Forum Discussion

joyride_us's avatar
joyride_us
Icon for Altostratus rankAltostratus
Apr 12, 2021

Upgrade from 13.1.3.3 to 13.1.3.6

Hi! This weekend, we have encountered some issues with upgrading with 13.1.3.3 to 13.1.3.6 which forced us to cancel the upgrade.

When we arrived on 13.1.3.6 the configuration was empty : no VS, no Real Server....empty.

One of my guys presumed that the ciphers for SSL on the new version was different than the one of 13.1.3.3 which caused the box to cancel the import of the configuration.

 

Any idea ?

 

thanks!

BIG-IP
LTM
security
upgrade
  • Nikoolayy1's avatar
    Nikoolayy1
    Icon for MVP rankMVP
    Apr 12, 2021

    Use "tmsh load sys config verify" after the upgrade and fix any error messages (ignore the warnings). You may also save an usc before the upgrade and try using it after that. Don't forget to relicense before the upgrade.

     

     

    This is a nice article for such issues:

     

    https://support.f5.com/csp/article/K02091043

     

     

    Also if you see error message when loading the config use google and the F5 bug tracker (https://support.f5.com/csp/bug-tracker?sf189923893=1) and search the error, so such errors 99% of the time F5 will have article of bug id in the bug tracker.

     

     

     

    I have never seen issues with the ciphers being different to cause errors in importing the config, so I don't think this is the case. Issues with the ciphers after upgrade are usally SSL handshake failure after the the upgrade with the clients or pool members but not config issues.