V11.2-11.3.0双机配置.docx

11.2.1-11.3.0双机配置准备工作（例中我就起了一个vlan internal,无external）文档已看图说话为主，配置极尽简略。如需详细说明，对应标题查找原文标题下内容即可。原文引自：/kb/en-us/products/big-ip_ltm/manuals/product/viprion-configuration-11-2-1/3.html?sr备工作：vlan及vlan内IP ，注意Traffic Group内选项，36为浮动IP；self IP配置中port lockdown选allow default即可；port lockdown各选项开放端口及服务详见：/kb/en-us/solutions/public/13000/200/sol13250.html?sr=264013531.Specifying an IP address for config sync选定IP做配置信息的同步（两台都要分别手动配置）Device Management Devices内有本机设备，点击绿灯右边的名字进入如下界面点击Device Connectivity-ConfigSync这里建议选vlan internal 内对应的的IP，其他也可。但是不能使用floating IP,MGMT IP点击update完成2.Specifying IP addresses for connection mirroring选定IP做链接镜像保持 （两台都要分别手动配置）这里翻译不准，看说明：This task configures connection mirroring between two devices to ensure that in-process connections are not dropped when failover occurs. You can mirror connections between a maximum of two devices in a device group.web界面配置位子和步骤1一致，直至Device Connectivity-MirroringPrimary Local Mirror Address保持默认IP即可，或所属vlan ha 或vlan internal内IP均可。Secondary Local Mirror Address建议None,或下拉菜单中可选IP。只有Primary Local Mirror Address不可用时，Secondary Local Mirror Address才生效。点击update完成3.Establishing device trust两台设备互信（只需在一台设备中配置，在两台设备中分别完成步骤1,2后执行步骤3点击Device Management Device Trust Peer List或Subordinate List addDevice IP Address可以是MGMT IP或self IP，(在11.2.1中如果2台设备MGMT口配置IP但未互通时，无法在此选项中添加成功)Administrator Username及Password需与System Platform General内一致。点击Retrieve Device information点击 update完成4.Creating a Sync-Failover device group创建双机同步-容灾组（只需在一台设备中配置）Device Management Device Groups CreateGroup Type 选择sync-failoverMembers 将两台设备添加进includes勾选： enabled为通过网线实现failover.不勾选：通过蓝色failover线实现failover.update完成5.Syncing the BIG-IP configuration to the device group同步一下配置选中2台设备中一台，如图选中2.，在sync中选择同步方向。6.Specifying IP addresses for failover选定IP做容灾（两台都要分别手动配置）web界面配置位子和步骤1一致，直至Device Connectivity-Failover - Add - New Failover Unicast Address (VIPRION??platform可选Use Failover Multicast Address，详见原文)建议选择vlan HA 所属IP，端口默认1026.单击Update6.Syncing the BIG-IP configurat