CSM with Veritas HA geographic redundancy fails over without visible reason

Hello.
Cisco Security Manager shuts down and Veritas fails it over to another site, I have no idea why. It is clean installation without elements.
In Veritas engine log I found this:
2013/02/06 12:52:22 VCS INFO V-16-2-13001 (KV-CSM-01-1) Resource(APP_CSManager): Output of the completed operation (monitor) 60012-202: The following process is not running     Process= NameServer     State  = Administrator has shut down this server     Pid    = 0     RC     = 143     Signo  = 0     Start  = 2/6/2013 12:35:58 PM     Stop   = 2/6/2013 12:52:05 PM     Core   = Not applicable     Info   = Server started by admin request
Veritas CSM resource log:
2013/02/06 12:52:22 VCS ERROR V-16-2-13067 Thread(3916) Agent is calling clean for resource(APP_CSManager) because the resource became OFFLINE unexpectedly, on its own.
CSM syslog:
Feb 06 12:52:08 127.0.0.1 100: <30>   dmgt[9004]: 3021(I):Died method called for process (NameServer, pid=9700).Feb 06 12:52:08 127.0.0.1 100: <30>   dmgt[9004]: 3021(I):Died method called for process (EDS, pid=8444).
Eds.log is attached.
NameServer.log is empty.
As we can see from monitor.pl (csm agent script), EDS and NameServer are critical processes to run CSM.
What I should do to prevent such behaviour?

Similar Messages

  • VPN device with dual ISP, fail-over, and load balancing

    We currently service a client that has a PIX firewall that connects to multiple, separate outside vendors via IPSEC VPN. The VPN connections are mission critical and if for any reason the VPN device or the internet connection (currently only a T1) goes down, the business goes down too. We're looking for a solution that allows dual-ISP, failover, and load balancing. I see that there are several ASA models as well as the IOS that support this but what I'm confused about is what are the requirements for the other end of the VPN, keeping in mind that the other end will always be an outside vendor and out of our control. Current VPN endpoints for outside vendors are to devices like VPN 3000 Concentrator, Sonicwall, etc. that likely do not support any type of fail-over, trunking, load-balancing. Is this just not possible?

    Unless I am mistaken the ASA doesn't do VPN Load Balancing for point-to-point IPSec connections either. What you're really after is opportunistic connection failover, and/or something like DMVPN. Coordinating opportunistic failover shouldn't be too much of an issue with the partners, but be prepared for lot of questions.

  • Fail over possible for 9i db, using Veritas VCS bet 32bit and 64 bit

    Folks,
    We are planning to use 9i R2 (9.2.0.2.0) on
    Sun Solaris, using Veritas VCS .
    Can we have one OS as Solaris 32 bit and
    the fail over box as Solaris 64 bit.
    Thanks
    Ashish

    Follow up question -
    I am able to successfully fail over the ABAP portion of the ABAP+J2EE environment we have.  This is done by altering the profile parameters in the DEFAULT profile to reflect the cluster alias rather than the actual host name.
    But in the confitool of the J2EE, there are some fields that have the actual hostname hardcoded.  These are in the DB, so they are host independent:
    Global Disp. config>managers>ClusterManger:
    ms.host = <host>
    Global Disp. config>managers>LockingManger:
    enq.profile.filename = /usr/sap/<SID>/SYS/profile/<SID>_DVEBMGS##_host
    enqu.host = <host>
    Global Server Config>managers>Cluster Manager:
    ms.host = <host>
    Global Server Config>managers>Locking Manager:
    enq.profile.filename = /usr/sap/<SID>/SYS/profile/<SID>_DVEBMGS##_host
    enqu.host = <host>
    I suspect I can change the physical host names to the alias, but how can the J2EE know which profile to look at based on what physical host it's running on?  ABAP knows by just reading the profile that has the real host name in it.

  • TES v6.1 want to install a Win Tidal Agent on a Cluster Resource with Fail Over... help

    I am working with my Window Admins and they want to know how to install the Win Tidal Agent on a Cluster Resource with Fail Over.  Currently running Tidal Master (UNIX) v6.1.0.483
    Thanks,
    Rich

    Please refer to the Agent Installation and Configuration guide.pdf from Cisco. The steps to configure the agents in a cluster have been explained in section Configuring the Agents for a Cluster

  • I just bought v10.7lion but when I try to install it comes with this error message:"Install Failed"...try to install again. Now I've been restarting over and over again.  What should I do?

    I just bought v10.7lion but when I try to install it comes with this error message:"Install Failed"...try to install again. Now I've been restarting over and over again.  What should I do?

    JPPI-
    Did you try it with the iTunes your Mac already has?
    Try running Software Update in your System Preferences.  That should bring your computer up to the latest software available for 10.4.  You would end up with an older version of iTunes, but that may be good enough to activate your iPad.
    Fred

  • Help With Fail Over

    I have been playing around with Directory Server fail over with IMS 5.2 however its not working too well, so far I have:
    configured local.ugldaphost to ldap-a ldap-b
    No problem there, on ldap server a (Master) I have setup replication of the following:
    dc=domain,dc=blah,dc=blah
    o=internet
    Using this method I get "Can't connect to LDAP server" once I have logged in to IMS 5.2 web mail, trying to access my folders (which work) and personal address book (which doesnt), looking at the logs for HTTP it states:
    [04/Sep/2003:10:33:49 +0100] ice httpd[2724]: General Debug: ldappool::new_conn failed: Can't connect to the LDAP server Connection refused
    [04/Sep/2003:10:33:49 +0100] ice httpd[2724]: General Debug: ldappool::access_pool_get 0/0 valid connections
    [04/Sep/2003:10:33:49 +0100] ice httpd[2724]: General Debug: PAB_Search() error: Can't connect to the LDAP server
    [04/Sep/2003:10:33:49 +0100] ice httpd[2724]: General Error: Cannot search address book at ou=user, ou=people, o=internet,dc=domain,dc=BLAH,dc=BLAH,o=pab: Can't connect to the LDAP server
    Do I also need to replicate:
    o=NetscapeRoot
    o=pab
    I have tried replicating simply o=NetscapeRoot and I could no longer login as admin into the directory server console on the REPLICA (ldap-b).
    Can anybody help me out?

    Hi,
    To successfully have a 'low cost' failover iDS5/iMS5 scenerio, you need to do
    a number of things. Or if you have a wad of cash use Vertias cluster
    (HA iplanet agents), etc. Directory server proxies (iDAR) :(
    Currently I'm using a 'low cost' failover technique.
    None of what I'm about to describe is in the SunONE doco. for iMS.
    I have tested this in the Lab, all works, it's now in production.
    Before you do anything, test in the lab first, so you feel comfortable with
    the setups.
    OK my scenerio.
    Primary LDAP = ldap-a
    Secondary LDAP = ldap-b
    Mailserver = mta1
    iDS5 = iDS5.1p1
    iMS5 = iMS5.2p1
    1. Install iDS5 on ldap-a. Acts a User dir. and Config dir. server.
    2. Prep. ldap-a for iMS5 install (run ims_dssetup.pl).
         - YES to schema files/indices
    3. Install iMS5 on mta1, using ldap-a as User and Config dir. server.
         - I have iMS5 configured in Direct LDAP mode.
    4. Install iDS5 on ldap-b, use ldap-b as User and ldap-a as Config dir. server.
         - No need populate the User tree on ldap-b (ie. example users from install)
         - MUST USE ldap-a as config server, as you will be replicating this tree.
    if not you will not be able to access the admin server, as you stated.
    5. Also run ims_dssetup.pl on ldap-b.
         - YES to schema files/indices
    6. Setup multi-master replication between ldap-a and ldap-b.
         - See Admin Guide, have a good read, needs correct setup !
         - This allows read/write, thus seamless to email user for password
         changing, PAB writes...if LDAP has failed over.
         - Replicate all suffices
              o=isp           (User dir.)
              o=internet      (DC tree)
              o=pab          (PAB tree)
              o=NetscapeRoot     (Config. dir)
         - Init consumer(ldap-b) from ldap-a for all suffices.
    Note: Only problem with multi-master is uniqueness plugins, (if using)
    it's no problem aslong as you use ldap-a as master. See iDS Admin guide.
    7. Now ldap-b requires a change to allow iMS5 to allow writes to o=NetscapeRoot
    in the event of failover. Otherwise the error message "ldap server unavailable,
    no configuration server, using locally cached values...whatever blah blah !
    Managing Console Fail Over
    If you have a multi-master installation with o=NetscapeRoot replicated
    between your two masters, ldap-a and ldap-b, you can modify the console
    on the second server (ldap-b) so that it uses ldap-b's instance instead
    of ldap-a's. (By default, writes with ldap-b's console would be made to
    ldap-a then replicated over.)
    To accomplish this, you must:
    Shut down the Administration Server and Directory Server.
    Change these files to reflect ldap-b's values:
    'serverRoot'/userdb/dbswitch.conf:
    directory default ldap://ldap-b:389/o%3DNetscapeRoot
    'serverRoot'/admin-serv/config/adm.conf:
    ldapHost: ldap-b
    ldapPort: 389
    'serverRoot'/shared/config/dbswitch.conf:
    directory default ldap://ldap-b:389/o%3DNetscapeRoot
    'serverRoot'/slapd-serverID/config/dse.ldif:
    nsslapd-pluginarg0: ldap://ldap-b:389/o%3DnetscapeRoot
    Note: assuming your LDAP TCP port is 389
    Turn off the pass through authentication (PTA) plug-in on ldap-b by editing
    its dse.ldif file.
    In a text editor, open the 'serverRoot'/slapd-serverID/config/dse.ldif file.
    Locate the entry for the the PTA plug-in:
    dn: cn=Pass Through Authentication,cn=plugins,cn=config
    Change nsslapd-pluginEnabled: on to nsslapd-pluginEnabled: off.
    Restart the Directory Server and Administration Server.
    8. Now on mta1, using configutil, set options to these values
    **a. local.ldaphost = "ldap-a ldap-b"
              - Required to use both servers as Config dir. servers,
    in the event of failover, config. is taken from ldap-b.
         b. local.ugldaphost = "ldap-a ldap-b"
              - Required to use both servers for User dir. lookups in event of
    failover.
    c. local.service.pab = "ldap-a ldap-b"
    - Required to use both servers for PAB lookup/additions in the event
    of failover.
         ** To make config dir. failover, shutdown Admin server. and change,
    'serverroot'/shared/config/dbswith.conf:
    directory default ldap://ldap-a ldap-b:389/o%3DNetscapeRoot
         Restart Admin server.     
    OK that's all there is too it.
    Now test everything, failover LDAP, test logins for email POP/Webmail, IMAP if used.
    Test email connections (ie. inbound/outbound email conns)
    Note:
    Whatever LDAP server fails, iMS5 will continue to use other LDAP server, even when
    failed LDAP server comes online. Either stop/start iDS5 on current LDAP server or
    stop/start iMS5.
    .....Well it worked for me !
    Good luck ;)

  • Problems with LDAP Server fail-over

    Our Xsan installed with 12 FCP, 2 MDC Xserve and 2 LDAP Xserver for fail-over.
    The 2 MDC fail-over runs well but the 2 LDAP fail-over got problems.
    The first time we up-plug the powercode of 1 xserve and the other LDAP takes over successfully but FCP users re-login takes 15 minutes. That's unacceptable.
    The fail-over never succeed after that.
    That means once the LDAP down and the backup LDAP will not take the job, we will lose everything related to user login.
    Anybody can help? Thanks a lot.

    I believe you can enter both LDAP servers in the client configuration for LDAP access. (Even though you shouldn't have to)
    IP failover is not the issue, your LDAP configuration is.
    Start at page 90 and work throught this document to make sure you have the clients setup properly.
    http://manuals.info.apple.com/en/MacOSXSrvr10.3_OpenDirectoryAdmin.pdf

  • RAC using SUN Geo Clusters with Fail over

    Hi ,
    My customer is in the process of investigating and deploying Sun GeoClusters to fail over a RAC from one location to another, the distance between the primary and fail over site is 1200km, they are going to use TrueCopy to replicate the storage across the sites.
    I am in the process of gathering information and need to find out more detail and if any one has any knowledge of this software.If anybody knows about the clients who are using(some urls) the same please let me know.
    Regards
    Manoj

    TrueCopy is a way of replicating storage offsite. RAC works using a single source for the database. That means that RAC can not be used simultaneously at both locations with the files being used locally.
    If my memory serves me well, Hitachi TrueCopy was OSCP (oracle storage compatiblity program) certified, but the OSCP program seems to be discontinued per januari 2007 (see http://www.oracle.com/technology/deploy/availability/htdocs/oscp.html)
    That means that you can use TrueCopy to replicate the storage layer to another location (according to the OSCP note), and use the replicated storage to startup the RAC database in case of failover.

  • How Front End pool deals with fail over to keep user state?

         Hello to all, I searched a lot of articles to understand how Lync 2010 keeps user state if a fail happens in a Front Pool node, but didn't find anything clear.
         I found a MS info. about ths topic : " The Front End Servers maintain transient information—such as logged-on state and control information for an IM, Web, or audio/video (A/V) conference—only for the duration of a user’s session.
    This configuration
    is an advantage because in the event of a Front End Server failure, the clients connected to that server can quickly reconnect to another Front End Server that belongs to the same Front End pool. "
        As I read, the client uses DNS to reconnect to another Front End in the pool. When it reconnects to an available server, does he lose what he/she was doing at Lync client? Can the server that is now hosting his section recover all
    "user's session data"? Is positive, how?
       Regards, EEOC.

    The presence information and other dynamic user data is stored in the RTCDYN database on the backend SQL database in a 2010 pool:
    http://blog.insidelync.com/2011/04/the-lync-server-databases/  If you fail over to another pool member, this pool member has access to the same data.
    Ongoing conversations and the like are cached at the workstation.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications

  • 3 node cluster with 1 vInstance. vInstance can not to fail-over to one specific node.

    I have a 3 node cluster all running Windows Server 2008 R2. Roughly once a month I see my vInstance become degraded and attempt to fail-over. Everything is good as long as it fail-over to SQL01 or SQL02. However if it attempts to fail-over to SQL03, it does
    not come online
    Quick resolution is to move it manually to SQL01 or SQL02. What could be causing it to fail every time on SQL03.
    A couple points:
    I did not build the environment.
    I am not a DBA.
    I only have general knowledge of SQL clustering.
    I always get two EVENT ID's: 1069
    Cluster resource 'SQL Server (VSQL04)' in clustered service or application 'SQL Server (VSQL04)' failed.
    and then
    EVENT ID 1205
    The Cluster service failed to bring clustered service or application 'SQL Server (VSQL04)' completely online or offline. One or more resources may be in a failed state. This may impact the availability of the clustered service or application.
    Where should I begin to look for issues?

    Here is the cluster event prior to offline state. I will have to go check the cluster log.
    The Cluster service failed to bring clustered service or application 'SQL Server (VSQL04)' completely online or offline. One or more resources may be in a failed state. This may impact the availability of the clustered service or application.
    i do not think this helps.. it just says..a resource in offline state.. you need to dig more and see which one it is and why it did not come banck on ..it should be mentioned in the log and\or event viewer.
    Hope it Helps!!

  • Problems with Oracle FailSafe - Primary node not failing over the DB to the

    I am using 11.1.0.7 on Windows 64 bit OS, two nodes clustered at OS level. The Cluster is working fine at Windows level and the shared drive fails over. However, the database does not failover when the primary node is shutdown or restarted.
    The Oracle software is on local drive on each box. The Oracle DB files and Logs are on shared drive.

    Is the database listed in your cluster group that you are failing over?

  • GSLB Zone-Based DNS Payment Gw - Config Active-Active: Not Failing Over

    Hello All:
    Currently having a bit of a problem, have exhausted all resources and brain power dwindling.
    Brief:
    Two geographically diverse sites. Different AS's, different front ends. Migrated from one site with two CSS 11506's to two sites with one 11506 each.
    Flow of connection is as follows:
    Client --> FW Public Destination NAT --> CSS Private content VIP/destination NAT --> server/service --> CSS Source VIP/NAT --> FW Public Source NAT --> client.
    Using Load Balancers as DNS servers, authoritative for zones due to the requirement for second level Domain DNS load balancing (i.e xxxx.com, AND FQDNs http://www.xxxx.com). Thus, CSS is configured to respond as authoritative for xxxx.com, http://www.xxxx.com, postxx.xxxx.com, tmx.xxxx.com, etc..., but of course cannot do MX records, so is also configured with dns-forwarders which consequently were the original DNS servers for the domains. Those DNS servers have had their zone files changed to reflect that the new DNS servers are in fact the CSS'. Domain records (i.e. NS records in the zone file), and the records at the registrar (i.e. tucows, which I believe resells .com, .net and .org for netsol) have been changed to reflect the same. That part of the equation has already been tested and is true to DNS Workings. The reason for the forwarders is of course for things such as non load balanced Domain Names, as well as MX records, etc...
    Due to design, which unfortunately cannot be changed, dns-record configuration uses kal-ap, example:
    dns-record a http://www.xxxx.com 0 111.222.333.444 multiple kal-ap 10.xx.1.xx 254 sticky-enabled weightedrr 10
    So, to explain so we're absolutely clear:
    - 111.222.333.444 is the public address returned to the client.
    - multiple is configured so we return both site addresses for redundancy (unless I'm misunderstanding that configuration option)
    - kal-ap and the 10.xx.1.xx address because due to the configuration we have no other way of knowing the content rule/service is down and to stop advertising the address for said server/rule
    - sticky-enabled because we don't want to lose a payment and have it go through twice or something crazy like that
    - weighterr 10 (and on the other side weightedrr 1) because we want to keep most of the traffic on the site that is closer to where the bulk of the clients are
    So, now, the problem becomes, that the clients (i.e. something like an interac machine, RFID tags...) need to be able to fail over almost instantly to either of the sites should one lose connectivity and/or servers/services. However, this does not happen. The CSS changes it's advertisement, and this has been confirmed by running "nslookups/digs" directly against the CSSs... however, the client does not recognize this and ends up returning a "DNS Error/Page not found".
    Thinking this may have something to do with the "sticky-enabled" and/or the fact that DNS doesn't necessarily react very well to a TTL of "0".
    Any thoughts... comments... suggestions... experiences???
    Much appreciated in advance for any responses!!!
    Oh... should probably add:
    nslookups to some DNS servers consistently - ALWAYS the same ones - take 3 lookups before getting a reply. Other DNS servers are instant....
    Cheers,
    Ben Shellrude
    Sr. Network Analyst
    MTS AllStream Inc

    Hi Ben,
    if I got your posting right the CSSes are doing their job and do advertise the correct IP for a DNS-query right?
    If some of your clients are having a problem this might be related to DNS-caching. Some clients are caching the DNS-response and do not do a refresh until they fail or this timeout is gone.
    Even worse if the request fails you sometimes have to reset the clients DNS-demon so that they are requesting IP-addresses from scratch. I had this issue with some Unixboxes. If I remeber it corretly you can configure the DNS behaviour for unix boxes and can forbidd them to cache DNS responsed.
    Kind Regards,
    joerg

  • After adding 2nd WiSM and failing over AP's some apps don't work

    We have a dual core made up of 2 6513's. In 6513#1 we have WiSM#1 which we have had for sometime now. We have added a 2nd WiSM in 6513#2 for redundancy purposes also we are going to be re-configuring the WiSM in 6513#1 to more match that of the new WiSM in 6513#2. We have installed the new WiSM and failed over the AP's from 6513#1 so we can re-configure it's WiSM. The failover went great and no issues, with the exception that a web application or two didn't function from wireless clients and users were having issues getting to some mapped drives. The only difference from the new WiSM config vs the old WiSM is that on the old WiSM the AP's were in the same VLAN as the controller management interfaces. Now with the new WiSM it's configuration has the controllers AP mgt interfaces ip addresses in a different VLAN from the AP's, we are doing this based on Cisco best practices. If we revert the AP's back to the original WiSM/controllers the PC's where they are on the same vlan/subnet the applications and shares that were having issues the other way work. We have placed a call with Cisco TAC and they say our configs look good and we even sent them some packet captures and they said everything looks normal. The wireless clients can ping and resolve the server hosting the application database just fine.
    Thanks

    We did create the mobility groups, and we are using DHCP opt 43. The AP's find the 2nd WiSM#2 just fine and associate to the controllers and all the WLAN's work just fine. The only issue is that after the AP's are on the new WiSM and controllers there is an application or 2 that is having trouble locating it's database server and that some share's are not working. Again the only difference in this new setup in that now the AP's are on a different subnet/vlan from the controller mgt addresses where as before they were in the same subnet/vlan and the application and shares worked fine. It's almost like it is a bit of a routing issue?
    Thanks

  • Two wistnesses in a SQL Server fail over group

    Is it possible to have two witnesses in a SQL Server Always on Availability Group Fail Over Cluster? Our goal is to have redundant witnesses in an Azure availability set.
    Thanks,
    Mike

    AlwaysOn uses Windows Failover Clustering for quorum.  See, eg Understanding Quorum Configurations in a Failover Cluster
    You can do this, but with Dynamic Quorum it's probably not helpful.  If you loose your witness vote, the cluster will adjust the quorum requirements.
    David
    David http://blogs.msdn.com/b/dbrowne/

  • How to 'fail-over' CSS11503-AC when ALL 5 Reals Servers (Services) die

    Hi all,
    Could anyone out there possibly provide an idea/config, of how it is possible to'fail-over' a CSS11503 set-up in Active/Standby mode with "ASR" enabled when:-
    - ALL your real servers(Services) for a particular VIP 'die'/OR nic is faulty.
    - So NOT just 1 of the real servers, but when ALL 5 are not reachable, I need to 'failover'
    My initial thought are to use the "critical reporter" or "critical service" to report back to the 'active' CSS.
    Anyone who has done this scenario before , please advise..
    thanks

    Thanks very much Syed fo rthis.I was thiking that no-one could answer this query.
    After a little tsting, I set the following config in the lab and it works but is different to yours. I cannot seem to configure the servive as "type local". When I input 'type ?; I get options such as nci-direct-return, nci-info-only, proxy-cache, redirect etc...etc..NO 'local'...!!
    Please advise..Thanks in advance
    ************************* INTERFACE ************************* interface 1/1 bridge vlan 800 phy 1Gbits-FD-no-pause
    nterface 1/2
    phy 1Gbits-FD-no-pause
    bridge vlan 20
    nterface Ethernet-Mgmt
    description "Management Interface"
    nterface 2/1
    description "1st ASR Link"
    isc-port-one
    nterface 2/3
    description "2nd ASR Link"
    isc-port-two
    ************************** CIRCUIT ************************** circuit VLAN800
    description "FE_CORE"
    ip address 192.168.83.249 255.255.255.0
    ip virtual-router 1 priority 110
    ip redundant-vip 1 192.168.83.148
    ip redundant-vip 1 192.168.83.158
    ip critical-service 1 DTSFE01
    ip critical-service 1 DTSFE02
    ip critical-service 1 DTSFE03
    ip critical-service 1 DTSFE04
    ip critical-service 1 DTSFE05
    ip critical-reporter 1 Physical_if_DWN
    ip critical-reporter 1 r1
    ircuit VLAN20
    description "LBAL"
    ip address 192.168.20.1 255.255.255.0
    ip virtual-router 2 priority 110
    ip redundant-interface 2 192.168.20.3
    ip critical-service 2 DTSFE01
    ip critical-service 2 DTSFE02
    ip critical-service 2 DTSFE03
    ip critical-service 2 DTSFE04
    ip critical-service 2 DTSFE05
    ip critical-reporter 2 Physical_if_DWN
    ip critical-reporter 2 r1
    ************************** REPORTER **************************
    reporter Physical_if_DWN
    type critical-phy-all-up
    phy 1/1
    phy 1/2
    active
    reporter r1
    type vrid-peering
    vrid 192.168.83.249 1
    vrid 192.168.20.1 2
    active
    ************************** SERVICE **************************
    service FE01
    ip address 192.168.20.183
    keepalive frequency 2
    keepalive retryperiod 2
    keepalive maxfailure 2
    redundant-index 4
    service FE02
    ip address 192.168.20.184
    keepalive frequency 2
    keepalive retryperiod 2
    keepalive maxfailure 2
    redundant-index 5
    service FE03
    ip address 192.168.20.185
    keepalive frequency 2
    keepalive retryperiod 2
    keepalive maxfailure 2
    redundant-index 6
    service FE04
    ip address 192.168.20.186
    keepalive frequency 2
    keepalive retryperiod 2
    keepalive maxfailure 2
    redundant-index 7
    service NWFE02
    ip address 192.168.20.204
    keepalive frequency 2
    keepalive retryperiod 2
    keepalive maxfailure 2
    redundant-index 10
    active
    !*************************** OWNER *************************** owner SERVICES
    content DTS_192.168.83.148_443
    add service DTSFE01
    add service DTSFE02
    add service DTSFE03
    add service DTSFE04
    add service DTSFE05
    vip address 192.168.83.148
    port 443
    protocol tcp
    advanced-balance sticky-srcip
    redundant-index 1
    sticky-inact-timeout 5
    owner NW_SERVICES
    content NWCS_192.168.83.158_443
    add service NWCSFE01
    add service NWCSFE02
    vip address 192.168.83.158
    protocol tcp
    port 443
    sticky-inact-timeout 5
    redundant-index 2
    advanced-balance sticky-srcip
    active

Maybe you are looking for