Forum Discussion

HankLiu_159320's avatar
HankLiu_159320
Icon for Nimbostratus rankNimbostratus
Mar 04, 2015

How do you add/remove property via TMSH?

I'm having a hard time removing a property on /sys httpd, and also difficulty adding it on a F5 that is missing the property. Could anyone shine on some light on this matter? Thanks!

 

--- Example 1 (Create) --- [admin@f5-mgmt:Active:Standalone] ~ tmsh list /sys httpd sys httpd { } [admin@f5-mgmt:Active:Standalone] ~ tmsh modify /sys httpd ssl-protocol Syntax Error: "ssl-protocol" unknown property [admin@f5-mgmt:Active:Standalone] ~ tmsh create /sys httpd ssl-protocol Syntax Error: "httpd" unexpected argument

 

--- Example 2 (Delete) --- How could I remove the "ssl-ciphersuite" and "auth-pam-idle-timeout" property? The "delete" command causes syntax error on argument. See below.

 

[admin@f5-mgmt:Active] ~ tmsh list /sys httpd sys httpd { auth-pam-idle-timeout "some value" ssl-ciphersuite "some value" ssl-protocol "some value" } [admin@f5-mgmt:Active] ~ tmsh delete /sys httpd auth-pam-idle-timeout Syntax Error: "httpd" unexpected argument

 

3 Replies

  • See formatted version!

    --- Example 1 (Create) ---

    [admin@f5-mgmt:Active:Standalone] ~  tmsh list /sys httpd
    sys httpd { }
    [admin@f5-mgmt:Active:Standalone] ~  tmsh modify /sys httpd ssl-protocol
    Syntax Error: "ssl-protocol" unknown property
    [admin@f5-mgmt:Active:Standalone] ~  tmsh create /sys httpd ssl-protocol
    Syntax Error: "httpd" unexpected argument
    

    --- Example 2 (Delete) ---

    [admin@f5-mgmt:Active] ~  tmsh list /sys httpd
    sys httpd {
        auth-pam-idle-timeout "some value"
        ssl-ciphersuite "some value"
        ssl-protocol "some value"
    }
    [admin@f5-mgmt:Active] ~  tmsh delete /sys httpd auth-pam-idle-timeout
    Syntax Error: "httpd" unexpected argument
    
  • Hi HankLiu,

    to modify the idle timeout for WebUI from CLI you can use the following:
    tmsh modify sys httpd auth-pam-idle-timeout 1800  
    tmsh save sys config 
    

    To modify protocol support for WebUI from CLI you can use the following:

    tmsh modify sys httpd ssl-protocol "all -SSLv2 -SSLv3"
    tmsh save sys config
    

    What TMOS version are you on?

    Thanks, Stephan
  • Stephan, thank you so much for responding to my post!

     

    I'm not quite sure how to check the TMOS. Could you assist?

     

    As for the actual commands, I am able to modify any properties that already exist in the httpd {} object. However, I am not able to properly remove them. In the 1st example above, I'm actually trying to add the ssl-protocol to a empty httpd {} object. Modifying an existing property doesn't throw any errors for me.

     

    Does that better illustrate the issue i'm experiencing? Thanks!