had no luck so far. The setup contains an infoblox with three NS records to the three GTMs in the sync group. If I were to remove a GTM to make sure no query reaches up to it in case of a disaster or maintenance, would removing the NS record for the particular GTM on infoblox suffice or I have to remove it's NS record from named config/ zone file too on the GTMs? Any help on the topic is appreciated. A link or reference to a documentation explaining the flow would be of great help. * The GTMs are running on 10.2.4 HF version with named enabled and zrd disabled. zrd is enabled usually only when we're to edit the zone files of course.BIG-IP : iControl sync operation executed against non-sync'd cluster
F5 BIG-IP LTM VE v11.4.0 on ESXi I am working with a 2-node BIG-IP cluster. I am using iControl API ( .NET/C code ) to manipulate a 2-node BIG-IP cluster. All operations are directed to the floating-VIP and so arrive at the cluster's primary node. First, I update a data-group-file, next I re-cache the data-group, and finally I issue a sync command : SystemConfigSync.synchronize_to_group() I am wondering what is the expected result for a cluster that was already in a non-synchronized state before I initiated any of my iControl operations ? By "non-synchronized state" I mean that the primary node sync status is green, and the secondary node sync status is yellow "Changes Pending". The iControl sync operation returns an error with little detail, but potentially could it fail to sync because the secondary is in a more current state than the primary ?GTMs, Route Domains, and Sync Groups
Hey All, I'm curious about an idea and would like to know if it's even possible. Let's say we have two GTMs, GTM_A and GTM_B. Is it possible to split the two GTMs into two seperate route domains (GTM_A_Partition_1, GTM_A_Partition_2, GTM_B_Partition_1, GTM_B_Partition_2)? Is it then possible to have two separate sync groups that act independently from one another - example GTM_A_Partition_1 syncs with GTM_B_Partition_1 and GTM_A_Partition_2 syncs with GTM_B_Partition_2? Thanks, Brian