F5 Big-IP OS Upgrade対応手順

ー 10.2.*から11.5.3
Created by : Network Tower OPS Min
Version 0
2016/08/16

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
• Target: tyodcdmz2lb23d-s

1, confirm OS version
# cat /VERSION
2, Save UCS file for both devices
#b config save /var/tmp/tyodcdmz2lb23d-s_DATE.ucs --> On Standby

#b config save /var/tmp/tyodcdmz2lb23d-p_DATE.ucs --> On Active

3, check the virtual server for both devices(for post check)
tmsh show /ltm virtual | grep "Virtual Server:" | wc –l

tmsh show /ltm virtual | grep "Availability : available" | wc -l

tmsh show /ltm virtual | grep "Availability : offline" | wc -l

tmsh show /ltm virtual | grep "Availability : unknown" | wc -l

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
3. Check the service date on current version

[root@tyodcdmz2lb23d-s:Standby] config # cat bigip.license | grep "Service check date"

Service check date : 20140713
4. Offline the standby device:

b fo offline

5. Reactivate the License of the System:

Navigate to System > License.

Click Re-activate.

Click Manual.

Click Next.

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
6. The new image for 10.2.4 and 11.5.3 is already present on the device. If not required to upload the new image:

[root@tyodcdmz2lb23d-s:Standby] images # ls -la

total 3449740
drwxrwxr-x 2 root tomcat 4096 Jan 24 2016 .
drwxr-xr-x 18 root root 4096 Jan 26 2016 ..
-rw-r--r-- 1 root root 1000151040 Apr 23 2012 BIGIP-10.2.4.577.0.iso
-rw-r--r-- 1 root root 56 Apr 23 2012 BIGIP-10.2.4.577.0.iso.md5
-rw-r--r-- 1 tomcat tomcat 1786056704 Jan 24 2016 BIGIP-11.5.3.0.0.163.iso
-rw-r--r-- 1 root root 237092864 Jun 18 2013 Hotfix-BIGIP-10.2.4-817.0-HF7.iso
-rw-r--r-- 1 root root 67 Jun 18 2013 Hotfix-BIGIP-10.2.4-817.0-HF7.iso.md5
-rw-r--r-- 1 tomcat tomcat 505704448 Jan 24 2016 Hotfix-BIGIP-11.5.3.2.0.196-HF2.iso
-rw-r--r-- 1 root root 1407 Jan 24 2016 .imagecache

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
7. Install OS image
[root@tyodcdmz2lb23d-s:Standby] images # b software show
SOFTWARE
+-> SOFTWARE STATUS
| Key Slot Product Version Build Active Status
| MD1.1 0 BIG-IP 10.2.4 817.0 yes complete
| MD1.2 0 BIG-IP 11.5.3 2.0.196 no complete
| MD1.3 0 none none none no complete

Login to F5 UI -> System -> Software Management -> Image List –

Click on the check-box in front of iso file, and click on ‘Install’, Select HD1.2 which will just upgrade to 11.5.3

8. Install the hotfix with below command:

tmsh install sys software hotfix Hotfix-BIGIP-11.5.3.2.0.196-HF2.iso volume HD1.2

To monitor the status of the hotfix installation from the command line, type the following command:
watch bigpipe software status show

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
9. Change the default boot location to HD1.2:
[root@tyodcdmz2lb23d-s:Standby] images # switchboot -l
Current boot image:
MD1.1 - title BIG-IP 10.2.4 Build 817.0
Default boot image:
MD1.1 - title BIG-IP 10.2.4 Build 817.0
Available boot image(s):
MD1.1 - title BIG-IP 10.2.4 Build 817.0
MD1.2 - title BIG-IP 11.5.3 Build 2.0.196
[root@tyodcdmz2lb23d-s:Standby] images # switchboot -b HD1.2

10. Reboot machine into new image:

full_box_reboot

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
13. Once the device comes up it will be on version 11.5.3 as standalone. Release the offline. Failover from Primary to Secondary:
b fo standby --------------------------------- run this on Active device

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
For tyodcdmz2lb23d-s
1. Set the device to offline, Check the service date on current version
b fo offline
cat /VERSION
2. Check the service date on current version

[root@tyodcdmz2lb23d-s:Standby] config # cat bigip.license | grep "Service check"

Service check date : 2014071
3. Reactivate the License of the System: same with primary

4.Install image 11.5.3 to HD1.2

tmsh install sys software image BIGIP-11.5.3.0.0.163.iso volume HD1.2
5. Install the hotfix with below command:
tmsh install sys software hotfix Hotfix-BIGIP-11.5.3.2.0.196-HF2.iso volume HD1.2
6. Change the default boot location:
switchboot -b HD1.2
7. Reboot machine into new image:
full_box_reboot

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY

 Procedures
8. Once the device comes up it will be on version 11.5.3 as standalone. Need to rebuild HA
Log in to the Configuration utility of tyodcdmz2lb23d-s device.
Navigate to Device Management > Device Trust > Local Domain.
Click Reset Device Trust.
Select the Generate new self-signed authority option.
Log in to the Configuration utility of tyodcibrlb23d-p device.
Navigate to Device Management > Device Trust > Local Domain.
Click the Peer List menu
Click Add.
Type the management IP address, administrator user name, and administrator password for
tyodcibrlb23d-s device, and then click Retrieve Device Information
Verify that the certificate and the remote device name are correct, and then click Finished.

Optional disclaimer area – i.e. FOR INTERNAL PURPOSES ONLY