SSL & persistence configurations from qkview or UCS files
Is there any quick way to extract (into, for example, an Excel file) the following configuration details from qkview or UCS files? 1. list of SSL certificates, including: - SSL certificate expiration status / dates - which virtual servers or SSL profiles are using each SSL certificate 2. list of persistence configurationsUCS file migration on differing OS versions
We are currently upgrading the F5 load balancers of our customer, from iSeries, to rSeries. old F5 load balancers: model: BIG-IP i5600 (C119) OS: 12.1.x (either 12.1.2 Hotfix HF2 2.0.276 or 12.1.4 Final 0.0.8) GTM / DNS configurations: enabled new F5 load balancers: model: rSeries (2600 and 4800) OS: 17.5.1.6 GTM / DNS configurations: no longer needed, as per our customer questions: 1. Noting the OS versions of the old and new F5 load balancers... Is this the ideal OS upgrade sequence? (based on F5 K13845) BIG-IP 12.x > BIG-IP 14.x > BIG-IP 15.x or BIG-IP 16.x > BIG-IP 17.x 2. BIG-IP 14.x is no longer available in F5's Downloads website. Are there any other methods for obtaining a copy of BIG-IP 14.x? 3. About UCS file migration, from old to new F5 load balancers: Would there be any risks, configuration-wise, if we do the following steps? - we take the UCS file from the old F5 load balancer, which is running on BIG-IP 12.x - we import and load that UCS file onto the new lab F5 load balancer, which is running on BIG-IP 17.x 4. Since our customer advised that they will no longer need any GTM / DNS configurations on their new F5 load balancer: Should we delete the bigip_gtm.conf file from the contents of the UCS file of the old F5 load balancer, before migrating to the new F5 load balancer?
Prerequisites and order of operations - UCS restore from i4800 to F5 LTM VE
Hi guys. We are emulating a F5 LTM VE in an EVE-NG environment. this is done for testing purposes and I am currently in the process of trying to restore a UCS file from our BIG-IP LTM i4800 to BIG-IP LTM VE - both version 17.1.2-0.08. I am currently struggling to make a restore as I experience an error "symmetric unit key decrypt error" I have come across the article https://cdn.f5.com/product/bugtracker/ID1043141.html but have not been able to locate the root cause fo this error. do any of you guys have any experience with restore from 1 to another platform with UCS? I am currently trying to restore with command "load sys ucs [filename] no-license platform-migrate" master key has been copied with f5mku -K command and edited on new platform with f5mku -r [Masterkey] What are the prerequisites for a succesful restore from 1 platform to another? e.g. license? ressource provisioning. etc.
vscode ucs save edits
When using the vscode extension 'The F5 Extension' to view a local UCS file, I can search and analyze the objects with great ease. However, I cannot save any edits. I keep getting a warning message stating: Failed to save app.conf; Unable to write file /app.conf (Unknown(FileSystemError): Error: EROFS: read-only file system, open /app.conf) I was hoping to use vscode to edit bigip_base.conf without unpacking, using vi, then repacking. I even tried editing the file permissions prior to opening the UCS > chmod 666 file.ucs Is there something I'm missing or miss-understand, ...or Is this not possible? Apple Mac: Sonoma 14.5 Externsion: Last updated, 2024-04-17, 16:43:43 Thanks
Restore UCS from 10.1 to 11.2 fail
Hi everyone I've problem when I try to restore ucs v.10.1 to F5 v.11.2.1 and below is my issue This is result from tmsh load sys config Sep 2 16:43:43 bigip1 err mcpd[6396]: 01070920:3: Application error for confpp: Syntax OK The certificate does not match the key. To change them try 'tmsh modify sys httpd { ssl-certfile /etc/httpd/conf/ssl.crt/server.crt ssl-certkeyfile /etc/httpd/conf/ssl.key/server.key }' ************************************************************* Sep 2 16:43:43 bigip1.cot.com confpp[15748]: syntax check command FAILURE for unix_config_httpd returned: '2304' Problem is 1. big3d daemon is alway restarting 2. httpd daemon can't start so we can't access SSH or GUI (console still working) Did anyone experience this before? Thank you very muchUCS saving process failed.
Hey, Whenever i try to save archive my config, i get the following results: Saving active configuration... /bin/sh: -c: line 0: unexpected EOF while looking for matching `'' /bin/sh: -c: line 1: syntax error: unexpected end of file Fatal: executing: md5sum /config/monitors/' Operation aborted. /tmp/configsync.spec: Error creating package WARNING:There are error(s) during saving. Not everything was saved. Be very careful when using this saved file! Error creating package Error during config save. BIGpipe parsing error: 01020001:3: The requested operation failed. I've verified so i have disk free so its not that... anyone come across this before?
UCS install failing on RMA device
I've had a new unit delivered to replace a failed unit. I've got a UCS backup from the old unit, and when I attempt to install it with the procedure (tmsh load sys ucs your_ucs_file no-license) outlined in: https://support.f5.com/kb/en-us/solutions/public/12000/800/sol12880.html but the install fails with the below output (device name omitted for security): [root@:Active] config tmsh load sys ucs /var/local/ucs/-160703.ucs no-license Processing UCS file: /var/local/ucs/-160703.ucs Installing full UCS (11.2.1) data, excluding license file. Saving active configuration... The hostname is set to Extracting manifest: /var/local/ucs/-160703.ucs Product : BIG-IP Platform: Mercury Version : 11.2.1 Hostname: Installing --full-- configuration on host Installing configuration... Post-processing... WARNING: There were one or more errors detected during installation. Check the error messages and take the proper actions if needed. ERROR: UCS installation failed. Operation aborted. The configuration has been restored... [root@:Standby] config Any help or suggestions would be greatly appreciated on this! Many thanks AnthonyLoad UCS to not active volume which is in version lower than originating (need this for script)
In my case I have two boot locations with different images versions (like below): Volume Product Version Build Active Status HD1.1 BIG-IP 12.1.2 0.0.249 no complete HD1.2 BIG-IP 13.1.0 0.0.1868 yes complete I need to load UCS (predefined config version 12.1.2) to volume HD1.1. I need to load this UCS when I'm logged in on volume HD1.2 (which is active volume). I already checked "cpcfg" command but got error: "New version (12.1.2) is not >= originating version (13.1.0)" I already checked command "tmsh load sys ucs" but this command don't have option to load ucs to not active volume. I'm building a script so I need solution in this particular moment and situation. Any ideas?
