Forum Discussion
Sri_Narasimha_05
Altocumulus
AltocumulusOne-Arm Mode Migration
Hi Experts, We're running F5 BIG-IP 2200 v15.1.2.1 (Build 0.0.10) appliances on HA and planning to migrate it to i2000 series (HA). Currently, the config is one-arm mode and we've been asked to do...
Sounds ok to me. Just check that the ARP is enabled on the virtual address of the VIP. By default it is, but to be sure please check.
In case you have issues make sure you check the arp table on the firewall and the vip ip is pointing to the right mac address. Probably it be good to check this before you migrate a vip , and record the mac address so you can compare it.
Sri_Narasimha_05 the UCS restore overrides all configuration of the new device when imported last I had to do one with the exception of validating various difference between platforms when you use the platform migrate. You might try a UCS restore on a virtual appliance first in a sandbox to see exactly what happens.
Sri_Narasimha_05Altocumulus
AltocumulusHi Mate,
Thanks for the reply. Beside this, I've a question on migration.
I don't have Ubuntu desktop for the F5 Journey tool to be installed and I'm planning to migrate via the UCS "platform-migrate" option.
Can you please assist me on the best practices to migrate from one applicances to the newer ones using the above said option. K82540512 mentions the steps but doesn't outline the F5's best practice (like how to compare the config). Thank you.
Paulius
MVP
MVPSri_Narasimha_05 Sadly I'm unfamiliar using the UCS platform-migrate option but if it's anything like the CLI UCS import ignore-platform command it ignores various interface specifics but imports the entire configuration provided the licenses are the same to support the imported configuration and doesn't allow you to change IPs in that process. You might consider using the SCF configuration file and doing a search replace for all the IPs in question and them importing with that.
- Sri_Narasimha_05
Hi Paul,
Many thanks for the reply. Sure, I'll look into the below proposed plan.
If I understand this statement correctly (doesn't allow you to change IPs in that process) , will F5 not allow to delete the floating IPs once the configuration is imported successfully? So, this will further provides us room to create the new floating IP. Please enlighten me.
- Paulius
You can definitely change the configuration after it has been imported but keep in mind that you should not have the new F5s plugged into the network at all when you do this or you will cause connectivity issues to the existing F5s. With the SCF configuration import and modifying the configuration before it is imported will not cause any connectivity issues at all to the existing F5 configuration assuming you did not forget to replace and IP that exists on the old F5s.
- Sri_Narasimha_05
Thanks so much for the valuable assistance provided.
I've been told that SCF file doesn't include the SSL certs. Sure, I'll look after the possibility of using SCF file as well.
Just a final query, if the 'platform'migrate' option is being used,
My intention is to connect the new pair of F5s on the New management IP and dedicated HA (and not connect the TMM interfaces). Once imported and verified, then connect the interfaces for data processing.
I hope you're referring to the below about TMM interfaces and not the Management interfaces, so the imported file doesn't override the existing management IP.
"but keep in mind that you should not have the new F5s plugged into the network at all when you do this or you will cause connectivity issues to the existing F5s"