For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Josh_Becigneul_'s avatar
Josh_Becigneul_
Icon for Nimbostratus rankNimbostratus
Oct 27, 2014

How to unset custom value on a resource?

Hi All,

Trying to work out how, via the REST API, I would unset a custom value on a resource, permitting the default profile's value to take effect.

Everything I've tried so far is not effective.

Set a custom value, in this case a cipher string:

f5unit.modify("/ltm/profile/client-ssl/~TEST~test1", {"ciphers": "!EXPORT:!DH:!MD5:!SSLv3:RSA+AES:RSA+3DES:!RSA+RC4:ECDHE+AES:ECDHE+3DES:ECDHE+RSA:@SPEED"})

Unset the value:

f5unit.modify("/ltm/profile/client-ssl/~TEST~test1", {"ciphers": None})

From the WebUI, this results in the "Cipher" custom checkbox being checked, but with no value.

How do i set a resource to inherit the default profile's value?

Thanks.

application delivery
iControlREST
LTM

6 Replies

  • kunjan_118660's avatar
    kunjan_118660
    Icon for Cumulonimbus rankCumulonimbus
    Oct 28, 2014

    Seems like there is no way to reset fully by using RestAPI. The closest I could do was

    f5unit.modify("/ltm/profile/client-ssl/~TEST~test1", {"ciphers": "DEFAULT"})

    Yes, still the check box is enabled. But I guess this is same as inherit from the parent profile.

    • JoshBecigneul's avatar
      JoshBecigneul
      Icon for MVP rankMVP
      Oct 29, 2014
      Thanks. Hopefully there is a way to do a reset but this will definitely work in the mean time.
    • someguy_126006's avatar
      someguy_126006
      Icon for Nimbostratus rankNimbostratus
      Oct 29, 2014
      I believe DEFAULT is a reserved word for ciphers which give you a list of LTM defaults rather from the profile which it inherits its defaults from. Seems we have the same question, but trying to administer differently. https://devcentral.f5.com/s/feed/0D51T00006j2iCuSAI
  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Oct 28, 2014

    Seems like there is no way to reset fully by using RestAPI. The closest I could do was

    f5unit.modify("/ltm/profile/client-ssl/~TEST~test1", {"ciphers": "DEFAULT"})

    Yes, still the check box is enabled. But I guess this is same as inherit from the parent profile.

    • JoshBecigneul's avatar
      JoshBecigneul
      Icon for MVP rankMVP
      Oct 29, 2014
      Thanks. Hopefully there is a way to do a reset but this will definitely work in the mean time.
    • someguy_126006's avatar
      someguy_126006
      Icon for Nimbostratus rankNimbostratus
      Oct 29, 2014
      I believe DEFAULT is a reserved word for ciphers which give you a list of LTM defaults rather from the profile which it inherits its defaults from. Seems we have the same question, but trying to administer differently. https://devcentral.f5.com/s/feed/0D51T00006j2iCuSAI