Forum Discussion

Enrique_Breceda's avatar
Enrique_Breceda
Icon for Nimbostratus rankNimbostratus
Oct 10, 2022

Comparing two UCS backup files

Is there anyway to compare two ucs files? A customer did an upgrade without follow the software compatibility matrix, apparently everything worked ok until until I detected a high cpu consume. F5 sup...
application delivery
security
ucs
Mohamed_Salah_'s avatar
Mohamed_Salah_
Icon for MVP rankMVP
Oct 10, 2022

Hello,

What modules that might have change on the customer's enviornment?

If you have a BIG-IQ solution, i think this can be done on the CM. as per the below article, "You can compare BIG-IP UCS files of two different devices, or the same device. The device(s) can be running the same or different version of software. Comparing these files allows you to precisely pinpoint differences between configurations and other backup data files"

By default, BIG-IQ compares the following files in the UCS backup:

  • /config/ZebOS.conf
  • /config/bigip.conf
  • /config/bigip_base.conf
  • /config/bigip_gtm.conf
  • /config/bigip_local.conf
  • /config/bigip_user.conf
  • /config/user_alert.conf

    Reference: https://techdocs.f5.com/en-us/bigiq-7-1-0/managing-big-ip-devices-from-big-iq/backup-file-management.html

    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    If there is no BIG-IQ, you can check these files bigip.conf and bigip_base.conf manuallu for the system, network and LTM configuration.

    Regarding the ASM policies, unfortunately, "F5 does not support importing a security policy that was exported from a later software version. For example, it is not supported to attempt to export a security policy from a system running BIG-IP 12.0.0 and attempt to import that policy to a system running BIG-IP 11.2.1."

    https://support.f5.com/csp/article/K13905104