Manual Chapter : Solution 3: Edit the BIG-IP configuration file

Applies To:

Show Versions Show Versions

BIG-IP LTM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0

BIG-IP DNS

  • 17.1.1, 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0
Manual Chapter

Solution 3: Edit the BIG-IP configuration file

Use this task if you intend to use a user configuration set (UCS) archive from an existing BIG-IP system to configure a new system, but you do not have the master key from the existing system or its unencrypted password to prevent errors when loading the BIG-IP new configuration.
In this case, you can restore the UCS archive on the new system and edit the BIG-IP configuration file
/config/bigip.conf
(or
/config/bigip_gtm.conf
) on the new system directly, to specify the configuration object passwords or passphrases in clear text. Examples of configuration objects that can have passwords on them are local traffic profiles, pools, and health monitors. After editing and saving the file, you can load the BIG-IP configuration into memory successfully.
You can perform this task on any BIG-IP system, including a vCMP guest.
  1. Securely copy the UCS archive from the existing system to the new system.
  2. On the new system, restore the UCS archive.
  3. On the new system, open the
    /config/bigip.conf
    file with a text editor. Or open the
    /config/bigip_gtm.conf
    file with a text editor, if the new system you are configuring is a BIG-IP LTM/BIG-IP DNS combination device (BIG-IP v11.5.0 and later).
  4. For each password-protected configuration object, replace each encrypted password or passphrase with the unencrypted password or passphrase.
  5. Load the new configuration into memory by typing this command:
    tmsh load sys config
  6. Save the running configuration in the
    /config/bigip.conf
    file by typing this command:
    tmsh save sys config
    . Or if the new system you are configuring is a BIG-IP LTM/BIG-IP DNS combination device (BIG-IP v11.5.0 and later), load the new configuration into memory by typing this command:
    tmsh load sys config
    .