Forum Discussion
bsg273_163868
Oct 27, 2015Nimbostratus
Changing Virtual Server's Access Profile with TMSH w/o Knowing Its Current Value
I am trying to use tmsh to change the Access Profile that is assigned to a given virtual server without knowing its current value. In the f5 Console GUI this is straightforward. When you navigate t...
Brad_Parker
Oct 27, 2015Cirrus
You should be able to just use
modify ltm virtual MY_VIRTUAL_SERVER profiles replace-all-with {ACCESS_PROFILE_NEW}
- Brad_ParkerOct 27, 2015CirrusProbably best to list ltm virtual one-line first so you know all the other profile you have attached as well if you replace-all-with.
- bsg273_163868Oct 27, 2015NimbostratusOk so how would I preserve all those other profiles and just replace the Access Profile specifically?
- Brad_ParkerOct 27, 2015CirrusWell, you would have to put them all into the curlies with the new profile. Its actually probably much easier to "list ltm virtual VS_name profiles" to gather the list of profiles and just use your original add/delete tmsh since you are querying what the original profile was anyway.
- Walter_KacynskiOct 27, 2015CirrostratusThis isn't that easy because some of the profiles have dependencies on iRules and other configuration objects. I would suggest that you explicit remove the old one with a known name.
- bsg273_163868Oct 27, 2015NimbostratusI'm still not understanding how you propose to discover which profile is the Access Profile exactly. If I list out the profiles it gives me all profiles, not just Access Profiles. So if I were to get a list of all profiles, then replace them all with the new Access Profile, then add back all the original profiles, would I not still be adding back the original Access Profile in addition to the new one?
- bsg273_163868Oct 27, 2015Nimbostratus@Walter Kacynski So if the question instead were, "How do I get the value a Virtual Server's Access Profile property is set to?" would this just not be doable?
- Walter_KacynskiOct 27, 2015CirrostratusTry using a well structured naming convention. In my environment I name all of my Access profiles with "Access". Since you can only have one applied then when doing a list you know what is what.
- Brad_ParkerOct 27, 2015Cirrusgood reason for naming convention that help with this like _access or _ap when you create profiles and other objects.
- bsg273_163868Oct 27, 2015NimbostratusUnfortunately, I don't have control over the Access Profile naming conventions my tmsh scripts my encounter. If there's no easier way, I may just list out all the Access Profiles and compare them against profiles listed for the VS and delete any that match before doing my add.
Recent Discussions
Related Content
Â
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects