For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Luca_Comes's avatar
Luca_Comes
Icon for Cirrus rankCirrus
Jun 07, 2019

Migration from virtual to hw appliance

Dear all, I'm managing an old BIG-IP VE cluster running release 12.1.1 and provisioned with LTM, ASM and APM. Now we have a new couple of BIG-IP i7600 running version 14.1.0.2 provisioned with LTM a...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Jun 07, 2019

    By the way, importing a UCS could be failing because of the master key. You should review logs to figure out what the problem is about.

    Using this command is also a good point. 

    # tmsh load sys ucs <filename> platform-migrate

    KR,

    Dario.

    • Luca_Comes's avatar
      Luca_Comes
      Icon for Cirrus rankCirrus
      Jun 10, 2019

      Hi Dario,

      apparently the problem isn't related to the master key but on the modules provisioned to the hardware. Underneath you can find the log from importing the ucs with the hardware running the same version of the VE:

       

      root@(localhost)(cfg-sync Standalone)(ForcedOffline)(/Common)(tmos)# load /sys ucs appf502_07062019_no_pass.ucs no-license platform-migrate 

      Replace all configuration on the system? (y/n) y

      Processing UCS file: /var/local/ucs/appf502_07062019_no_pass.ucs

       

      Installing full UCS (12.1.1) data, excluding license file.

      Saving active configuration...

      The hostname is set to appf502.master.local

      Extracting manifest: /var/local/ucs/appf502_07062019_no_pass.ucs

      Product : BIG-IP

      Platform: UCS  : Z100

           System: C118

      Version : 12.1.1

      Edition : Final

      Hostname: appf502.master.local

      Installing --full-- configuration on host appf502.master.local 

      Installing configuration...

      ERROR: Module am is invalid for platform-migrate mode. Only LTM and GTM are supported.

      ERROR: Module apm is invalid for platform-migrate mode. Only LTM and GTM are supported.

      Post-processing...

      usermod: no changes

      Error detected. Skipping final load.

      WARNING: There were one or more errors detected during installation.

           Check the error messages and take the proper actions if needed.

      ERROR: UCS installation failed.

      Operation aborted.

      Unexpected Error: UCS loading process failed.

    • Dario_Garrido's avatar
      Dario_Garrido
      Icon for Noctilucent rankNoctilucent
      Jun 10, 2019

      Hello Luca.

       

      It's important to check your logs to know what part of the process is failing

      # cat /var/log/ltm

       

      KR,

      Dario.

    • Luca_Comes's avatar
      Luca_Comes
      Icon for Cirrus rankCirrus
      Jun 10, 2019

      Hi Dario,

      I think the problem is here but I think there is no solution:

       

      Jun 10 09:43:59 appf504.master.local warning mcpd[11039]: 010712e9:4: dag.notifyswitch is not in BigDB.dat.

      Jun 10 09:43:59 appf504.master.local err mcpd[11039]: 01b9000f:3: This platform doesn't support DoS hardware capability, which is ne

      eded to disable this sys db variable.

      Jun 10 09:43:59 appf504.master.local err loaddb[1749]: 01080023:3: Error return while getting reply from mcpd: 0x1b9000f, 01b9000f:3

      : This platform doesn't support DoS hardware capability, which is needed to disable this sys db variable.