Forum Discussion

Meena_Agnihotri's avatar
Meena_Agnihotri
Icon for Nimbostratus rankNimbostratus
Jan 21, 2016

Multiple traffic groups with HA groups

I have the following setup:

 

I have two LTMs active/standby mode. I have two DCs (server-subnets) attached to these.

 

DC1- traffic-group-1 with a corresponding HA-group1. HA-group-1 has two links in it - 1.1 and 1.2 DC2- traffic-group-2 with a corresponding HA-group2. HA-group-2 has two links in it - 1.5 and 1.6

 

Bigip1 is active for both traffic-groups

 

I ran this test: 1. I failed link 1.1 by shutting down the port on the cisco-switch-side. 2. bigip2 becomes active for traffic-gp1 (great) 3. bigip1 remains active for traffic-gp2 (also great)

 

But now my application traffic for VIP (.10) in traffic-group-2 is being handled by bigip2 (this is the standby unit for this traffic group). On my upstream router, I am seeing the mac-address for the VIP (.10) change from bigip1 to bigip2. I did not expect that to happen. There should have been no change in traffic-group-2 in this test scenario. Isn't that how its supposed to work? Thanks for any insights.

 

application delivery
BIG-IP

2 Replies

Sort By
  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Jan 21, 2016

    If the traffic group is active on BigIP1,you should not be seeing traffic sent to BigIP2. Have you taken a traffic capture at the time of the failover to see if the BigIP is sending out Gratuitous ARPs? The easiest way to troubleshoot this would be to open a support ticket. You can reach support by calling 1-888-882-7525 or internationally 800 11 ASK 4 F5. Make sure you have your BigIP's serial number available as you will need it to open the case.

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jan 22, 2016

    Hi,

     

    When using multiple traffic groups, you must be sure all objects handing the connection are in the same traffic group.

     

    • Virtual Address
    • SNAT List (when using SNAT)
    • Floating IP (when using automap)

    If a virtual address handing the connection is configured in traffic-group-2 and SNAT is configured with an object enabled in traffic-group-1, server packets will be sent to the wrong Mac address.