Forum Discussion

Christopher_Noy's avatar
Christopher_Noy
Icon for Nimbostratus rankNimbostratus
Feb 01, 2015

Cannot add device to Peer List

Hello, After seeing some peer device weirdness after upgarding my active and standby 4200v's to 11.6, I wiped the HA config and started over. I am at the stage to add a device to the peer device list. I enter in the management IP of the peer device (and credentials) but it keeps kicking back a "This device is not found" error. This has me stumped big time. Any advice would be greatly appreciated.

 

application delivery
LTM
management

11 Replies

Sort By
  • NikhilB_149913's avatar
    NikhilB_149913
    Historic F5 Account
    Feb 01, 2015

    Is the device reachable? (ping)

     

    Did you create a separate HA_vlan (self IP) for failover/config sync? (if so, try to use this IP to add the peer device), assuming it is also reachable.

     

    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 01, 2015
      Yes, it is reachable (both devices can ping each other's mgmt IP). There is already an HA_vlan created (with "self IP" addresses assigned). Those are also pingable from each device at the CLI. I've tried using the self IP's as well. Still no joy. Up until I removed the devices in the peer group, this was working. Not sure why I can't add them back in now.
    • NikhilB_149913's avatar
      NikhilB_149913
      Historic F5 Account
      Feb 01, 2015
      NTP configured? Reset the device trust (generate a new self signed cert)
    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 01, 2015
      NTP is configured (and has been). I also reset the device trust (and generated a new cert) from the gui. Still not letting me add the devices to the peer group.
  • NikhilB's avatar
    NikhilB
    Icon for Employee rankEmployee
    Feb 01, 2015

    Is the device reachable? (ping)

     

    Did you create a separate HA_vlan (self IP) for failover/config sync? (if so, try to use this IP to add the peer device), assuming it is also reachable.

     

    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 01, 2015
      Yes, it is reachable (both devices can ping each other's mgmt IP). There is already an HA_vlan created (with "self IP" addresses assigned). Those are also pingable from each device at the CLI. I've tried using the self IP's as well. Still no joy. Up until I removed the devices in the peer group, this was working. Not sure why I can't add them back in now.
    • NikhilB's avatar
      NikhilB
      Icon for Employee rankEmployee
      Feb 01, 2015
      NTP configured? Reset the device trust (generate a new self signed cert)
    • Christopher_Noy's avatar
      Christopher_Noy
      Icon for Nimbostratus rankNimbostratus
      Feb 01, 2015
      NTP is configured (and has been). I also reset the device trust (and generated a new cert) from the gui. Still not letting me add the devices to the peer group.
  • Christopher_Noy's avatar
    Christopher_Noy
    Icon for Nimbostratus rankNimbostratus
    Feb 01, 2015

    OK, for whatever reason, I was only able to get the device added via the CLI (tmsh) using this command found in SOL13639: modify /cm trust-domain /Common/Root ca-devices add { } name username password

     

    Not sure why it wasn't working via the GUI. I think I'll submit a ticket with F5 on Monday about this. Thanks for the suggestions.