Bug ID 630002: vCMP host configsync.allowmanagement setting overrides that of the guest

Last Modified: Mar 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Opened: Nov 22, 2016
Severity: 3-Major
Related AskF5 Article:
K14135

Symptoms

If a vCMP guest has its configsync.allowmanagement set to "enable", but the host does not, then the host will not pass rsync traffic to peer system(s) over the management interface. Errors similar to this will be seen on the destination system(s): err mcpd[5923]: 0107134b:3: (rsync: failed to connect to 172.24.48.140: Connection refused (111)) errno(0) errstr(). err mcpd[5923]: 0107134b:3: ( ) errno(0) errstr(). err mcpd[5923]: 0107134b:3: (rsync error: error in socket IO (code 10) at clientserver.c(127) [receiver=3.0.6]) errno(0) errstr(). err mcpd[5923]: 0107134b:3: ( ) errno(0) errstr(). err mcpd[5923]: 0107134b:3: (syncer /usr/bin/rsync failed! (2560) () ) errno(0) errstr().

Impact

Configsyncs fail.

Conditions

two or more vCMP devices in a device cluster, configured to do configsyncs over the management interface with configsync.allowmanagement set to "enable" on the guests (but not the hosts).

Workaround

One of two things: - Do not use the management interface for configsyncs. - Set configsync.allowmanagement to "enable" on the host systems.

Fix Information

None

Behavior Change