Forum Discussion

David__Pasch's avatar
David__Pasch
Icon for Altostratus rankAltostratus
May 01, 2017

What is the TMSH command to uncheck an option in a child profile?

My scenario is this,... Parent SSL profile has the correct CIPHER string. Normally, this option isn't check on the child profile, so that it adopts the parent settings. In some cases this has been accidentally done, so require an update.

 

What is the tmsh command that simply unchecks that option (ciphers) in the child profile. So if you were to run a list command, w/o all-properties on the end, it wouldn't even list "ciphers".

 

I know this can easily be done in the GUI. Just want to do it via tmsh.

 

Thanks in advance!!!

 

David

 

application delivery
BIG-IP
  • David__Pasch's avatar
    David__Pasch
    Icon for Altostratus rankAltostratus
    May 01, 2017

    Thanks for the response, Peter!

     

    I did see the options there, and tried the "none" setting. However, it appears that it still doesn't return to the settings in the parent profile. It sets it to "none", which is not the desired results. I would expect the right command to delete the entry as it isn't displayed until modified.

     

    Thanks!

     

  • David__Pasch's avatar
    David__Pasch
    Icon for Altostratus rankAltostratus
    May 01, 2017

    Additionally, I tried the edit command, and simply deleted the ciphers line. My expectation being it would be removed. However, it was left in place with a lower case "default". Given the actual default is DEFAULT, I am assuming that is the list of CIPHERs implemented after that change. It seems only unchecking it in the GUI makes it use the CIPHERS listed in the parent profile, and returning all the tmsh output back to the original state.

     

    Thanks again!

     

  • CharlesCS's avatar
    CharlesCS
    Icon for Cirrus rankCirrus
    May 02, 2017

    Apparently not in version 11.5.3, so perhaps an upgrade to version 11.6.0 or later (which does support the "default-value" operand) should also be in in your plans. Actually, I'd recommend going to 11.6.1 along with its most recent hotfix rollup upgrade.