Forum Discussion

Adel_N_114257's avatar
Adel_N_114257
Icon for Nimbostratus rankNimbostratus
Jul 16, 2015

Migrating Config from TMOS 10.2.4 to 11.4, using SCF migration

Hi all,

 

So we have planned to upgrade/migrate our 6400 running 10.2.4 to some 5050s running 11.4.

 

as a first step we have taken a .scf file from the 6400 and tried to load it into a lab VE, just to see if any errors come up with the configuration itself.

 

the .scf file has been successfully placed in /var/local/scf

 

however when i try the command:

 

load /sys config file /var/local/scf/filename.scf i get correct prompt and when i click y

 

the load process starts but then in halts @ line one giving me the below error:

 

loading configuration... /var/local/scf/filename.scf Syntax error: (/var/local/scf/filename.scf @ line: 1) "provision" unexpected argument

 

now I have done a few of these upgrades before and never seen this. however this is the first time that I am using this method between a major release.

 

any advice you can provide here would be greatly appreciated.

 

cheers

 

application delivery
deployment
LTM
system upgrade
TMOS
TMSH

6 Replies

Sort By
  • Adel_N_114257's avatar
    Adel_N_114257
    Icon for Nimbostratus rankNimbostratus
    Aug 24, 2015

    Quick update:

     

    Found out that 6400 can only run up to 11.0 :https://support.f5.com/kb/en-us/solutions/public/9000/400/sol9412.html

     

    Will create a partition on the 6400 and perform upgrade to 11.0; Will create a partition on the 5050 and install 11.0; Take config from 6400 v11.0 and migrate to 5050 v11.0 Upgrade 5050 v11.0 to 11.4

     

    If this works will provide a further update. I have a feeling there will be some work required on the iRules but will outline these too.

     

  • arpydays's avatar
    arpydays
    Icon for Nimbostratus rankNimbostratus
    Aug 24, 2015

    I think the 5050s support 11.4 upwards although it may be possible to install 11.0 on them. I had a similar problem when going from 6400s to Viprion. There are different approaches depending on the complexity of configuration and what modules you are running. For LTM/ASM I loaded it on VE and upgraded and them copied scf or bigip.conf portions that I needed...

     

    cheers

     

  • Adel_N_114257's avatar
    Adel_N_114257
    Icon for Nimbostratus rankNimbostratus
    Aug 24, 2015

    So it seems like the only thing that I can do is to installed 10.2.4 VE perform the upgrade to 11.4 and the migrate the config from the VE to the 5000 series.

     

    I keep getting the below syntax error:

     

    Last login: Mon Aug 24 11:55:01 2015 from 10.128.1.1 [root@device1:Active] config bigpipe import /var/local/scf/Cap2.scf Saving configuration to /var/local/scf/.backup-0.scf. Reading configuration from /config/low_profile_base.conf. Reading configuration from /defaults/config_base.conf. Reading configuration from /usr/share/monitors/base_monitors.conf. Reading configuration from /config/profile_base.conf. Reading configuration from /config/daemon.conf. Reading configuration from /var/local/scf/Cap2.scf. Renaming /var/local/scf/.backup-0.scf to /var/local/scf/backup.scf. Loading the configuration ... BIGpipe interface creation error: 01070318:3: The requested media for interface 1.1 is invalid. [root@device1:Active] config

     

    Below is the section related to the interfaces, from the .scf file:

     

    interface 1.1 { media fixed 1000baseT full } interface 1.2 { media fixed 1000baseT full

     

    } interface mgmt { media fixed 1000baseT full

     

    I tried leaving these sections blank but got the same error.

     

    Can someone help??

     

    • Adel_N_114257's avatar
      Adel_N_114257
      Icon for Nimbostratus rankNimbostratus
      Aug 25, 2015
      had to manually change the scf file to reflect the below, but changing the interface on each line. } interface 1.1 { media fixed 10GbaseT full }
  • arpydays's avatar
    arpydays
    Icon for Nimbostratus rankNimbostratus
    Aug 24, 2015

    if I recall I deleted the interfaces...

    from memory my basic process was as below, this may not work for all situations and if you are not comfortable at the cli I would seek F5 assistance;

    1. build 11.x VE
    2. take 10.2 UCS
    3. load 10.2 UCS into VE (this will fail)
    4. extracted files are now in /config/bigpipe
    5. edit /config/bigpipe/bigip_base, remove interfaces, STP block, replace all int references with 1.1
    6. run the following cmd 
      /usr/libexec/bigpipe daol
    7. fixup config errors and rerun
    8. Assuming you have named the VLANs the same you can now import certs/keys and copy out ltm config stanzas that you need and import to your new box with 
      load sys config from-terminal merge

    The are some other bits you may also need to think about, e.g. license and master keys. It's not the most straightforward upgrade I've done but I haven't found an easy way to get it done with a scf or ucs when jumping from different platforms and major s/w revisions.

    cheers

  • Adel_N_114257's avatar
    Adel_N_114257
    Icon for Nimbostratus rankNimbostratus
    Aug 25, 2015

    update:

     

    In terms of modifying the scf file so far I have had to make the following manual changes:

     

    • interfaces (modified)
    • SSL certificates (CA) (deleted) - reason: there was 90+ certificates and they all had to be migrated and installed manually.
    • all profiles relating to the certificates (deleted) - reason: there was 90+ certificates and they all had to be migrated and installed manually.
    • fail-over / config-sync (deleted)

    finally the config migration worked from 6400 to VE both running 10.2.4

     

    Next stage is upgrading from 10.2.4 to 11.0 having a whole bunch of issues there with device and traffic groups which were new introductions. Once I've dealt with these i will post another update.

     

    So far this has been the most time consuming upgrade....