cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Ltm upgrade to 11.3 question

JB_106099
Nimbostratus
Nimbostratus

I am prepping to upgrade our LTM HA pair from version 9.4.6 to 11.3

 

I Know I have to go to 10.x first but do Ineed to apply the 10.x hot fixes before upgrading from 10.x to the final destination of 11.3?

 

2 REPLIES 2

Ajmal_2608
Nimbostratus
Nimbostratus

 

 

Hi JB what version of 10.x you have specifically?

 

 

However I recently upgraded few pairs from 10.2.1 to 11.3HF4 (F5 said that 10.2.3 would be a good option to choose) and following are the mandatory changes to take care about:

 

 

Modifications/Changes required in existing configuration:

 

  1. Check existing iRULES and look for the word "matchclass"

"matchclass" needs to be replaced with "class match" (Reference: https://devcentral.f5.com/wiki/irules.class.ashx)

 

Example:

 

Old syntax

 

if { ![matchclass [HTTP::method] equals $::safe_http_methods] }

 

 

Required syntax

 

if { ![class match -- [HTTP::method] equals $::safe_http_methods] }

 

 

Also in case you are using some variables like string arrays then you may modify them to a string class for better manageability (a good to have option)

 

 

Old syntax

 

if { ![matchclass [HTTP::method] equals $::safe_http_methods] }

 

 

Required syntax with “safe_http_methods” as a class

 

if { ![class match -- [HTTP::method] equals $safe_http_methods] }

 

 

The class/data-group will look something like:

 

ltm data-group safe_http_methods {

 

records {

 

DELETE { }

 

GET { }

 

HEAD { }

 

OPTIONS { }

 

POST { }

 

PUT { }

 

}

 

type string

 

}

 

 

Follow this while upgrading:

 

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-upgrade-active-standby-11-3-0/1.htmlconceptid

 

 

 

Also the failover configuration is totally different in 11.x so you need to create the failover again, following KBs should help:

 

SOL13649: Creating a device group using the Configuration utility http://support.f5.com/kb/en-us/solu...13649.html

 

SOL13639: Creating a device group using the Traffic Management Shell http://support.f5.com/kb/en-us/solu...13639.html

 

v11.3.0: Manual Chapter: Creating an Active-Standby Configuration Using the Setup Utility http://support.f5.com/kb/en-us/prod...3-0/2.html

 

 

Let me know if you need more clarity on specific areas

 

 

Thanks

 

Ajmal

 

 

 

kridsana
Cirrostratus
Cirrostratus
No. you can skip hotfixes. 🙂