Automated backup F5 configuration to remote server
Problem this snippet solves:
Hi,
I made simple script that auto backup SCF and UCF files to the remote server.
I read great article about autobackup based on the iApp (https://devcentral.f5.com/codeshare/f5-iapp-automated-backup-1114), but I wonder is that way to make it simplest. I don't think that my script is better, but only simple. This scritp based on TFTP communication so it isn't secure.
What you have to do is:
-
Create a script file on every f5 and place it for example on directory /var/tmp/. I named file script_backup.sh. Change IP address TFTP_SERVER to your remote server
-
Change mod of file to execute:
chmod 755 ./script_backup.sh -
Add line to the CRONTAB to run this script every X time
Edit crontab:
crontab -eAdd line like this. Of course you can change the time when you want start script, it's only example:
30 0 * * 6 /var/tmp/script_backup.sh
That's all. I hope you enjoy this script.
I also wonder why f5 don't have native mechanism to auto backup on the remote server. It's the most basic function in other systems.
Code :
TFTP_SERVER=10.0.0.0
DATETIME="`date +%Y%m%d%H%M`"
OUT_DIR='/var/tmp'
FILE_UCS="f5_lan_${HOSTNAME}.ucs"
FILE_SCF="f5_lan_${HOSTNAME}.scf"
FILE_CERT="f5_lan_${HOSTNAME}.cert.tar"
cd ${OUT_DIR}
tmsh save /sys ucs "${OUT_DIR}/${FILE_UCS}"
tmsh save /sys config file "${OUT_DIR}/${FILE_SCF}" no-passphrase
tar -cf "${OUT_DIR}/${FILE_CERT}" /config/ssl
tftp $TFTP_SERVER <<-END 1>&2
mode binary
put ${FILE_UCS}
put ${FILE_SCF}
put ${FILE_CERT}
quit
END
rm -f "${FILE_UCS}"
rm -f "${FILE_SCF}"
rm -f "${FILE_CERT}"
rm -f "${FILE_SCF}.tar"
RTN_CODE=$?
exit $RTN_COD6 Comments
- David_Willman
Employee
The reason there is no auto backup function on a BIG-IP is because that function is done via BIG-IQ Central Management.
- Ndlovumm
Cirrus
Where in the tftp server does the script save the backups? I applied the scrip but it doesnt seem to be working
- Madharasan_Vict
Nimbostratus
One modification required on script
RTN_CODE=$?
exit $RTN_COD
RTN_CODE=$?
exit $RTN_CODE
- Alex_Madjeski
Altocumulus
Thank you for sharing this.
How can I modify this script to use SCP?
Is there any reason not using this?
Archiving UCS files using the logrotate and crontab utilities (11.x - 17.x) (f5.com)
@Alex: Take a look - This is what Im using for backup per scp to remote
- Alex_Madjeski
Altocumulus
P_KueppersThank you for such a quick response! It would be easier to use the TFTP but policy mandates to do it by secure means.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)