Forum Discussion
saidshow_251381
Dec 06, 2016Cirrostratus
iControlREST and Curl to save and download ASM policies
Hi,
I want to be able to save/export asm policies on the F5 and then download. I want to do this using iControlREST and curl.
I am able to save UCS files with the post shown below:
curl -v -sk...
Hannes_Rapp
Nimbostratus
1: Extract policy names and corresponding API IDs
hannes@ubuntuBash$ curl -ku 'admin:admin' -X GET https://172.16.99.91/mgmt/tm/asm/policies | jq '.items[] | "pol_name:" + .name + ";api_id:" + .id'
"pol_name:sp_fake.google.com;api_id:00TT7Lv-Yba2xcEZkjkc3A"
"pol_name:sp_fake.github.com;api_id:cswJ2oCNNqbfdWMVWdzoTw"
2: Export policies natively on the appliance
hannes@ubuntuBash$ curl -ku 'admin:admin' -X POST https://172.16.99.91/mgmt/tm/asm/tasks/export-policy -H 'Content-Type: application/json' -d '{"filename":"sp_fake.google.com.xml","policyReference":{"link":"https://localhost/mgmt/tm/asm/policies/00TT7Lv-Yba2xcEZkjkc3A"}}'
hannes@ubuntuBash$ curl -ku 'admin:admin' -X POST https://172.16.99.91/mgmt/tm/asm/tasks/export-policy -H 'Content-Type: application/json' -d '{"filename":"sp_fake.github.com.xml","policyReference":{"link":"https://localhost/mgmt/tm/asm/policies/cswJ2oCNNqbfdWMVWdzoTw"}}'
3: Exported policies can be found on BigIP at '/var/ts/var/rest'
[hannes@bip-01:Active:In-Sync] config ls /var/ts/var/rest
admin~sp_fake.github.com.xml admin~sp_fake.google.com.xml
4: Download the exports: Issue a cURL to that policy, save output as a local file in your external file system.
hannes@ubuntuBash$ curl -ku 'admin:admin' -X GET https://172.16.99.91/mgmt/tm/asm/file-transfer/downloads/sp_fake.google.com.xml >> sp_fake.google.com.xml
hannes@ubuntuBash$ curl -ku 'admin:admin' -X GET https://172.16.99.91/mgmt/tm/asm/file-transfer/downloads/sp_fake.github.com.xml >> sp_fake.github.com.xml
hannes@ubuntuBash$ ls
sp_fake.google.com.xml sp_fake.github.com.xml
Voila! Note that this was done on 12.1.1. I think all of the above will work on 11.6.x too. On 11.5.x the 4th step will fail (not implemented error).
saidshow_251381
Dec 06, 2016Cirrostratus
Hannes Thank you! This is far more detailed than I expected. Thank you for your efforts. I have already upgraded to Ver12.1.1 so this will just perfect. I'll give this a try as soon as time allows. This really is appreciated. Well Done.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects