For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fcocquyt_104704's avatar
fcocquyt_104704
Icon for Nimbostratus rankNimbostratus
Sep 11, 2013

Best approach to merge 2 F5 configs ?

Hello all,   I was wondering what the best approach is for merging the config from a BIG-IP cluster to another BIG-IP cluster. Both clusters are running BIG-IP 10.2.1 Build 511.0 Hotfix HF3 The ...
deployment
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Sep 12, 2013

The /config/ssl/ directories contain the SSL private keys, certificate requests, certficate revocation lists and signed certificates.

 

Actually you will just need the private keys and certficates.

 

These are the objectes referenced in your clientssl and serverssl profiles.

 

In case you don´t use SSL termination on your current device, there is no need to export / import these files.

 

Btw, my answer refers to TMOS v9/v10. Since TMOS v11 these objects are located in the TMOS filestore.

 

If you´re actually not using so called external data groups, the /var/class/ directory will be empty.

 

Are you currently using so called exernal monitors (script based monitors)? In this case you would also need to look after the /usr/bin/monitors/ directory. I forgot to mention this part in my first reply.