Forum Discussion

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Oct 08, 2014

TMSH - Configuration merging for APM access-policy

I do a lot of configuration merging from the CLI when I want to update our devices, as our environment is complicated and manually modifying and merging some configurations are immensely faster than the GUI. My questions is regarding merging configuration for anything under the

apm policy access-policy
module/components. I can merge configs for anything LTM, and most APM stuff, but with access-policy configs, I get "The access policy ([name]) cannot have an item ([item name]) with a rule's next item ([item name]) pointing to an item which belongs to another access policy" since I'm merging new policy items.

So my question is whether there's a way to create/update access policies using configuration files loaded (merged) through the CLI. This would be as opposed to using the export/import method for policies, since we have two devices (that we try to keep in sync, though not in an HA pair, so syncing is manual), and changes to one access policy need to be reflected on the other device (and I wanted a lazier way to sync those changes).

Anyone have any thoughts or experience with this? Or is there a better way to sync configuration between two devices when some of the configuration requires a little manipulation (VIP ips and pool members).

Thanks!

1 Reply