Forum Discussion

ohforce_331348's avatar
ohforce_331348
Icon for Nimbostratus rankNimbostratus
Aug 23, 2017

Things to verify after migration!

Hi,

 

I previously posted a question about migrating from 3600 to 4000. I'd like to know what needs to be verified after migration is done. What commands should I use (not on GUI since 4000 isn't yet online) to verify if everything works fine.

 

What do I need to compare with the old configuration (3600).

 

I will very appreciate if you can tell me all of that :)

 

Thank you in advance!!

 

Plus, before installing ucs file that I get from 3600 to 4000 (load sys ucs blah.ucs no-license no-platform-check ), I should install license first correct?

 

9 Replies

  • Hi,

     

    First of all I would check that everything is working while the 3600 is online. This way you know every application is working as it should. It takes a lot of time and effort to focus on a problem that was already there before migrating.

     

    You mention the 4000 is not online yet. Very hard to check if everything is correct. Is a different Management IP configured on the 4000? If so, you can compare the configuration by having both GUI's open at the same time. That's the easy way. If this is not possible because Management IP stays the same, connect another computer to the 4000 and have both GUI's open on different computers.

     

    You can also create a Singe Configuration File on both appliances and run a compare of both files. Maybe you see differences you can discard, but maybe you see differences that might cause the migration to fail. Just a extra check before migrating.

     

    What is your migration plan? Disabling switch-ports connected to the 3600 and enable switch-ports connected to the 4000? The roll back procedure is very simple this way.

     

    Is the 3600 a cluster setup. In the past we have migrated to new hardware by adding the new hardware to the device group, do a configuration sync and remove the old hardware. Software version must be the same and you need free IP-addressen on the production network for the new hardware, but it is something to consider.

     

    In the end you need a good test-plan and involve application owners and users for testing. The GUI is the first indication if everything is OK. Are interfaces up? Are VS's UP? Are nodes up? Look at the statistics of VS's. If the counter increases, you know the F5 is processing traffic.

     

    If things are failing, tools like tcpdump can be very usefull. Also check the /var/log/ltm files.

     

    Good luck with you migration.

     

    Martijn

     

    • ohforce_331348's avatar
      ohforce_331348
      Icon for Nimbostratus rankNimbostratus

      Thank you so much for your detail explanations! So before installing UCS file, I have to have new 4000 installed same license and same software as 3600?

       

      How can I use GUI on 4000 on my PC? I will really appreciate if you can tell me the instruction.

       

      And yes every IPs will remain same..

       

      Thank you in advance again!

       

    • Martijn_144688's avatar
      Martijn_144688
      Icon for Cirrostratus rankCirrostratus

      Hi,

       

      The following article explains restoring a UCS file in a RMA procedure, but should be applicable for you as well.

       

      K12880: Configuring a replacement BIG-IP device after a Return Materials Authorization

       

      1. Configure network options for the Management Interface
      2. Activate license on new hardware
      3. Import UCS file

      With GUI I mean the web GUI of a BIG-IP F5 appliance. You say all IP-addresses remain the same. So also the Management IP. So before installing the 4000 in it's final location, put it on your desk and connect a laptop directly to the management interface. With another computer you can open the web GUI of the 3600 and compare configurations.

       

      Regards, Martijn.

       

    • ohforce_331348's avatar
      ohforce_331348
      Icon for Nimbostratus rankNimbostratus

      Thanks again for your reply. Yeah so when I compare the configuration on web GUI of the 3600 with 4000. How can I open the web GUI on 4000 after configuration is done?

       

      Thanks!

       

  • Hi,

     

    First of all I would check that everything is working while the 3600 is online. This way you know every application is working as it should. It takes a lot of time and effort to focus on a problem that was already there before migrating.

     

    You mention the 4000 is not online yet. Very hard to check if everything is correct. Is a different Management IP configured on the 4000? If so, you can compare the configuration by having both GUI's open at the same time. That's the easy way. If this is not possible because Management IP stays the same, connect another computer to the 4000 and have both GUI's open on different computers.

     

    You can also create a Singe Configuration File on both appliances and run a compare of both files. Maybe you see differences you can discard, but maybe you see differences that might cause the migration to fail. Just a extra check before migrating.

     

    What is your migration plan? Disabling switch-ports connected to the 3600 and enable switch-ports connected to the 4000? The roll back procedure is very simple this way.

     

    Is the 3600 a cluster setup. In the past we have migrated to new hardware by adding the new hardware to the device group, do a configuration sync and remove the old hardware. Software version must be the same and you need free IP-addressen on the production network for the new hardware, but it is something to consider.

     

    In the end you need a good test-plan and involve application owners and users for testing. The GUI is the first indication if everything is OK. Are interfaces up? Are VS's UP? Are nodes up? Look at the statistics of VS's. If the counter increases, you know the F5 is processing traffic.

     

    If things are failing, tools like tcpdump can be very usefull. Also check the /var/log/ltm files.

     

    Good luck with you migration.

     

    Martijn

     

    • ohforce_331348's avatar
      ohforce_331348
      Icon for Nimbostratus rankNimbostratus

      Thank you so much for your detail explanations! So before installing UCS file, I have to have new 4000 installed same license and same software as 3600?

       

      How can I use GUI on 4000 on my PC? I will really appreciate if you can tell me the instruction.

       

      And yes every IPs will remain same..

       

      Thank you in advance again!

       

    • Martijn_van_de1's avatar
      Martijn_van_de1
      Icon for Cirrus rankCirrus

      Hi,

       

      The following article explains restoring a UCS file in a RMA procedure, but should be applicable for you as well.

       

      K12880: Configuring a replacement BIG-IP device after a Return Materials Authorization

       

      1. Configure network options for the Management Interface
      2. Activate license on new hardware
      3. Import UCS file

      With GUI I mean the web GUI of a BIG-IP F5 appliance. You say all IP-addresses remain the same. So also the Management IP. So before installing the 4000 in it's final location, put it on your desk and connect a laptop directly to the management interface. With another computer you can open the web GUI of the 3600 and compare configurations.

       

      Regards, Martijn.

       

    • ohforce_331348's avatar
      ohforce_331348
      Icon for Nimbostratus rankNimbostratus

      Thanks again for your reply. Yeah so when I compare the configuration on web GUI of the 3600 with 4000. How can I open the web GUI on 4000 after configuration is done?

       

      Thanks!

       

    1. Run commands before and after the maintenance to identify the status of the VS and Pools.

       

    2. Check logs in the new LTM after upgrade to make sure nothing is broken.

       

    3. Check application function after upgrade.