Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Preet_pk's avatar
Preet_pk
Icon for Cirrus rankCirrus
Feb 24, 2026

Pre & Post validation of F5 configuration

Hi,

I am planning to do a F5 vCMP Guest upgrade, just want to know before upgrade as part of pre validation of VS/Pool (Online & Offline status) & also a snap shot of the current configuration & after upgrade again to do post validation of VS/Pool (online/Offline Status) & to take a post upgrade snap shot for comparison to pre upgradation snapshot to make sure all are as per the same before & after the upgrade.

3 Replies

  • This can be a bit tricky to compare like to like because depending on what happens in the upgrade some default configuration can change, and some configuration options are added. I think your best bet is to have some solid testing for each virtual server on that vCMP guest. I'm sure something exists out there that would allow you to make a query and compare the two configs but I'm not aware of anything off the top of my head.

  • Back in the day I would massage the output of tmsh show ltm to give me a one line per object status of everthing as a snapshot right before the migration. Post the migration create the same snapshot and then use diff to compare. Shows you anything thats different between the two. There quite a few tools out their that can help you such as bigip report. This was my solution before those tools existed.

  • Hi, 

    1- Take a snapshot like this before Upgrade: 

    Statistics > Module Statistics > Local Traffic >> Status Summary. 

    2- After Upgrade , Open the same page and make sure that all Objects numbers ( VSs , Pools , Nodes )  are same as the first snapshot, and keep your eyes on the status as well and the numbers below it. 
    Note: in some case you may need to wait a while until big3d service to run to allow BIGIP to monitor ( pool members ) it should take a while After Upgrade. 

    Also you can verify these stats with the  Active unit ( Most properly you have HA Pair of Guests , you upgraded the Standby unit and before Failing over to the newly upgraded one you need to validate these stats between the older version device and the newly upgrade device.

    3- After Failover, you need to check if your newly upgraded device receives traffic accross its Virtual servers , you can validate this from this snapshot: 

     



    After failover you must see hits ( Bits, Packets, Connections, Requests ............ ) 

    If you didn't see any stats here, failback quickly >>> Don't wait ( there is an issue in traffic forwarding between the upstream Switch and your HA pair "GARP issues , Connectivities , Interfaces, SFPs .....etc " ) 


    These are the most crusial pre/post checks for stats after Upgrade or Rebooting BIGIP Devices ...