Image installation status audited
Hello there, I'm upgrading a Viprion's guest and during the installation of the ISO on the new volume I'm facing this situation: ---------------------------------------------------------------------- Sys::Software Status Volume Slot Product Version Build Active Status ---------------------------------------------------------------------- HD1.1 1 BIG-IP 14.1.4.4 0.0.4no installing 77.000 pct HD1.2 1 BIG-IP 14.1.4 0.0.11yes audited I never saw before the installation status "Audited". I searched for but I have not found information about. Anyone know about this behaviour? Thank you very muchSolved2.5KViews0likes9CommentsKnowledge sharing: F5 Software Upgrade/RMA process
Here is quick summary about things should be checked before an F5 upgrade. This is the general F5 support article with clips and there is nice info for VIPRION and VCMP systems: https://support.f5.com/csp/article/K41125752 https://support.f5.com/csp/article/K84554955 https://support.f5.com/csp/article/K84205182 This a great community article 7 Steps Checklist before upgrading your F5 BIG-IP https://support.f5.com/csp/article/K11661449 https://support.f5.com/csp/article/K13081744 Extra addition to the DNS upgrade is that it is better upgrade first the LTM devices that the DNS devices monitor and after the upgrade of 1 or 2 DNS systems till the other DNS systems are also upgraded better upgrade the big3d process on the older DNS systems in the DNS sunc group: https://support.f5.com/csp/article/K15844889 https://support.f5.com/csp/article/K45907236 https://support.f5.com/csp/article/K13734 https://support.f5.com/csp/article/K13312 For BIG-IQ upgrade or for BIG-IQ to upgrade f5 devices: https://support.f5.com/csp/article/K51342220 https://techdocs.f5.com/en-us/bigiq-8-0-0/managing-big-ip-devices-from-big-iq/big-ip-software-upgrades.html For F5 devices with the F5 APM module after upgrade check if the installed F5 Edge Client software needs to be upgraded as it may not work with the new F5 APM TMOS version. https://support.f5.com/csp/article/K13757 An issue I have seen is to install the new version in a volume and transferring the configuration from the old volume to the new but without activating it and then to activate it after a week and there would an old configuration during that week many changes were done on the old volume config, so better before an upgrade so save UCS just in case from the old volume/partition: Some workarounds: https://support.f5.com/csp/article/K82463047 https://support.f5.com/csp/article/K14724 F5 RMA process general articles: F5 general articles for RMA with or withour UCS as without UCS the system and network settings may need to be configured manually and the configuration to be synchronized from the active device to the rma device. https://support.f5.com/csp/article/K12880 For F5 DNS/GTM there are special steps: https://support.f5.com/csp/article/K14083 F5 RMA of VIPRION chassis or a blade as for example when the new blade is installed but the active software version on other blades and vcmp quests is missing then the blade will get stuck in quorum for the chassis or vcmp quest as the primary blade will not be able to update it. If there is single blade in the chassis better hope that there is saved UCS expecially if there are vCMP quests as then for every vcmp quest the system and network need to be manually configured and the other config can be synchronized from the other chassis and vcmp quests that are in HA cluster. https://support.f5.com/csp/article/K14302 https://support.f5.com/csp/article/K16992 https://support.f5.com/csp/article/K23795307?utm_source=f5support&utm_medium=RSS https://support.f5.com/csp/article/K40222952 As the F5 VIPRION chassis is most complex (see K14302) if there is no saved master key as the vCMP quests use keys that are signed by the vCMP host master key and if it is lost then it is really complex, this is a nice F5 devcentral procedure how to generate your own master key that can be the same for the different F5 VIPRION Devices: https://community.f5.com/t5/technical-articles/working-with-masterkeys/ta-p/290454 When loading UCS on the RMA device that has containing encrypted passwords or passphrases, you can check(I have never used the second article but it is nice to have if issues are seen on a vCMP system when a chassis is replaced): https://support.f5.com/csp/article/K9420 Working with MasterKeys https://support.f5.com/csp/article/K13408 The new F5 Joutneys tool can be used for migrating to configuration to the new F5 VELOS and rSeries platforms and maybe in the future the F5 NEXT Operational System. https://community.f5.com/t5/technical-articles/welcome-to-the-f5-big-ip-migration-assistant-now-the-f5-journeys/ta-p/279673 https://www.youtube.com/watch?v=lLm5OkJRicw For the F5 imish/zebos routing module it is good to renember that that the config is not synchronized in a HA pair and before an RMA/upgrade to run the "write" command in the module as this is like the F5 command "save sys config" for CLI made changes as because of the reboot of the devices this changes can be lost. Before the license reactivation I suggest using the tool https://secure.f5.com/validate/validate.jsp to check that you have legitimate license and support contract.2.2KViews9likes4CommentsNeed to upgrade from 15.1.4 should we go to 16 or 17?
We are currently running version 15.1.4 and we are about to upgrade. I'm thinking we need to just bump up to either 16 or 17 at this point. Are there any concerns or reasons why we should maybe choose 16 over 17? Are there are issues when upgrading from 15.1.4 to 16.1.3? Or will it be just like a regular upgrade I do from minor revisions with 15? (load new image, reboot device on new image, etc).I'm hesitant to move to 17.0.0.1 with it being so new. Thanks in advance for any input.Solved1.9KViews0likes2CommentsHow to cancel a installing process
Hi everyone. Are there any way to cancel installing process after typing "tmsh install sys software....." ? One day, during a test I realized that I tried to install unexpected s/w version. But I couldn't find any method. It's waste of time!!. Does anyone have any idea? ----------------------------------------------------------- Sys::Software Status Volume Product Version Build Active Status ----------------------------------------------------------- HD1.1 BIG-IP 12.1.3 8120.0 no installing hotfix <<== Want to cancel the installing process HD1.2 BIG-IP 12.1.0 7135.0 yes complete HD1.3 BIG-IP 11.6.2 1245.0 no complete1.9KViews0likes2Commentsconfiguration utility restarting (upgrade)
Good day all, In doing an upgrade on a virtual f5 and after loading the partition the gui is seen stuck at "configuration utility restarting". I have tried restarting tomcat & http based on online information , but its not helping. License is fine with no errors on it. Its been rebooted few times, any suggestions will be welcome.Solved1.4KViews0likes4CommentsSFP+ port don't work after upgrade from 13.1.3 to 14.1.4.6
I have upgraded my BIG-IP 5000s from 13.1.3 to 14.1.4.6. After reboot, the panel display version 14.1.4.6, but all light for SFP+ port is down, and could ping the IP address configured on the port. The IP address of the Management port could be pinged, but could not access the device with ssh or httpd (403 error). Any advice is appreciated ! Best Regards, perlang1.3KViews0likes10Comments"Install Configuration" During activating new boot location
Hi, I'm preparing to upgrade my devices, and one thing is not completely clear to me. While activating Boot location you can choose to install configuration. According to documentation when activating a boot location, the Install Configuration option allows you to select a configuration to be installed from a boot location other than the boot location being activated. I'm not completely following it. If I choose not to install configuration will I get a clean, out of the box install? Alternatively - should I choose to have a configuration installed from the previously active partition, in order to retain my current setup?Solved1.2KViews1like3CommentsTwo virtual servers go down after an upgrade
Hi Everyone, I'm wondering if anyone has seen this behaviour before. After I perform an upgrade, two virtual servers out of about 10 go down. The applications using these VSs stop working, from the looks of it outbound traffic out to the internet stops. The health monitor used is the default HTTPS. I've created a custom monitor to GET a file from the backend pool members which marks the nodes as up, but the apps still don't work. The backend servers are running IIS10.0. Some versions of the F5 software work, most do not. Working versions are 14.1.2.8, 14.1.4, and 15.1.3.1. All other versions seem to not work. As soon as the upgraded device is made active (in the HA pair) the VSs go down. Packet captures don't seem to show the issue, but they do indicate for some reason there's a 75 second+ pause in the response from the pool members. This isn't there when one of the working versions is active so I don't think this is an issue with the pool member. The traffic passes through two sets of Checkpoint firewalls, and is NATed each time on these firewalls on the way to the internet. Could anyone provide information as to why this would work with some versions of the BIG-IP software, and not others? Thanks,Solved1.1KViews0likes6CommentsBigIP TMOS upgrades through BigIQ
I had a few questions about BigIP TMOS upgrades through BigIQ i.e. upgrading the TMOS ver of the managed devices from BigIQ CM How does BigIQ handle OS upgrade for Active-Standby device pair. We see the below screen while we select the devices , either we can select the Devices or we can select Group/Cluster wherein there is no option to select DSC cluster (which as we understand are Sync pair), we get option to select only DNS sync pair We ended up using the Device option, wherein we add the individual devices. All our deployment are Active- Standby, is BigIQ able to identify a failover pair if I add them as individual devices as I do not have an option to add them as DSC cluster. Presently our OS upgrades are done manually and with zero downtime, we would want to achieve the same with BigIQ with zero touch. Need your feedback Will BigIQ undertake the OS upgrade for the Standby device , failover then upgrade the other device. This is not documented properly we are referring to this article https://techdocs.f5.com/en-us/bigiq-8-0-0/managing-big-ip-devices-from-big-iq/big-ip-software-upgrades.html#GUID-D2C1FCE8-BB1A-4B23-A981-1F03BE47F2911.1KViews0likes6CommentsIs 2000s which reached EoSD support firmware 14.1.4.5 which release after EoSD date?
We have 2000s which is currently installed firmware 14.1.4.1 but there is many vulnerabilities and we want to upgrade to 14.1.4.5 to fix it but 2000s is already EoSD and 14.1.4.5 is release after EoSD date Refer: https://support.f5.com/csp/article/K9476 state that 14.1.4.5 is compatible software version on 2000s So I'm confused. Is 14.1.4.5 fully support on 2000s? What is concern point if i upgrade to 14.1.4.5 on EoSD platform (2000s)?Solved1.1KViews0likes2Comments