Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral


Questions and Answers

Loading... Loading...

I created an iApp virtual for IIS. LTM+WA 11.1. After the virtual is created, I can't see it with tmsh list ltm virtual command. It is hidden from TMSH. I can see it from GUI, but can't make any change to the virtual without the error about "strict updates enabled". So I can't see or change the object at all. I tried vi bigip.conf to make the change then use tmsh command to load the new bigip.conf. It seems to work, but I am not sure if this is the right way to do it. How do I bypass iApp to fine tune the LTM configuration?


4 Answer(s):

I have answers to two of these questions:

First of all, your objects are not hidden from TMSH, they are in a subfolder for the iApp Service that you have deployed. You can see them in TMSH if use the recursive keyword on your list commands or is you list the contents of the folder by name.

Second, the reason why you cannot edit the objects created by the iApp outside of the iApp is a feature called Strict Updates. This feature allows the iApp Service to protect the objects that it created. If you need to override this behavior, you can turn off strictness.

Here is how to do that:

1) Navigate to iApp -> Application Services
2) Select the iApp Service that you have deployed
3) Click on the Properties tab
4) Toggle the Basic/Advanced Application Service drop-down value to Advanced
5) Clear the Strict Updates checkbox and click Update

Now you will be able to edit the objects outside of the iApp. Be warned that if you reenter the template at some point in the future, you may end up overwriting any changes that you made outside of the template.

Anyway, I hope that helps.

Mitra
Visit your iApp in the GUI. Click on the tab labeled "Properties". In the drop down labeled "Applicaton Service:" change from Basic to Advanced and you will see the flag that controls Strict Updates.

To see the virtual in tmsh you need to 'change directory' to the folder containing the iApp. For example, if you are in tmsh and if you had named your iApp 'fred' type 'cd [TAB]' and in auto complete you would see 'fred.app/' as an option. So in this example type 'cd fred.app'. Now if you were at (tmos.ltm) you can do a list virtual to see the virtuals that belong to that particular iApp.
That was very helpful info. Now I can disable strict update and make change to the virtual servers.
It seems to me that when I use "tmsh show running-config ltm" to show LTM configuration from bash, I can only see what's under /Common. Can you provide an example/syntax on how I can see all LTM objects under /Common/wa_v11_iis.app? I would like to do it directly in bash, so that I can script it.
You can use the recursive keyword to see things in subfolders

tmsh show running-config ltm recursive

I don't know how to show the contents of a specific folder from bash. If you were in TMSH, you go do it by changing to the folder that you want to list.

cd /Common/wa_v11_iis.app
show running-config ltm

Finally, you can also script things in tmsh using TCL-based TMSH script. More information on this is available here: https://devcentral.f5.com/wiki/TMSH.HomePage.ashx

Your answer:

You must be logged in to reply. You can login here.