Forum Discussion

Adilkhan_174866's avatar
Adilkhan_174866
Icon for Nimbostratus rankNimbostratus
Jan 10, 2018

Migrating UCS From 3600 To VCMP F5

Hi Guys,

 

what are the steps In Uploading a 'UCS' from an old 3600 running Version 11.5.3 to a VCMP guest running Version 12.1.2.

 

Do the Steps In-corporate, creating a new Master-Key on the current F5s (3600)? And also do I upload the UCS To the Guest or VCMP Host?

 

I do know, when I upload the UCS, I need to do the 'platform-migrate-command'

 

Thanks

 

5 Replies

  • I personally prefer to not use UCS files when migrating from one platform to another as you will run into problems like you have described with the master key etc. My preferred option is to configure your vCMP guest manually with self IPs, HA, VLANs etc - basically everything in the bigip_base.conf

     

    Once this is done, copy the bigip.conf file and do a merge verify and then a merge (if no errors). This way you are only migrating the config and do not experience the issues relating to the platform

     

  • When working with vcmp, every configuration must be done in guest except vlan and interfaces assignment.

     

    Don’t upload the ucs file on host but on guest.

     

    Before load, export master key from 3600 and import it in vcmp guest. If no configuration is encrypted in configuration, no need to copy master key.

     

    Version 12.1.3 is the recommended for new deployments and migration is optimized with platform-migrate option.

     

  • Hello Adilkhan,

     

    How did you perform the master key migration ? With f5mku or with the tmsh command modify sys crypto master-key prompt-for-password ?

     

    I tried both and getting troubles with the second one. But it seems that with vCMP environment, the second is recommanded.

     

    Thank you

     

    • Adilkhan_174866's avatar
      Adilkhan_174866
      Icon for Nimbostratus rankNimbostratus

      Hi Souhayel,

       

      definitely the mast key prompt worked with that, make sure the master-key password is the same on both f5s otherwise itl generate an error.

       

      what error are you getting?

       

    • helyousa_337216's avatar
      helyousa_337216
      Icon for Nimbostratus rankNimbostratus

      Hello,

       

      I'm getting troubles with this command. And what is surprising is that f5mku work better with vCMP Guest.

       

      With master-key i got troubles with my vCMP guests, mcpd always rebooting.

       

      Thank you for your answer