Forum Discussion
How do you add/remove property via TMSH?
I'm having a hard time removing a property on /sys httpd, and also difficulty adding it on a F5 that is missing the property. Could anyone shine on some light on this matter? Thanks!
--- Example 1 (Create) --- [admin@f5-mgmt:Active:Standalone] ~ tmsh list /sys httpd sys httpd { } [admin@f5-mgmt:Active:Standalone] ~ tmsh modify /sys httpd ssl-protocol Syntax Error: "ssl-protocol" unknown property [admin@f5-mgmt:Active:Standalone] ~ tmsh create /sys httpd ssl-protocol Syntax Error: "httpd" unexpected argument
--- Example 2 (Delete) --- How could I remove the "ssl-ciphersuite" and "auth-pam-idle-timeout" property? The "delete" command causes syntax error on argument. See below.
[admin@f5-mgmt:Active] ~ tmsh list /sys httpd sys httpd { auth-pam-idle-timeout "some value" ssl-ciphersuite "some value" ssl-protocol "some value" } [admin@f5-mgmt:Active] ~ tmsh delete /sys httpd auth-pam-idle-timeout Syntax Error: "httpd" unexpected argument
3 Replies
- HankLiu_159320
Nimbostratus
See formatted version!
--- Example 1 (Create) ---
[admin@f5-mgmt:Active:Standalone] ~ tmsh list /sys httpd sys httpd { } [admin@f5-mgmt:Active:Standalone] ~ tmsh modify /sys httpd ssl-protocol Syntax Error: "ssl-protocol" unknown property [admin@f5-mgmt:Active:Standalone] ~ tmsh create /sys httpd ssl-protocol Syntax Error: "httpd" unexpected argument--- Example 2 (Delete) ---
[admin@f5-mgmt:Active] ~ tmsh list /sys httpd sys httpd { auth-pam-idle-timeout "some value" ssl-ciphersuite "some value" ssl-protocol "some value" } [admin@f5-mgmt:Active] ~ tmsh delete /sys httpd auth-pam-idle-timeout Syntax Error: "httpd" unexpected argument - StephanManthey
Nacreous
Hi HankLiu,
to modify the idle timeout for WebUI from CLI you can use the following:tmsh modify sys httpd auth-pam-idle-timeout 1800 tmsh save sys configTo modify protocol support for WebUI from CLI you can use the following:
tmsh modify sys httpd ssl-protocol "all -SSLv2 -SSLv3" tmsh save sys configWhat TMOS version are you on?
Thanks, Stephan - HankLiu_159320
Nimbostratus
Stephan, thank you so much for responding to my post!
I'm not quite sure how to check the TMOS. Could you assist?
As for the actual commands, I am able to modify any properties that already exist in the httpd {} object. However, I am not able to properly remove them. In the 1st example above, I'm actually trying to add the ssl-protocol to a empty httpd {} object. Modifying an existing property doesn't throw any errors for me.
Does that better illustrate the issue i'm experiencing? Thanks!
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com