Bug ID 638838: Dynamic Signatures are not copied to peers in a device group

Last Modified: May 01, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
13.0.0, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5

Fixed In:
13.0.0 HF1

Opened: Jan 12, 2017
Severity: 2-Critical

Symptoms

During a failover event, a newly active BIG-IP will generate its own Dynamic Signatures rather than use a copy of the previous Active unit's signatures.

Impact

During failover events, there will be a lag of a few seconds while the Dynamic Signatures are generated and collated.

Conditions

HA configuration with Dynamic Signatures enabled.

Workaround

1. Use the following command to verify that the device-group is set to none: list sys folder dos-common 2. If it is, you can associate dos-common to device group dos-global-dg using the following command: tmsh modify sys folder dos-common/ device-group dos-global-dg 3. Save the config using the following command: tmsh save sys config

Fix Information

The system now explicitly adds folder and device group association, so the issue no longer occurs.

Behavior Change