Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

InquisitiveMai's avatar
InquisitiveMai
Icon for Cirrostratus rankCirrostratus
Apr 28, 2026

How to Verify config before loading to F5

I have edited .ucs file from old F5s and tried to load it on new F5s. The system went into Inoperative state and had to load the cfg that was configured before loading the edited config from old F5.When it was is inoperative, i ran tmsh looad sys ucs verify and it showed one of the line was not commented #

  1. How can we verify the file before loading to the config
  2. I have the new F5s up with HA and Syncfailover setup(GTM is not yet setup).  The management IP, HA selfIPs and VIPs are different on the new implementation. Is there a recommended way we can merge this config.
  3. Plan to have iquery established after the config is loaded. Is that okay?

2 Replies

  • Hello!

    To avoid issues when migrating configs, don’t load an edited UCS file directly onto new F5 hardware. Instead, extract and inspect the UCS, use tmsh load sys ucs verify to catch syntax errors, and manually rebuild base networking (management IPs, self‑IPs, HA VLANs) on the new devices. Then merge only the application objects (virtual servers, pools, profiles) using tmsh load sys config merge. This prevents inoperative states and ensures HA/Sync‑Failover stability. Establishing iQuery after the config load is fine, but only once GTM/DNS sync groups are properly set up.

    • LiefZimmerman's avatar
      LiefZimmerman
      Icon for Admin rankAdmin

      Hello Nicholas944Saul​ - your answer while thorough appears to be AI Assisted or AI Generated. Not labeling content that makes heavy use of AI in this community is a policy violation and may result in restrictive measures on your account. Please review the guidelines here: 

      https://community.f5.com/kb/devcentralnews/devcentral-community-guidelines/291537