F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

quattroginger's avatar
quattroginger
Icon for Nimbostratus rankNimbostratus
Feb 16, 2018

Needing assistance with platform-migration

We are migrating from some 6900s to ve's. I have two devices at site 1 in HA active/passive and one device at site 2 in active state. both sites are configured with dns. i have used these articles as...
BIG-IP
devops
TMOS
Boggs_5738's avatar
Boggs_5738
Icon for Nimbostratus rankNimbostratus
Feb 16, 2018

  1. the masterkey [f5mku -K] is used to decrypt the encrypted 'stuff' [password in auth configs, health monitors [ldap, http basic, etc..], ssl key passhphrase] in your ucs. so if you are restoring a ucs from another device, its worthwhile have this available. grab the master key from the source device and 're-key' the master key on the destination device.

     

  2. not so sure.. but I would say yes.. the ucs takes care of these keys and i think dnssec keys will be included.

     

  3. reusing the self ips is fine, just dont enable the interfaces [vlan/actual traffic] until you are done with initial config setup. enable only the mgmt interface. premature enabling of interfaces - same vlan on your old and new bigip - can cause you an active active state.. even if they are not in HA.