Migrating Config from TMOS 10.2.4 to 11.4, using SCF migration

Quick update:

Found out that 6400 can only run up to 11.0 :https://support.f5.com/kb/en-us/solutions/public/9000/400/sol9412.html

Will create a partition on the 6400 and perform upgrade to 11.0; Will create a partition on the 5050 and install 11.0; Take config from 6400 v11.0 and migrate to 5050 v11.0 Upgrade 5050 v11.0 to 11.4

If this works will provide a further update. I have a feeling there will be some work required on the iRules but will outline these too.

I think the 5050s support 11.4 upwards although it may be possible to install 11.0 on them. I had a similar problem when going from 6400s to Viprion. There are different approaches depending on the complexity of configuration and what modules you are running. For LTM/ASM I loaded it on VE and upgraded and them copied scf or bigip.conf portions that I needed...

cheers

So it seems like the only thing that I can do is to installed 10.2.4 VE perform the upgrade to 11.4 and the migrate the config from the VE to the 5000 series.

I keep getting the below syntax error:

Last login: Mon Aug 24 11:55:01 2015 from 10.128.1.1 [root@device1:Active] config bigpipe import /var/local/scf/Cap2.scf Saving configuration to /var/local/scf/.backup-0.scf. Reading configuration from /config/low_profile_base.conf. Reading configuration from /defaults/config_base.conf. Reading configuration from /usr/share/monitors/base_monitors.conf. Reading configuration from /config/profile_base.conf. Reading configuration from /config/daemon.conf. Reading configuration from /var/local/scf/Cap2.scf. Renaming /var/local/scf/.backup-0.scf to /var/local/scf/backup.scf. Loading the configuration ... BIGpipe interface creation error: 01070318:3: The requested media for interface 1.1 is invalid. [root@device1:Active] config

Below is the section related to the interfaces, from the .scf file:

interface 1.1 { media fixed 1000baseT full } interface 1.2 { media fixed 1000baseT full

} interface mgmt { media fixed 1000baseT full

I tried leaving these sections blank but got the same error.

Can someone help??

if I recall I deleted the interfaces...

from memory my basic process was as below, this may not work for all situations and if you are not comfortable at the cli I would seek F5 assistance;

1. build 11.x VE
2. take 10.2 UCS
3. load 10.2 UCS into VE (this will fail)
4. extracted files are now in /config/bigpipe
5. edit /config/bigpipe/bigip_base, remove interfaces, STP block, replace all int references with 1.1
6. run the following cmd

   /usr/libexec/bigpipe daol

7. fixup config errors and rerun
8. Assuming you have named the VLANs the same you can now import certs/keys and copy out ltm config stanzas that you need and import to your new box with

   load sys config from-terminal merge

The are some other bits you may also need to think about, e.g. license and master keys. It's not the most straightforward upgrade I've done but I haven't found an easy way to get it done with a scf or ucs when jumping from different platforms and major s/w revisions.

cheers

update:

In terms of modifying the scf file so far I have had to make the following manual changes:

• interfaces (modified)
• SSL certificates (CA) (deleted) - reason: there was 90+ certificates and they all had to be migrated and installed manually.
• all profiles relating to the certificates (deleted) - reason: there was 90+ certificates and they all had to be migrated and installed manually.
• fail-over / config-sync (deleted)

finally the config migration worked from 6400 to VE both running 10.2.4

Next stage is upgrading from 10.2.4 to 11.0 having a whole bunch of issues there with device and traffic groups which were new introductions. Once I've dealt with these i will post another update.

So far this has been the most time consuming upgrade....