Minimum system requirements and supported browsers

The minimum system requirements for this release are:

• 512 MB RAM (if installed as a stand-alone Local Traffic Manager or Global Traffic Manager product)
• 768 MB RAM (if installed as a combination of BIG-IP systems, such as a Local Traffic Manager/Global Traffic Manager installation, or as a Link Controller installation)
• 512 MB CompactFlash^® media drive

The supported browsers for the browser-based Configuration utility are:

• Microsoft^® Internet Explorer^®, version 6.x
• Mozilla^® Firefox^®, version 1.5x and version 2.0x

Note that we recommend that you leave the browser cache options at the default settings.

Important: Popup blockers and other browser add-ons or plug-ins may affect the usability of the browser-based Configuration utility. If you experience issues with navigation, we recommend that you disable these types of browser plug-ins and add-ons.

[ Top ]

Supported platforms

This installation method is supported only on the following platforms:

• BIG-IP 1000 (D39)
• BIG-IP 1500 (C36)
• BIG-IP 2400 (D44)
• BIG-IP 3400 (C62)
• BIG-IP 5100 and 5110 (D51)
• BIG-IP 6400 (D63)
• BIG-IP 6800 (D68)
• BIG-IP 8400 (D84)

Warning: If you plan to upgrade a system licensed for Link Controller, Global Traffic Manager, or a combination Local Traffic Manager and Global Traffic Manager system, the BIG-IP unit you intend to upgrade must have a minimum of 768 MB of RAM. Originally, the BIG-IP 1000 (D39) and BIG-IP 2400 (D44) platforms were shipped with 512 MB of memory only.

If you are unsure which platform you have, look at the sticker on the back of the chassis to find the platform number.

[ Top ]

About the installation

This technical note describes how to upgrade the BIG-IP software to version 9.3.1. If the system is currently running BIG-IP software versions 4.5 PTF-04 through 4.5.12, you can perform the upgrade using the BIG-IP version 9.3.1 Upgrade CD.

Important: A valid service contract is required to complete this upgrade.

Warning: You must reactivate the license on the BIG-IP system you intend to upgrade before you begin the upgrade.

Important: The BIG-IP system does not support upgrading from version 4.5 PTF-03 or earlier. If you are running BIG-IP software version 4.5 PTF-03 or earlier, you must upgrade to version 4.5 PTF-04, before you can upgrade to version 9.3.1.

Important: You should perform the installation on the standby unit in a redundant system. If you are satisfied with the results, initiate failover and apply the upgrade to the other unit in the redundant system.

Important: You cannot upgrade to version 9.3.1 from versions 9.0 through 9.0.4. You must first upgrade to 9.0.5, or a later 9.x release.

The BIG-IP version 9.3.1 Upgrade CD-ROM contains a special One-Time Conversion Utility (OTCU) for converting your version 4.x configuration during the upgrade. The OTCU parses pre-9.x configuration files and uses the data to create a 9.x configuration database. This conversion is necessary because the configuration files, file locations, and file formats in version 4.x versions are different in version 9.x.

[ Top ]

Obtaining a version 9.x registration key

Before you begin the upgrade process, you should obtain a version 9.x registration key using the dossier on the 4.5.x system you want to upgrade.

To obtain a version 9.x registration key

1. Open the browser-based Configuration utility on the unit you want to upgrade.
2. In the navigation pane, click System Admin.
   The System Admin screen opens.
3. In the System Admin screen, click the License Administration tab.
   The License Administration screen opens.
4. In the License Administration screen, click Manual Authorization
   A screen containing the dossier opens.
5. Copy the dossier to a safe place.
6. In a browser window, open http://license.f5.com
   The F5 Licensing Tools web site opens.
7. In the F5 Licensing Tools site, click Upgrade License to V9.0.
   Follow the instructions to get a version 9.x registration key.

[ Top ]

Installing the upgrade

If the BIG-IP system is currently running version 4.5 PTF-04 through 4.6.x, you can upgrade directly to version 9.3.1, using the following procedure.

If you are running a pre-4.5 PTF-04 version of the BIG-IP software, you must first upgrade to version 4.5 PTF-04, and then upgrade to version 9.3.1.

The process of upgrading to BIG-IP version 9.3.1 requires completing the following steps:

• Saving and backing up existing BIG-IP system configuration data
• Downloading the installation CD-ROM ISO image from F5 Networks
• Designating and configuring a remote host to be a Pre-boot Execution Environment (PXE) server
• Booting the target system from the remote PXE server
• Adding an IP address to the management interface using the config command
• Licensing the software using the browser-based Configuration utility
• Converting the BIG-IP system configuration data using the OTCU
• Running the profile consolidator and config renamer

The following sections describe how to perform these tasks.

[ Top ]

Saving and backing up existing BIG-IP system configuration data

Before you upgrade to BIG-IP version 9.3.1, you need to save your version 4.x configuration data. This file is used by the one-time configuration utility (OTCU) to convert your version 4.x configuration files to the 9.x configuration file format. In addition, this prevents loss of data if, for any reason, the version 9.3.1 upgrade is not successful.

Collect and archive the version 4.x configuration files, by typing the following command. Note that config.ucs is the name you must use for the UCS file, and the file must be saved at the / partition.
bigpipe config save /config.ucs

Important: If you are upgrading a system that is using zone files with named, you must manually back up all necessary zone files and save them to a remote location. After the upgrade is complete, you can place them on the 9.x system. There is a new location on the 9.x system for these files: /var/named/config/namedb.

Important: It is critical that you back up the archived configuration files to a secure remote location. In the event installation fails, you must use the remotely stored file in order to restore your configuration data. For more information about UCS archive files, see SOL4423: Overview of UCS archives.

[ Top ]

Downloading the installation CD-ROM ISO image from F5 Networks

After you save the existing configuration, download the installation CD-ROM ISO image from http://tech.f5.com. For details about downloading the ISO image, see SOL167: Downloading software from F5 Networks.

Note: Before you continue, we recommend downloading the associated MD5 checksum file and performing the MD5 checksum operation to ensure that the file downloaded correctly. For more information about running the MD5 checksum, see Verifying the MD5 checksum of the installation file.

[ Top ]

Designating and configuring a remote host to be a Pre-boot Execution Environment (PXE) server

Before you perform a network boot from a CD, you must designate and configure a remote host to be a Pre-boot Execution Environment (PXE) server. This remote host must meet all the following criteria:

• Contain a CD-ROM drive.
• Support a CD-ROM boot.
• Reside on the same network as the one to which the BIG-IP system management interface is connected.

Note: You must connect the installation server to the same network to which the management port on the BIG-IP unit is connected.

Note: If you are installing the software on a BIG-IP 1500 (C36), BIG-IP 3400 (C62), BIG-IP 6400 (D63), BIG-IP 6800 (D68), or BIG-IP 8400 platform by directly connecting the unit to the installation server, you must use an Ethernet cross-over cable to directly connect to the management interface. If you are installing the software on a BIG-IP 1000 (D39), BIG-IP 2400 (D44), BIG-IP 5100 or 5110 (D51) by directly connecting to the installation server, you can use a standard Ethernet cable to directly connect to the management interface.

Once you have designated a host, complete the following steps.

1. Insert the CD into the drive on the installation server and reboot the host system from the CD-ROM drive.
   The following message displays:

   Select terminal type? [vt100]

2. Press the Enter key to use vt100 emulation, or type the name of the terminal emulator you are using.
   After you select the terminal type, the following screen opens:

   Maintenance OS Options
   Serve       Provide network installation services
   Install     Install software onto hard disk
   Reboot      Reboot to your current system
   Exit        Exit to maintenance shell
   

3. Select the default, Serve.
   A list of available network interfaces displays.
4. Select one for the installation server interface.
   After you select the interface you want to use as the installation server interface, the following prompt displays:

   Use existing DHCP server on subnet [no]?

5. Indicate your DHCP choice:
   • If there is an existing DHCP server on your subnet that you want to use, type yes.
     The server configuration automatically completes.
     
     If you select this option, you can skip the rest of this procedure and go directly to Booting the target system from the remote PXE server.
   • If you want to set up this server as the DHCP server, type no.
     The following series of prompts displays:

     IP network [10.1.10]?
     IP address of server 10.1.10[n] [199]?
     Lower range for clients 10.1.10.[n] [199]?
     Upper range for clients 10.1.10.[n] [200]?
     

   • If your subnet consists only of the server and the target BIG-IP unit, or is otherwise a private subnet, use the default IP addresses provided.
   • If other units share the subnet and there is a possibility of conflict, substitute the appropriate unique IP addresses and ranges. When you have finished entering the addresses, they are displayed and you are prompted to accept or reject them.

     Note: When you specify the IP address of the server, you need to enter only the last octet. When completing the lower and upper ranges for the clients, type the network numbers where the clients are situated.

   • If the settings displayed are correct, type yes. If they are not, type no and you are prompted to re-enter the addresses.
6. Finally, you are prompted to specify the protocol you want to use to transfer the installation files. The default protocol is HTTP; however, you can also transfer the files using NFS.
   
   Once you accept the settings, the server configuration is complete.

[ Top ]

Booting the target system from the remote PXE server

After you designate and configure a remote host to be a installation server, you are ready to perform the network boot from the console of the platform on which you wish to install the software.

Note: You must connect the installation server directly to the management port on the BIG-IP unit, or to the network to which the management interface is connected.

1. First, select the method you want to use to net boot the unit. The method you use depends on the hardware platform.
   • BIG-IP 1000 (D39), 2400 (D44), 5100 and 5110 (D51)
     With these platforms, you can set the unit to power up and boot from the network.
     • If the unit is powered down, power it up, and within the first ten seconds use a paperclip to push the NETboot button on the front panel.
     • If the unit is started and running, type the following two commands in sequence:

       bigpipe db boot.netreboot enable
        	reboot

   • You might receive the following message after you type the reboot command:

     The requested operation is not supported by the hardware.

   • If you see this error message, use a paperclip to push the RESET button on the front panel. Then, within ten seconds, use a paperclip to push the NETboot button.
   • BIG-IP 1500 (C36), 3400 (C62), 6400 (D63), 6800 (D68), 8400 (D84)
     With these platforms, the unit must be turned on before you can set it to boot from the network.
     • If the unit is started and running, type the following two commands in sequence:

       bigpipe db boot.netreboot enable
        	reboot

2. Another way you can put the unit in network boot mode is by using the Lights-Out Management system. This method is useful if you are having difficulty booting up the system, or you cannot run the bigpipe db boot.netreboot enable command. To boot from the network using the Lights-Out Management system, use this process from the serial console:
   1. To open the command menu, use the following key sequence: Esc (
   2. To put the unit in network boot mode, type 4.
   3. Next, type 7 to reset the host subsystem.
   4. Finally, type 1 to restart the system in network boot mode. For detailed information about the Lights-Out Management system, see the BIG-IP^® Network and System Management Guide chapter, Lights-Out Management.
3. After the system reboots, it attempts to discover the installation server.
   
   Once the installation server is found, the system presents the following prompt:

   Press M or Control-SPACE to view menu.

   Let the timer count down to auto-select the installation options. After the timer counts down, the installer prompts you for the terminal type.

   Terminal type? [vt100]

   Press the Enter key to continue, or specify the terminal type you are using. We recommend that you use vt100.
   
   The system posts a number of messages, and then installation starts. Once installation starts, you can use the arrow and Tab keys to navigate the presented options. You can select an option from a menu using the Enter key or the highlighted character key, and you can toggle select boxes on or off using the spacebar.
4. Respond to the installation script prompts for the following information:
   • You can specify a syslog server if you want a log of the installation process. Type the IP address of the syslog server you want to use, or continue without typing an IP address if you do not want to specify a syslog server.

     Note: The syslog option is not present when the controlling terminal is the console. You see this option only when you are performing the installation through an SSH connection.

   • After the syslog screen, you are prompted for an installation server URL or path.
     The installation script provides the information about the installation server you created. We recommend you use the installation server found by the installation script. The format for the URL is: http://<installserver>/cdserver or nfs://<installserver>/cdserver
   • You are then prompted for the installation location. An installation location is a portion of a drive with adequate space required for an installation. If the hardware supports multiple installation locations, you can create more than one installation by installing the software on each location. At boot time, you can select which installation you want to boot. To install on multiple installation locations, follow the on-screen instructions.
   • Next, you have the option to roll forward any supported configurations (config.ucs files) found on the system. If you are installing this software on a system that contains a version 4.x version of BIG-IP software, you should have already saved a UCS in the procedure Saving and backing up existing BIG-IP system configuration data.
5. After responding to each prompt, review the installation options you have selected. Select Yes on the final BIG-IP system installation screen to begin installing.

The software takes only a few minutes to install. Once the installation is complete, the unit reboots to the installation in slot 0 or CF (CompactFlash^®). You can use the switchboot utility to specify which installation you want to boot by default. For more information about the switchboot utility, see Using the switchboot utility.

[ Top ]

Adding an IP address to the management interface using the config command

After you complete the installation of the software, and before you license the software, run the config command to configure an IP address, net mask, and gateway on the management port (MGMT). The config command is a command line utility created for this purpose. You can run the config command from the serial console you used during installation.

To run the config command, type the following command:

config

After you run this utility and add an IP address, net mask, and gateway to your management port, you can log on to the browser-based Configuration utility, and license the unit.

[ Top ]

Licensing the software using the browser-based Configuration utility

Before you can convert your configuration files or configure the system, you must license the version 9.3 software. To activate the license for the system, you must have a base registration key. The registration key is a 27-character string that lets the license server know which F5 products you are entitled to license. If you do not already have a registration key, you can obtain one using the dossier from a licensed version 4.x system (http://license.f5.com). For details, see Obtaining a version 9.x registration key.

To activate the license using the browser-based Configuration utility

1. Open a web browser on a work station attached to the network on which you configured the management port. If you have not configured this IP address, see Adding an IP address to the management interface using the config command.
2. Type the following URL in the browser, where <IP address> is the address you configured for the management port (MGMT):

   https://<IP address>/

3. At the password prompt, type the default user name admin and the default password admin, and click OK.
   The Licensing screen of the browser-based Configuration utility opens.
4. To begin the licensing process, click the Activate button.
   Follow the on-screen prompts to license the system. For additional information, click the Help tab.
5. Once you have activated the license, STOP.
   DO NOT continue with the Setup utility if you want to use the One-Time Conversion Utility (OTCU) to convert your version 4.x configuration files. For more information see Converting the BIG-IP system configuration data using the OTCU.

Note: If you create a stand-alone Global Traffic Manager installation or a Local Traffic Manager/Global Traffic Manager installation, after licensing the Global Traffic Manager, the system requests that you perform a software reboot. This statement is intended to indicate that you should restart the system (such as through the command bigstart restart before moving the system into a production environment.

[ Top ]

Converting the BIG-IP system configuration data using the OTCU

After you install and license the 9.3.1 software, you can configure the 9.3.1 system from scratch, or you can convert the existing configuration you rolled forward on the system. If you want to configure the new software from scratch, you can skip this step. This section describes how the OTCU works.

To convert your existing version 4.x configuration files to 9.x configuration files, you use the One-Time Conversion Utility (OTCU). The OTCU parses version 4.x configuration files and uses the data to create a 9.x configuration database. Due to the complexity of the 9.3.1 release, and differences in the version 4.x and 9.3.1 feature sets (which depend on your configuration), the OTCU may produce some unexpected results. We ask that you use the OTCU as a starting point for converting your version 4.x configuration files. Keep in mind that, in most cases, you will need to examine the resulting configuration files, troubleshoot the contents, and make adjustments where necessary. To view an example of a converted file, see conversion example. The following notes are to help you understand the conversion process and interpret the output of the OTCU.

When you run the OTCU, the files in /otcu.ucs are extracted and placed in /var/tmp/otcu_4.x. These files remain in their original state. They are not altered during the conversion process. Selected files used for the upgrade are moved into /var/tmp/otcu_9.3.1. For example, /etc/hosts is moved to /var/tmp/otcu_9.3.1/etc/hosts . After the files are moved, they are converted as much as possible into the version 9.x format and then placed in the version 9.x system. After the conversion is complete, the /otcu.ucs is renamed to /renamed_otcu.ucs. Renaming the file prevents you from being prompted to run the OTCU every time you start the system.

During this process a log file is created and saved as /var/tmp/otcu.log. This file contains everything printed on screen during the installation. This information is useful for understanding what files are converted, and for reviewing or troubleshooting the resulting configuration. The files in /var/tmp/otcu_9.3.1 remain in the state they were in before being moved to the version 9.3.1 system.

If you want to refer to your version 4.x configuration files, these files are saved in /var/tmp/otcu_4.x. The /var/tmp/otcu_4.x_miscellaneous directory may contain some version 4.x files that are not carried forward during the conversion that may be of interest to you. This could include the version 4.x license file, inetd.conf file, openssl.conf file, or monitor files that were not converted. You can also find these with the rest of the files located in /var/tmp/otcu_4.x, however they are moved here for convenience.

Warning: You should run the OTCU only one time. If you need to run the OTCU again, we recommend that you reinstall version 9.3.1 and then run the OTCU.

The following version 4.x files are removed during the conversion:

/config/default_base.conf (no user alert)
/config/bigconfig/openldap.conf
/etc/master.passwd
/etc/ssh_host_key (no user alert)
/etc/ssh_host_key.pub (no user alert)
/etc/ssh_config (no user alert)
/etc/sshd_config (no user alert)
/etc/ssh2/hostkey (no user alert)
/etc/ssh2/hostkey.pub (no user alert)
/etc/ssh2/ssh2_config (no user alert)
/etc/ssh2/sshd2_config (no user alert)
/etc/ipfw.conf
/etc/ipfw.filt
/etc/ipfwrate.conf
/etc/ipfwrate.filt
/etc/rateclass.conf
/etc/snmptrap.conf (no user alert)
/etc/rc.local (no user alert)
/etc/syslog.conf (no user alert)
/root/.bash_profile.local
/root/.bashrc.local
/root/.cshrc.local
/root/.profile.local
/etc/login.conf (no user alert)
/usr/local/www/bigipgui/.users (no user alert)
/config/bigconfig/slapd.txt (no user alert)
/etc/rc.sysctl
/etc/irs.conf, /etc/irs.conf.dns, /etc/irs.conf.nodns (no user alert)

The following version 4.x files are moved forward with no conversion:

/etc/ntpd.conf
/etc/resolv.conf
/etc/hosts
/etc/hosts.allow
/etc/hosts.deny
/etc/ntp.conf
/config/ssh/ssh_host_key
/config/ssh/ssh_host_key.pub
/config/ssh/ssh_host_dsa_key
/config/ssh/ssh_host_dsa_key.pub
/root/.ssh/id_dsa.pub (no user alert)
/root/.ssh/id_dsa (no user alert)
/root/.ssh/identify.pub (no user alert)
/root/.ssh/identify (no user alert)
/root/.ssh/authorized_keys (no user alert)
/root/.ssh/authorized_keys2 (no user alert)
/root/.ssh/known_hosts (no user alert)
The following table lists the files that are moved and converted during the OTCU process.

Using the command line utility to run the OTCU

Use the following procedure to convert your existing version 4.x configuration data to version 9.x.

Note: If at any point you want to go back to version 4.x you must re-install the version 4.x software. For information on how to install the version 4.x software, please refer to the associated release notes. For instructions on how to reinstall your previous version 4.x configuration files, see SOL3135: Backing up and restoring BIG-IP or 3-DNS configuration files.

1. From the command line, type the following command:

   otcu

   This command starts the utility that converts the version 4.x configuration files.
2. Follow the on-screen instructions to complete the conversion.
   The utility prompts you for the following information:
   • The time zone
   • The root password
   • Consolidate profiles
   • Rename virtual servers, profiles, pools, and SNAT pools
   Once the 9.x conversion is complete, the files are moved to their correct locations and loaded.
3. After you you have reviewed the log files and are completely satisfied with the resulting configuration, you can remove all conversion files from the system by typing the following command:

   otcu_cleanup

[ Top ]

Running the profile consolidator and config renamer

If you skipped the step to consolidate profiles and rename virtual servers, profiles, pools, and SNAT pools, you can run the consolidation utility by typing the following command:

profile_consolidator /config/bigip.conf

You can run the renaming utility by typing the following command:

config_renamer /config/bigip.conf

Note: In order for the renaming to take effect, you must reload the configuration file.

[ Top ]

Contacting F5 Networks

For additional information, please visit http://www.f5.com

Copyright © 2007, F5 Networks, Inc., Seattle, Washington.  All rights reserved. 
F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, iControl, Internet Control Architecture, IP Application Switch, iRules, OneConnect, Packet Velocity, SYN Check, Control Your World, ZoneRunner, uRoam, FirePass, TrafficShield, Swan, WANJet, WebAccelerator, and TMOS are registered trademarks or trademarks, and AskF5 is a service mark, of F5 Networks, Inc., in the U.S. and certain other countries. All other trademarks mentioned in this document are the property of their respective owners. F5 Networks' trademarks may not be used in connection with any product or service except as permitted in writing by F5.

This product protected by U.S. Patents 6,311,278, 6,374,300; 6,473,802; 6,505,230; 6,640,240; 6,772,203; 6,970,933; 7,113,962; and 7,114,180. Other patents pending.