F5 Herculon SSL Orchestrator, Setup

Page: 42 / 58

The Self IP List screen opens.
7. Click Create .
A New Self IP screen opens where you can configure your new self IP.
8. In the Name field, type the self IP name (for example,
ha_self
).
9. In the IP Address field, type the IP address for the device.
10. In the Netmask field, type the netmask for the device.
11. From the VLAN/Tunnel list, select the VLAN name (
ha_vlan
).
12. Click Finished .
Configuring ConfigSync and failover IP addresses
Before creating the device group, you should configure the configuration synchronization (ConfigSync)
and Failover IP addresses for each BIG-IP
®
system in the device group. The ConfigSync address is the IP
address that the system uses when synchronizing configuration with peer devices, and the failover
address is the IP address that the system uses for network failover.
1. On the Main tab, click Device Management > Devices .
The Devices List screen opens.
2. Click your device in the device list.
The properties screen for the device opens.
3. Click ConfigSync .
The screen shows the ConfigSync Configuration area, with the local address of the device.
4. From the Local Address list, select the VLAN address (
ha_vlan
).
5. Click Update .
6. Click Failover Network , and then click Add .
The New Failover Unicast Address screen opens.
7. In the Address field, make sure that the VLAN address (
ha_vlan
) is present.
8. Click Repeat .
9. After the screen refreshes, from the Address list, select the Management Address.
Note: Connection Mirroring is not supported.
10. Click Finished .
The Failover Unicast Configuration area lists both the VLAN HA (
ha_vlan
) and Management
Address devices.
Adding a device to local trust domain
Any BIG-IP
®
devices that you intend to add to a device group must first be members of the same local
trust domain. When a BIG-IP device joins the local trust domain, it establishes a trust relationship with
peer BIG-IP devices that are members of the same trust domain. For example, if you are creating a device
group with two members, you must log in to one of the devices and join the other device to that system's
local trust domain. The devices can then exchange their device properties and device connectivity
information.
1. On the Main tab, click Device Management > Device Trust .
The Device Trust screen opens.
2. On the menu bar, click Device Trust Members to view peer and subordinate device settings.
The Device Trust Members screen opens.
3. Click Add .
The Device Trust screen opens, showing Retrieve Device Credentials (Step 1 of 3).
4. From the Device Type list, select Peer .
5. In the Device IP Address field, type the IP address of your device.
Setting up Herculon SSL Orchestrator in a High Availability Environment
42