Forum Discussion

Ram_Khakurel_75's avatar
Ram_Khakurel_75
Icon for Nimbostratus rankNimbostratus
Sep 10, 2012

Firepass to APM migration

hi Guys,

 

I am in the process of the Firepass to Big-Ip APM migration .Any of you guys who have done this before could u give best way to achieve this.

 

I have got the Firepass backup xml export but couldn;t find where to import these xml in APM .In our firepass we have around 8 mastergroup and 35 resource groups consiting of portal access,network access, application access,citirx,terminal server etc.

 

APM is quite diffrent then how firepass is configured.do i have to config apm one by one looking at firepass or is there easier way to migrate using xml backup.

 

cheers

 

Ram

 

BIG-IP Access Policy Manager (APM)
remote access
security

8 Replies

Sort By
  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Sep 10, 2012
    Hi Ram,

     

     

    I believe the XML report was added just to be able to "dump" your configuration of Firepass to help out with configuring APM. Because APM is so different (no master groups) you will need to setup you different authentication methods, different resource groups, etc and the build the Policy using the policy editor.

     

     

    Hope this helps...

     

     

    Seth
  • Ram_Khakurel_75's avatar
    Ram_Khakurel_75
    Icon for Nimbostratus rankNimbostratus
    Sep 10, 2012
    Hi Seth,

     

    Thanks for the information.Thats what I had thought.

     

    Another thing I want to ask you is,I upgraded the big-ip from version 11.1 to 11.2 ,HF2.When I boot from the partition with 11.2 the config doesnt get copies across.

     

    BIG-IP system fails to load a configuration into the new boot location.config is missing and says the box is not licensed.

     

    When i revert back to 11.1 partition its all fine.I want to do the upgrade before migration firepass.

     

    any idea?

     

    cheers

     

    Ram
  • Ram_Khakurel_75's avatar
    Ram_Khakurel_75
    Icon for Nimbostratus rankNimbostratus
    Sep 10, 2012
    Hi Seth,

     

    Thanks for the information.Thats what I had thought.

     

    Another thing I want to ask you is,I upgraded the big-ip from version 11.1 to 11.2 ,HF2.When I boot from the partition with 11.2 the config doesnt get copies across.

     

    BIG-IP system fails to load a configuration into the new boot location.config is missing and says the box is not licensed.

     

    When i revert back to 11.1 partition its all fine.I want to do the upgrade before migration firepass.

     

    any idea?

     

    cheers

     

    Ram
  • Ram_Khakurel_75's avatar
    Ram_Khakurel_75
    Icon for Nimbostratus rankNimbostratus
    Sep 10, 2012
    Hi Seth,

     

    Thanks for the information.Thats what I had thought.

     

    Another thing I want to ask you is,I upgraded the big-ip from version 11.1 to 11.2 ,HF2.When I boot from the partition with 11.2 the config doesnt get copies across.

     

    BIG-IP system fails to load a configuration into the new boot location.config is missing and says the box is not licensed.

     

    When i revert back to 11.1 partition its all fine.I want to do the upgrade before migration firepass.

     

    any idea?

     

    cheers

     

    Ram
  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Sep 11, 2012
    I'm not sure on that one... you should probably open a case with F5. You probably have a configuration item in 11.1 that 11.2 doesn't like. When you upgrade are you installing 11.2 in say HD1.3 and then applying HF-2 on HD1.3 then activating that partition? If so try to upgrade from 11.1 just to 11.2 the activate into that partition then apply HF-2 to say HD1.4 and then active that partition... see if that gives you better results.

     

     

    Seth