Forum Discussion

EJM_358200's avatar
EJM_358200
Icon for Nimbostratus rankNimbostratus
Apr 12, 2018

Sync cluster is failed

Hello Team,

 

I have configured a cluster Active/Standby on F5, the problem is when i try to sync configuration between Active and Standby is NO-OK.

 

I have implemented this LAB on VMware workstation, should i add an options on VMware in order to sync will work ?

 

Thanks in advance for your help.

 

application delivery
LTM

2 Replies

Sort By
  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    Apr 12, 2018

    Hi,

     

    Really hard to diagnose remotely. Did you check ConfigSync settings on both nodes? Can you ping Self IPs used by VLAN set in ConfigSync configuration?

     

    I have plenty of VMWare based clusters and there is nothing special necessary to be configured for networking on VMWare. You just need basic connectivity between nodes (so right VMware Networks connected to right vNIC on nodes).

     

    Piotr

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 12, 2018

    Hello,

     

    Please check the following point:

     

    1. First (in both equipement): check that you set in Device Management -> Devices -> Device Self, then in Device connectivity all vlan that have to be used by peers for ConfigSyng FailOver and Mirroring. You have to use the same vlan (HA vlan) for each functionality.

       

    2. In the vlan that you use for HA check in the self IP that you set "port Lockdown" to Allow default.

       

    Additional point connect in CLI on one members en try to ping another one in your HA IP (and telnet on port 443 too...). Because if you can't reach another one from your HA interface it's probably du to network/Vmware problem...

     

    1. In your Devices Groups check that both memebers are include and you set your group type as Sync--Failover.

    Additional information I don't now if you had created a specific VLAN for HA, if not I advise you to do it because it's not advisable to use you business vlan (bandwidth consumption, not secure with port lockdown default, ... ). But if you can't just be carefull to open only the necessary flows on the fw.

     

    Regards