Applies To:

Show Versions Show Versions

Manual Chapter: Managing Configuration Synchronization
Manual Chapter
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

About automatic and manual sync

The BIG-IP system can perform configuration synchronization automatically, or you can manually initiate synchronization:

Automatic
Available for Sync-Only device groups only, automatic synchronization (also known as auto sync) ensures that the BIG-IP system automatically synchronizes the configuration among device group members, whenever you make a change to any one of those members. During auto sync, the BIG-IP system performs incremental, rather than full, synchronization whenever possible.
Manual
Available for both Sync-Only and Sync-Failover device groups, manual synchronization occurs only when you specifically initiate a sync operation. The BIG-IP system notifies you whenever configuration data within the group needs to be synchronized. When you manually initiate synchronization, the BIG-IP system attempts to perform incremental synchronization whenever possible.

Enabling and disabling Automatic Sync

For Sync-Only device groups, you can choose to either automatically or manually synchronize configuration data in a device group.

Note: For Sync-Failover device groups, the BIG-IP® system supports manual synchronization only.

You can use the BIG-IP Configuration utility to enable or disable automatic synchronization. When enabled, this feature causes any BIG-IP device in the Sync-Only device group to synchronize its configuration data to the other members of the device group whenever that data changes.

  1. On the Main tab, click Device Management > Device Groups.
  2. In the Group Name column, click the name of the relevant device group.
  3. For Automatic Sync, clear or select the Enabled check box.
  4. Click Update.

Specifying an IP address for config sync

Before configuring the config sync address, verify that all devices in the device group are running the same version of BIG-IP® system software.
You perform this task to specify the IP address on the local device that other devices in the device group will use to synchronize their configuration objects to the local device.
Note: You must perform this task locally on each device in the device group.
  1. Confirm that you are logged in to the actual device you want to configure.
  2. On the Main tab, click Device Management > Devices. This displays a list of device objects discovered by the local device.
  3. In the Name column, click the name of the device to which you are currently logged in.
  4. From the Device Connectivity menu, choose ConfigSync.
  5. For the Local Address setting, retain the displayed IP address or select another address from the list. F5 Networks recommends that you use the default value, which is the self IP address for VLAN internal. This address must be a non-floating self IP address and not a management IP address.
  6. Click Update.
After performing this task, the other devices in the device group can sync their configurations to the local device.

Viewing config sync status at a glance

You can use the BIG-IP® Configuration utility to view the config sync status of the device group that contains the local device.
  1. Display any BIG-IP Configuration utility screen.
  2. In the upper left corner of the screen, view the status of the device group.
For more details, you can click the status, which displays more information:
  • If the status pertains to config sync specifically, the system displays the Device Management > Overview screen. Using this screen, you can view a detailed message about the status, as well as the status of each device group member.
  • If the status pertains to an issue with device trust, the system displays the Device Management > Device Trust screen. Using this screen, you can re-establish trust among all device group members or add devices to the trust domain.

Viewing config sync status for all device groups and members

You can use the BIG-IP® Configuration utility to view the config sync status of a device group and each of its members.
  1. On the Main tab, click Device Management > Overview.
  2. In the Device Groups area of the screen, in the Name column, select the name of the relevant device group. The screen expands to show a summary and details of the sync status of the selected device group, as well as a list of the individual devices within the device group.
  3. In the Devices area of the screen, in the Sync Status column, view the sync status of each device:
    • If all devices show a sync status of green, the configurations of all device members are synchronized, and you do not need to perform a config sync operation.
    • If any device shows a sync status of Changes Pending, you must synchronize the configuration on that device to the other members of the device group.
    A status of Changes Pending for a device indicates that the device contains recent configuration changes that have not yet been synchronized to the other members of the device group.

Synchronizing the BIG-IP configuration

Before you perform this task, verify that device trust has been established and that all devices that you want to synchronize are members of a device group.
You perform this task to synchronize BIG-IP® configuration data among the devices in the device group. This synchronization ensures that any device in the device group can process application traffic successfully. You can determine the need to perform this task by viewing sync status in the upper left corner of any BIG-IP Configuration utility screen. A status of Changes Pending indicates that you need to perform a config sync within the device group.
Important: You can log into any device in the device group to perform this task.
  1. On the Main tab, click Device Management > Overview.
  2. In the Device Groups area of the screen, in the Name column, select the name of the relevant device group. The screen expands to show a summary and details of the sync status of the selected device group, as well as a list of the individual devices within the device group.
  3. In the Devices area of the screen, in the Sync Status column, select a device.
  4. From the Sync options list, select an option:
    Option Description
    Sync Device to Group Select this option when you want to sync the configuration of the selected device to the other device group members.
    Sync Group to Device Select this option when you want to sync the most recent configurations of one or more device group members to the selected device.
  5. Click Sync.
The BIG-IP system compares the configuration data on the local device with the data on each device in the device group, and synchronizes the configurations of all devices in the device group. Note that the system does not synchronize non-floating self IP addresses.

Troubleshooting the config sync process

The BIG-IP Configuration utility displays a number of different statuses and messages to help you diagnose and correct a config sync problem. These statuses and messages pertain to both device groups and individual device group members.

Sync status for device groups

At all times, the BIG-IP system displays a specific sync status for each device group.

Table 1. Possible sync status for device groups
Color Sync Status Summary Message Explanation and Recommended Action
Green In Sync All devices in the device group are in sync

All devices in the device group contain the current configuration.

Recommended action: None.

Green In Sync The selected device group contains only one member

The local device is the only member of the selected device group.

Recommended action: None. Optionally, you can add other devices to the device group.

Green Standalone None.

The local trust domain contains one member only, which is the local device.

Recommended action: None. You an optionally add other devices to the local trust domain.

Blue Awaiting Initial Sync None.

All devices have been recently added to the device group and are awaiting an initial config sync.

Recommended action: Sync any one of the devices to the device group.

Blue Awaiting Initial Sync Device_name1, device_name2, etc. awaiting the initial config sync

One or more of the devices in the device group has either not yet synchronized its data to the device group members or has not yet received a sync from another member.

Recommended action: View the individual sync status of each device group member, and then sync the device with the most current configuration to the other devices.

Green Syncing None.

A sync operation is in progress.

Recommended action: None.

Yellow Changes Pending Changes Pending

One or more devices in the device group has recent configuration changes that have not yet been synchronized to the other members of the device group.

Recommended action: View the individual sync status of each device group member, and then sync the device with the most current configuration to the device group.

Yellow Changes Pending There is a possible change conflict between device_name1, device_name2, etc.

There is a possible conflict among two or more devices because more than one device contains changes that have not been synchronized to the device group.

Recommended action: View the individual sync status of each device group member, and then sync the device with the most current configuration to the device group.

Red Not All Devices Synced Device_name1, device_name2, etc. did not receive last sync successfully.

One or more of the devices in the device group does not contain the most current configuration.

Recommended action: View the individual sync status of each device group member, and then sync the device with the most current configuration to the device group.

Red Sync Failure A validation error occurred while syncing to a remote device

Because of a validation error, the named device was unable to accept a sync successfully.

Recommended action: Review the error message and determine corrective action on the device.

Blue Unknown The local device is not a member of the selected device group

The device that you are logged into is not a member of the selected device group.

Recommended action: Add the local device to the device group to view sync status for the device group.

Blue Unknown Not logged into the primary cluster member

The system cannot determine the sync status of the device group because you are logged in to a secondary cluster member instead of the primary cluster member. Pertains to VIPRION systems only.

Recommended action: Log out and then log in to the primary cluster member, using the primary cluster IP address.

Red Unknown Error in trust domain

The trust relationships among devices in the device group are not properly established.

Recommended action: On the local device, reset device trust and then re-add all relevant devices to the local trust domain.

None. None. X devices with Y different configurations

The configuration time for two or more devices in the device group differs from the configuration time of the other device group members. This condition causes one of these status messages to appear for each relevant device:

  • Device_name awaiting initial config sync
  • Device_name made last configuration change on date_time

Recommended action: Identify a device with the most current configuration and sync the device to the device group.

Sync status for device group members

At all times, the BIG-IP system displays a specific sync status for each device within a device group.

Table 2. Possible sync status for individual devices
Color Sync Status Explanation and Recommended Action
Green None.

This status indicates one of the following conditions:

  • The device has the most recent set of configuration data within the device group.
  • The device is a standalone device or is the only device group member.

Recommended action: None.

Blue Awaiting Initial Sync

This status indicates one of the following conditions:

  • The device has no configuration changes to be synced since joining the device group.
  • The device is member of a device group with autosync enabled, and no changes have been made on any device in the device group.
  • The device has not yet received a sync from another device and has no configuration changes to be synced to other members of the device group.

Recommended action: Perform the appropriate type of config sync.

Yellow Changes Pending

The device has recent configuration changes sync the last sync that have not yet been synchronized to the other members of the device group.

Recommended action: Sync the device with the most recent configuration to the other members of the device group.

Yellow Awaiting Initial Sync with Changes Pending

This status indicates one of the following conditions:

  • The configuration on the device has changed since the device joined the device group.

    Recommended action: Sync the device to the device group.

  • The device has not yet received a sync from another device but has configuration changes to be synced to other members of the device group.

    Recommended action: Sync the device with the most recent configuration to this device.

Red Does not have the last synced configuration, and has changes pending

The device received at least one sync previously but did not receive the last synced configuration, and the configuration on the device has changed since the last sync.

Recommended action: Sync the device with the most recent configuration to this device.

Red Disconnected

The local device does not recognize the disconnected device.

Recommended actions:

  • View the Device Management > Device Trust screens to see if the disconnected device is a member of the local trust domain, and if not, add the device to the domain.
  • Use the Device ManagementDevices screen to view the specified config sync address of the disconnected device and determine whether the local device has a route to that address.
Red Device does not recognize membership in this group

The device does not recognize that it is a member of the device group.

Recommended action: Log into the relevant device and view the Device Management > Device Groups screens to see if the device is a member of the device group. If not, add the device to the device group.

Red No config sync address has been specified for this device.

The device does not have a config sync address.

Recommended action: Log into the relevant device, and using the Device Management > Devices screen, specify the IP address that you want remote devices to use to sync configuration data to the device. As a best practice, this address should be a non-floating self IP address associated with an internal VLAN. The address must either be on the same subnet as the other devices in the device group or have a route to that address defined on the other devices.

Red Does not have the last synced configuration

The device previously received the configuration from other members of the device group but did not receive the last synced configuration.

Recommended action: Sync the device group to the device.

Advanced config sync properties for a device

A device in a device group has several advanced properties.

Property Description
CID Originator Commit ID originator. This indicates the source of the most recent change to the configuration on the relevant device. More specifically, the CID originator is either:
  • The relevant device itself (due to locally-made changes)
  • Another device in the device group that synchronized a change to the relevant device
CID Time Commit ID time. This indicates either the last time that a user updated the configuration locally, or, if the configuration on the device was synced from a remote device group member, the actual time that the synced configuration change was made on that remote device.
Last Sync Time This is the last time that a sync was initiated or forced to or from the relevant device.
Last Sync Type This is the type of sync. Possible values are: Manual Full Load, Manual Incremental, and Automatic.
LSS Originator Last Successful Sync originator. This is the device that most recently performed a successful sync operation to the relevant device.
LSS Time This is the actual time that the synced configuration change was made on a remote device group member. Whenever a device in the device group syncs its configuration to the other device group members, the LSS time on each device is updated to reflect the Commit ID time of the configuration change on the device that initiated the sync operation.
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)