For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vigneshkumar_22's avatar
vigneshkumar_22
Icon for Nimbostratus rankNimbostratus
Sep 18, 2015

how to take config backup through cli - guest account

We are using a external product for configuration management. I have discovered all the F5 devices LC / LTM on to the tool. And the tool uses SSH to get the configuration from the F5.

 

But now we can provide guest access to the user ID that is going to SSH into F5 devices. My question is, is there any command that will give information of "/config/bigip.conf".

 

I tried command " list all-properties"which is giving all the configuration detail with guest account, but I have to hit space bar every time to get complete output. The tool does not have capability to provide space bar.

 

Can someone suggest a command that can be used via cli with guest account to get configuration details..

 

user@(hqprodf5lc01)(cfg-sync In Sync)(Active)(/Common)(tmos) list all-properties

 

6 Replies

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Sep 18, 2015

    Run this command while logged into tmsh as the guest user:

    modify /cli preference pager disabled

    This will stop the paging of the list command output and dump the entire config at once.

    • vigneshkumar_22's avatar
      vigneshkumar_22
      Icon for Nimbostratus rankNimbostratus
      Sep 24, 2015
      Scott, With Guest account - is there a command to take F5 config file alone. Base config
  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Sep 24, 2015

    I am not sure what you mean. Do you want to view the config found in the bigip_base.conf or bigip.conf files?

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Sep 24, 2015

    When the config is loaded into memory all the files are merged into the "running config". This is what tmsh is displaying when using the list command so there is no command to view the individual files (without having bash shell access which a guest account does not have).

    However, you can list config by the tmsh modules. Bigip.conf and bigip_base.config contain config from these tmsh modules: cli, cm, ltm, net, sys. Try these tmsh commands they will probably give you what you need: 
    list ltm  
list net  
list sys
list cm
list cli