201 · Question #147
Refer to the exhibit. A BIG-IP Administrator configures a now VLAN on an HA pair of devices that does NOT yet have any traffic. This action causes the assigned traffic group to fail over to the standb
The correct answer is B. Fail-safe. When configuring a new VLAN on a BIG-IP HA pair, the "Fail-safe" setting should be adjusted to prevent unintended traffic group failovers, especially if the VLAN is not yet carrying production traffic. By default, a VLAN fail-safe can trigger a failover if network traffic on the
Question
Refer to the exhibit. A BIG-IP Administrator configures a now VLAN on an HA pair of devices that does NOT yet have any traffic. This action causes the assigned traffic group to fail over to the standby device. Which VLAN setting should be changed to prevent this issue?
Exhibit
Options
- AAuto Last Hop
- BFail-safe
- CCustomer Tag
- DSource Check
How the community answered
(18 responses)- A11% (2)
- B78% (14)
- C6% (1)
- D6% (1)
Why each option
When configuring a new VLAN on a BIG-IP HA pair, the "Fail-safe" setting should be adjusted to prevent unintended traffic group failovers, especially if the VLAN is not yet carrying production traffic. By default, a VLAN fail-safe can trigger a failover if network traffic on the VLAN stops or falls below a threshold, which might happen on a newly configured VLAN with no active traffic.
Auto Last Hop (ALH) determines how return traffic is directed back to the client, which is unrelated to HA failover triggered by VLAN state.
The VLAN fail-safe feature on BIG-IP monitors network traffic on a specific VLAN and can trigger a failover if traffic drops below a defined threshold or ceases entirely. For a newly configured VLAN that has no active traffic, the default fail-safe settings would detect a lack of traffic and incorrectly assume a network failure, leading to an unnecessary failover. Disabling or adjusting the VLAN fail-safe setting for such a VLAN prevents this premature failover.
Customer Tag refers to the VLAN tag (ID) itself, which is essential for VLAN identification but has no direct impact on HA failover logic due to lack of traffic.
Source Check is a security feature that verifies the source IP address of incoming packets against the MAC address, not related to VLAN traffic monitoring for HA failover.
Concept tested: BIG-IP HA VLAN fail-safe configuration
Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-device-service-clustering-admin/configuring-failover-and-failback.html
Topics
Community Discussion
No community discussion yet for this question.