Forum Discussion

kohli9harjeev's avatar
kohli9harjeev
Icon for Nimbostratus rankNimbostratus
Jan 31, 2016

ASM Config not Syncing

Hi All,

 

Greetings!!

 

I have a very a wierd issue going after I upgraded the vCMP host and Guest from 11.6HF5 to 11.6HF6 in which Guest are provosioned with LTM,APM,ASM,AAM If I am doing anything related to ASM policy, then I try to sync the config from Active to Standby box,technically the config gets SYNC'D but just after 2-3 seconds it shows me that Standby box has the most latest config, then I have to overwrite the config from Active to Standby box which works fine.

 

So this issue is only happening with ASM related config as doing changes on LTM or APM doesnt cause this issue. This issue was not there in HF5 but not only happened starting from HF6.

 

Can anyone please help to sort this out.

 

application delivery
ASM Advanced WAF

2 Replies

Sort By
  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jan 31, 2016

    Perhaps it would be the best option to open a support case here. It could be a generic sync-status problem which may or may not be related to ASM module.

    A quick check-list:

    1. Ensure ASM Sync is still enabled for your Device Group: 
      https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-1-0/4.html
      - Search for "Enabling ASM synchronization on a device group" (no impact)
    2. As an additional problem, are you also unable to export policies (as xml or plc)? If yes, it could be a common post-hotfix internal DB problem, and a hard reboot on both units may suffice to resolve the problem. (cluster failover impact, should be done outside peak hours)
    3. If none of the above help you, reset ASM MySQL DB to default on the standby unit, re-enable the ASM sync, and try to synchronize from active to standby unit (an initial full sync may take 15 minutes, depending on how many policies you have). Ref: 
      https://support.f5.com/kb/en-us/solutions/public/6000/900/sol6992
      (no impact when resetting DB on standby unit, but initial sync thereafter may increase appliance load significantly)
  • kohli9harjeev's avatar
    kohli9harjeev
    Icon for Nimbostratus rankNimbostratus
    Feb 01, 2016

    Hello Hannes,

     

    Thank you for your reply. I have already opened a case with Support for this issue.

     

    Based onn your points.

     

    1. ASM sync is enabled on the device/guests. Its the same device group what i use for device sync.
    2. I am able to export policies out of the current device and could also import the same in other device.
    3. Currently I havent tried resetting the mysql db as I am still waiting for Support's reply. I will try this today if they come back us.

    I will keep posting the updates.

     

    Regards Harjeev