BIG-IP Auto backup configure and send SCP/SFTP using crontab
Prerequisite: Secure Copy Protocol server (SCP) server. BIG-IP CLI Access- recommened root user. Configuration Steps: Step#1: Login BIG-IP cli and generate ssh key pair. #ssh-keygen Step#2: Push the id_rsa.pub key to remote scp server. So that without password we can login. ssh-copy-id scp_user@<remote-scp-ip> #ssh-copy-id -i /root/.ssh/id_rsa.pub scpnet@10.1.1.10 Now you can check ssh public key authentication working by tring ssh login. ssh scpnet@10.1.1.10 Now test that public key authentication working. Simply do ssh on scp server: ssh scp_user@scp_ip If it's login remote scp server without password now good to go next step. Step#3: Make directory where the backup will stored. mkdir /var/ucs Step#4: Set schedule through crontab. crontab -e Step#5: After open cron file click i for insert and paste backup taking command. 0 1 * * * tmsh save /sys ucs /var/ucs/$(/bin/hostname).ucs && scp /var/ucs/$(/bin/hostname).ucs scp_user@<scp_server_ip>:/home/scpnet/F5/DC_F5_Node_02/$(/bin/hostname)-$(date +\%Y-\%m-\%d).ucs For save click ESC :wq Step#6: Now verfiy the crontab by crontab -l Note: This is the simplified 😊 version of below two article. I am tried to simplify and straightforward guide. https://my.f5.com/manage/s/article/K13418 https://my.f5.com/manage/s/article/K13454
Adding Cron Jobs to the F5 - Is it OK? or should it be avoided?
Hi All, I have created a backup script that would reside on the F5 device, copy all ASM policies to XML and then push them to a remote fileshare. I have planned to have this script run via a cron job on the F5 once per month. When attempting to get approval from the business to implement this on the production devices, concern was raised around setting a cron job on the F5s. I personally did not feel that this would be an issue. Can anyone shed some light on this issue? Are others setting Cron jobs on the F5 or avoiding doing so for any reason in particular. If I want to schedule a script to run every month, is there a better alternative that I could use on the F5? Thank you.
Webtop links auto published
Hey guys, We're looking to build an automated deployment platform for customers. The problem I am running into is publishing a webtop with only links that the customer has access to. In most scenarios this could be to RDP sessions, vpn's, etc. I haven't found a way to do this via an irule, xml, text doc, smoke signal, etc yet. Alternatives I've also considered include AD (i.e. AD lookup, pull attributes, publish links for the three devices the user has listed). Does anyone have any thoughts on reading in a file, list, or lookup to then create objects on the webtop? I appreciate any thoughts or insights.
