Forum Discussion
TMSH - Configuration merging for APM access-policy
I do a lot of configuration merging from the CLI when I want to update our devices, as our environment is complicated and manually modifying and merging some configurations are immensely faster than the GUI. My questions is regarding merging configuration for anything under the
apm policy access-policy module/components. I can merge configs for anything LTM, and most APM stuff, but with access-policy configs, I get "The access policy ([name]) cannot have an item ([item name]) with a rule's next item ([item name]) pointing to an item which belongs to another access policy" since I'm merging new policy items.
So my question is whether there's a way to create/update access policies using configuration files loaded (merged) through the CLI. This would be as opposed to using the export/import method for policies, since we have two devices (that we try to keep in sync, though not in an HA pair, so syncing is manual), and changes to one access policy need to be reflected on the other device (and I wanted a lazier way to sync those changes).
Anyone have any thoughts or experience with this? Or is there a better way to sync configuration between two devices when some of the configuration requires a little manipulation (VIP ips and pool members).
Thanks!
1 Reply
- Arnaud_Lemaire
Employee
APM is a bit more complicate when it come to cli. Policy definition is not only referencing to configuration objects but to real object as well stored in the filestore. if you open a export zip from a policy export you will see how the gui "tokenize" partition and policy name to copy it.
APM is also coming in last releases with a dedicated sync group which may help in your situation :
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
