Forum Discussion

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 02, 2012

Traffic Group Issue

Hi all,

 

I've a two device DSG setup, with three vlans configured; internal, external and HA. I've a floating IP on internal, not on external or HA just yet. If I configure a 4th VLAN, no problem, if I configure local IPs for that VLAN on both devices, no problem. If I configure a floating Self IP for the 4th VLAN, both devices drop into a Standby state. ConfigSync works fine but both devices show ONLINE (STANDBY).

 

If I remove the floater and sync, no change.

 

If I remove the non-floaters, no change.

 

If I remove the 4th VLAN on unit 1, it goes active but I can't force the traffic group to standby to the second device.

 

If I remove the 4th VLAN on unit 2, I can force the traffic group to it.

 

All in Common partition, RD0, version 11.2.1

 

Any ideas?

 

Note I'm using int 1.3 trunked for the 4th VLAN, same int as for the HA VLAN. Just trying another int now...

 

8 Replies

  • Interesting. I used int 1.2 and it all worked just fine!

     

    --Correction: No it didn't, it just took a bit longer for each device to move to standby.

     

  • Just lost both VEs by deleting the Self IPs (floating and non-floating) and changing the VLAN Failsafe setting to Reboot rather than Failover. Got em back and lost them again after creating the non-floating IPs and the floating IP on unit 1. I suspect this issue is VLAN Failsafe related as this is a test rig.

     

  • Disabled Failsafe and things are better. Still have unit1 in Standby and ConfigSync showing as 'disconnected', unit 2 in Standby but thinking ConfigSync is 'In Sync'!

     

    --A full reboot of both devices has not made a difference.

     

  • Still have unit1 in Standby and ConfigSync showing as 'disconnected', unit 2 in Standby but thinking ConfigSync is 'In Sync'!i think disconnect unit is not able to communicate to its peer. is device management setting all correct e.g. dtdi/dtca certificate and private key, network failover address, etc? is port lockdown correct? and is time between both units in sync?
  • That's a check on all points apart from the comms checks. I'll do these later and check back in. Thanks
  • OK, so PING wasn't working between the Self IPs on the HA VLAN and a tcpdump revealed no traffic whatsoever. I went to the ConfigSync screen and hit update without changing anything and tried yet another reboot and it's now working. Doesn't make any sense to me. I'm going to try adding that 4th VLAN once again...
  • Hello,

     

     

    ¿any update on this? I have the same problem testing VLAN Failsafe on BigIP 4000 plaforms with v11.2.1 HF3. I've already tried updating to v11.3 HF1, but still happening.

     

     

    Interface 1.1 is production interface and Interface 1.2 is the interface with failover VLAN. Vlan failsafe is configured for production VLAN.

     

     

    If I disable interface 1.1 in Active node to test VLAN failsafe, then ithe node switch to Standby state, but..when I re-enable interface 1.1 to test AutoFailback, interface 1.2 stop responding, ping between nodes doesn't work, and devices stay in Disconnectad State. If I disable and re-enable interface 1.2 it works again, but this is not a valid solution for a production environement.

     

     

    Any suggestions will be appreciated.

     

     

    Thank's a lot.

     

  • I never resolved this I'm afraid, luckily for me it was just a temporary test lab setup. I will be building it again shortly with v11.3 so we'll see if that's any better.