Bug ID 997313: Unable to create APM policies in a sync-only folder

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP APM, Install/Upgrade(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1

Fixed In:
17.0.0, 16.1.2, 15.1.4.1

Opened: Feb 24, 2021

Severity: 2-Critical

Symptoms

Unable to configure an APM policy in a sync-only folder, or the configuration fails to load after an upgrade, with an error message similar to: -- err mcpd[mcpd_pid]: 01070734:3: Configuration error: Invalid Devicegroup Reference. The customization_group (/Common/sync-only/example_apm_customization) requires customization_source (/Common/standard) to be syncd to the same devices

Impact

-- Unable to create the access policy. -- The configuration fails to load and the device remains inoperative.

Conditions

-- Multiple BIG-IP devices configured in a sync-only device group, but different/non-overlapping failover device groups -- APM policy being created in a folder or partition associated with sync-only device group.

Workaround

You can use either of the following strategies to prevent the issue: --Do not create APM policies in a sync-only folder. --Disable MCPD device-group reference validation for the sync-only folder, e.g.: tmsh modify sys folder /Common/sync-only no-ref-check true tmsh save sys config

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips