For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rjordan's avatar
rjordan
Icon for Nimbostratus rankNimbostratus
Mar 04, 2013

Migrating to new LB pair

About a year ago I migrated our LTM from an old 3400 pair to the 6900 pair. We were running 9.x on the 3400s and 10.x on the 6900s. I exported an SCF from the old pair and made a handful of changes b...
config
design
rjordan's avatar
rjordan
Icon for Nimbostratus rankNimbostratus
Apr 18, 2014

Version 10 isn't supported on the 4200v: Compatibility Matrix. I don't know if that means you can't run version 10 at all. I guess its worth a try.

 

Then use a test appliance like the 3600 or even a VE lab to run the upgrade. Export the config from the test appliance and import into the 4000s. I did the config imports by adjusting bigip.conf and bipip_base.conf files as this was more comfortable for me.

 

A couple things to look out for: 1. Configure management, device trust/HA on the 4000s pair. 2. When importing configs between different hardware, pay close attention to the stuff in bigip_base.conf. I had to tweak the interfaces, trunks and rip out the failover stuff before I could import into the lab appliance. 3. Once the lab device is upgraded to v11, you'll have to tweak the bigip_base.conf file again before importing into the 4000s. 4. When importing certificates, you should skip a few. I think I skipped the default, f5 and ca-bundle files.

 

opediggitty_692's avatar
opediggitty_692
Icon for Nimbostratus rankNimbostratus
Apr 18, 2014
This is why I went with the spare 3600 route (if you have one available or from your SE) in order to migrate your config to and upgrade it with the new version of software and let it upgrade the config in the process since it is in the family of devices (circa 2007-2011ish) that will run both 10.x and 11.x code no problem. The 1500's and 6400's that I am trying to upgrade can only run the 9.x or 10.x, save the 6400's which will actually let you install 11.1 but can go no further. This at least let's you get the 11.x code on the box to then be upgraded easier.