For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

colinw_190728's avatar
colinw_190728
Icon for Nimbostratus rankNimbostratus
Mar 12, 2015

Upgrading LTM from 10.x to 11.x

We have a pair of LTM's in an Active/Standby deployment. We want to upgrade from version 10.x to 11.x. Can we upgrade the standby unit & then make it active, to do some testing before upgrading the o...
application delivery
LTM
management
Tim_K_92675's avatar
Tim_K_92675
Icon for Cirrostratus rankCirrostratus
Mar 12, 2015

I would highly recommend purchasing a lab license in order to test/practice/validate your documented upgrade process.

 

Personally, I export an SCF file from all my devices and import them into an isolated lab VM instance. I have to massage a few properties, of course, like commenting out interface configs and what-not in the conf files in order to get them to load. And although I can't run actual traffic through it, I can at least determine what, if anything, will break the upgrade process and document/remediate those things before the real upgrade is performed. This scheme has proved invaluable and saved me a lot of headaches and sleepless nights.

 

Sumanta_88744's avatar
Sumanta_88744
Icon for Cirrus rankCirrus
Sep 30, 2016

Hi Experts

 

I recently did an upgrade from 10.2.2 to 11.6.0 HF5. The devices were in active/standby HA. After rebooting to new volume, the configuration got wiped out. Only Self IPs, VLANs and interfaces stayed, along with host name and system details.

 

HA went down as well. I manually configured the F5, referring to the old snapshots, tried to re-sync, but HA never came up at all. Had to revert back due to outage window being limited to 3 hrs only.

 

Syslog was filled with the below messages:-

 

01071432:5: CMI peer connection established to 192.168.11.1 port 6699 0107143c:5: Connection to CMI peer 192.168.11.1 has been removed

 

01071431:5: Attempting to connect to CMI peer 192.168.11.2 port 6699 0107142f:3: Can't connect to CMI peer 192.168.11.2, TMM outbound listener not yet created

 

All config-sync and peer IPs were working fine, reachable within same network.

 

Any advice please, maybe it is time for TAC support?