Ltm upgrade to 11.3 question

 

 

Hi JB what version of 10.x you have specifically?

 

 

However I recently upgraded few pairs from 10.2.1 to 11.3HF4 (F5 said that 10.2.3 would be a good option to choose) and following are the mandatory changes to take care about:

 

 

Modifications/Changes required in existing configuration:

 

1. Check existing iRULES and look for the word "matchclass"

"matchclass" needs to be replaced with "class match" (Reference: https://devcentral.f5.com/wiki/irules.class.ashx)

 

Example:

 

Old syntax

 

if { ![matchclass [HTTP::method] equals $::safe_http_methods] }

 

 

Required syntax

 

if { ![class match -- [HTTP::method] equals $::safe_http_methods] }

 

 

Also in case you are using some variables like string arrays then you may modify them to a string class for better manageability (a good to have option)

 

 

Old syntax

 

if { ![matchclass [HTTP::method] equals $::safe_http_methods] }

 

 

Required syntax with “safe_http_methods” as a class

 

if { ![class match -- [HTTP::method] equals $safe_http_methods] }

 

 

The class/data-group will look something like:

 

ltm data-group safe_http_methods {

 

records {

 

DELETE { }

 

GET { }

 

HEAD { }

 

OPTIONS { }

 

POST { }

 

PUT { }

 

}

 

type string

 

}

 

 

Follow this while upgrading:

 

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-upgrade-active-standby-11-3-0/1.htmlconceptid

 

 

 

Also the failover configuration is totally different in 11.x so you need to create the failover again, following KBs should help:

 

SOL13649: Creating a device group using the Configuration utility http://support.f5.com/kb/en-us/solu...13649.html

 

SOL13639: Creating a device group using the Traffic Management Shell http://support.f5.com/kb/en-us/solu...13639.html

 

v11.3.0: Manual Chapter: Creating an Active-Standby Configuration Using the Setup Utility http://support.f5.com/kb/en-us/prod...3-0/2.html

 

 

Let me know if you need more clarity on specific areas

 

 

Thanks

 

Ajmal

 

 

 

No. you can skip hotfixes. :)