301B: BIG-IP LTM Specialist: Maintain and TroubleshootDemo

By F5 · Question Mode

QuestionQ24

Identify and Resolve LTM Device Issues

An LTM device pair is set up for failover and connection mirroring. The LTM devices have virtual servers configured for HTTP, HTTPS with SSL offload, and SSH. An event triggers a failover. HTTP and SSH sessions that were active during the failover stay active, but HTTPS sessions are dropped.

What is the root cause of this issue?

  • A The SSL certificates on the LTM devices do NOT match.
  • B Connection mirroring is incompatible with clientssl profiles.
  • C SNAT automap was NOT enabled for the HTTPS virtual servers.
  • D Connection mirroring was NOT enabled for the HTTPS virtual servers.
Explanation

BIG-IP connection mirroring must be enabled on each relevant virtual server. Because the HTTP and SSH virtual servers preserve their active sessions while only HTTPS sessions are dropped, the HTTPS virtual servers are not mirroring their connection state to the peer. SSL profiles are supported with connection mirroring; SNAT automap does not determine whether an established connection survives failover.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!