For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

4 Replies

  • Hi,

     

    From my own experience, the migration works pretty well. Except in rare cases :

     

    • if you have HTTP CLASS configured with regex
    • if you have the root folder full (100%)

    I had no other issues regarding this type of migration.

     

    As far as I remember, you can reinstall the system in v11 and then upload your backup archive. There is an automatic process to convert v10 to v11 configuration files.

     

    BR

     

    Yann

     

  • i read something about licenses need to be upgraded.

     

    Also i have gtm and ltm. i assume ltm will run fine when on v11 when gtm still only on v10

     

  • Normally, you just have to re-activate your license before upgrading.

     

    Not aware about something else.

     

    BR

     

    Yann

     

  • Here's my list of recommendations;

     

    *Replace the matchclass Command in any iRules with the class match Command.

     

    *Remove any global variable references using :: (double colon) or $:: as these are unnecessary in v10 and not supported in v11.

     

    •Note that Class/Data Group configuration formatting has changed; you shouldn’t have to do anything but keep this in mind as a possible troubleshooting target.

     

    •Note that Node configuration formatting has changed; you shouldn’t have to do anything but keep this in mind as a possible troubleshooting target, it seems to be a common cause of issues.

     

    •Ensure all service and protocol specifications in your configuration files use a port number, not a service name.

     

    •Anything configured in an Administrative Partition that doesn’t have the path specified in the v10 configuration files, needs that path to be specified in v11; edit your files as necessary.

     

    •The parent id command becomes parent name in v11 and may prevent the configuration from loading post upgrade.

     

    •If upgrading from v10 to v11.2.1 see SOL14104.

     

    •If upgrading from v10 to v11.4 or v11.4.1 see SOL14832.

     

    •In v11.x ServerSSL profiles have a Secure Renegotiation value set to Require Strict. This may cause issues with Pool Members that do not support TLS Renegotiation Indication Extension. Should you find you encounter issues post-upgrade with server-side SSL connections failing, change this setting to Request.

     

    *HTTP Classes are replaced by Local Traffic Policies; you shouldn’t have to do anything but keep this in mind as a possible troubleshooting target.

     

    *iRule HTTP_CLASS_XXX events are replaced by POLICY commands; you should remove any rules using these events prior to the upgrade and then rewrite them accordingly and reapply them once the upgrade is complete.

     

    *Classes must be in the KVP format; without both a key and value the Class cannot be updated from the GUI. See SOL14671 for more information.