For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

6 Replies

  • I don't know if there is a way to show the status of an access profile, unless perhaps you keep track of the generation number.

    tmsh list / apm profile access [profile name] generation
    

    To update/commit the access profile, do this:

    tmsh modify / apm profile access [profile name] generation-action increment
    
  • The commit command works properly. Unfortunately there is no way at the moment to view the status commited/modified from tmsh. Got a RFE (ID=438693 / Display Value of config_sync_state for profile_access in TMSH Show Command) for that. Found a "workaround":

    snmpwalk -v2c  -c  F5-BIGIP-APM-MIB::apmPmStatConfigSyncState

    If the output is anything but value=0, the Access Policy is not "commited", as here: F5-BIGIP-APM-MIB::apmPmStatConfigSyncState."/Common/" = Counter64: 2

  • On 11.6.0 5.173.429

     

    I am getting Counter64:0 on all policies, even uncommitted ones. (as displayed by the GUI)

     

  • It seems, that RFE is still not implemented in v12. tmsh show apm * commands still do not output results for most of them :-(

     

  • If SNMP is not working, and neither is TMSH, do you know of any other alternative outside the WebGUI ?

     

  • AFAIK, REST API support on APM is still limited.

     

    API calls to ""

     

    doesn't return any data (as for other psync-* objects")

     

    Alex