f5devcentral / f5-big-iq-pm-team

BIG-IQ Product Management Team Repository

F5 BIG-IQ Product Management Team: Tools

This GitHub Repository is managed by the F5 BIG-IQ Product Management Team.

Bugs and Requests for enhancements can be made by opening an Issue within the repository.

Tools	Description
f5-bigiq-as3-rpm-update	This script will help you to update AS3 on BIG-IQ. Check K54909607 for more details.
f5-bigiq-do-rpm-update	This script will help you to update DO on BIG-IQ. Check K54909607 for more details.
f5-bigiq-connectivityChecks	This script will run a sequence checks to verify connectivity between BIG-IQ CM, DCD and BIG-IPs.
f5-bigiq-dcd-health-checks	This scirpt will run sequence of checks on the BIG-IQ DCD(s).
f5-bigiq-SSLcertKeyCRLimportTool	Automate import of SSL Cert, Key & CRL from BIG-IP to BIG-IQ. /!\ This feature is available in BIG-IQ 7.0 /!\
f5-bigiq-licenseUtilityReport	Utility Billing Report - Generate a usage report for your utility license(s) and provide to F5, Inc. for billing purposes. /!\ This feature is available in BIG-IQ 6.1 /!\
f5-bigiq-f5sanitizeUsageReport	Script to obfuscated IP/MAC addresses and Hostnames from a BIG-IQ JSON report. /!\ This feature is available in BIG-IQ 6.1 /!\
f5-bigiq-syncSharedAFMobjectsTool	Script to export AFM objects (port lists, address lists, rule lists, policies and policy rules) from 1 BIG-IQ to another.
f5-bigiq-branchRuleManager	This script will allow you to set advanced expression for branch rules in access policies (per-session and per-request).
f5-bigiq-deleteOrphanObjects-apm	This script will identify and delete orphan APM objects on BIG-IQ (Access Policy Manager).
f5-bigiq-ssl-vpn-split-tunneling-and-ipv4exclude-addresses	This script will update IPv4 Exclude Address Space for all the Network Access objects for new IP Address list in the given Access Group on the BIG-IQ.
f5-bigiq-unreachable-device-license	This powershell script will help you to get a license for an unreachable BIG-IP device from a License Pool on BIG-IQ.
f5-bigiq-generate-cert-with-SAN	This bash script will help you to generate self signed cert with IP address in SAN field.
f5-bigiq-ansible-runner	Run Ansible in a docker container on BIG-IQ.

f5-big-iq-pm-team's Issues

remove <current RPM>

Just used the script and it works great.

The only confusing part was actually in the README.

When upgrading BIG-IQ with the new AS3 package the description says "./as3_rpm_update_bigiq.sh "

My experience is that only defining the newRPM is enough to be successful. Can you please update and remove the

btw. just using the script ./as3_rpm_update_bigiq.sh returns an explanation how to use the script. I like that.

No such file or directory

I cannot get script to run:

root@(BIG_IQ_CM)(cfg-sync Standalone)(Active)(/Common)(tmos)# show sys version

Sys::Version
Main Package
Product BIG-IQ
Version 8.1.0.1
Build 0.0.30
Edition Point Release 1
Date Fri Aug 6 09:51:34 PDT 2021
[root@BIG_IQ_CM:Active:Standalone] scripts # ls -al
total 24
drwxr-xr-x. 2 root root 4096 Sep 16 07:54 .
drwxr-xr-x. 31 root root 4096 Sep 16 07:32 ..
-rwxr-xr-x. 1 root root 15390 Sep 16 07:51 f5_network_connectivity_checks.sh
[root@BIG_IQ_CM:Active:Standalone] scripts # pwd
/shared/scripts
[root@BIG_IQ_CM:Active:Standalone] scripts # bash
[root@BIG_IQ_CM:Active:Standalone] scripts # ./f5_network_connectivity_checks.sh
: No such file or directory

Bash script errors on BIG-IQ 8.2.0.1

[root@BIG-IQ:Active:Standalone] scripts # bash ./f5_network_connectivity_checks.sh root root
./f5_network_connectivity_checks.sh: line 4: $'\r': command not found
./f5_network_connectivity_checks.sh: line 20: $'\r': command not found
./f5_network_connectivity_checks.sh: line 33: $'\r': command not found
./f5_network_connectivity_checks.sh: line 36: $'\r': command not found
./f5_network_connectivity_checks.sh: line 42: $'\r': command not found
./f5_network_connectivity_checks.sh: line 45: $'\r': command not found
./f5_network_connectivity_checks.sh: line 112: syntax error near unexpected token $'{\r'' '/f5_network_connectivity_checks.sh: line 112: function connection_check() {

F5 connectivity check script issue

BIG-IQ version 8.2.0.1, 2* BIG-IQ CMs and 6*BIG-IQ DCDs

the script aborted with following error:
./f5_network_connectivity_checks.sh: line 255: dcdip2[$i]: unbound variable

Could you check and let me know?

specify Identity file in f5-bigiq-connectivityChecks

Could we add cli args to the bash script to allow the use of private keys?
e.g:

 ./f5_network_connectivity_checks.sh -i ~/.ssh/key -u sshuser

i noticed the SSH by default didn't have the option, so the tests fail for me.

  ssh -o StrictHostKeyChecking=no -o CheckHostIP=no -f root@$1 'nohup sh -c "( ( nc -vl 2224 &>/dev/null) & )"'

suggested:

keyArg = $1
userArg = $2

  ssh $keyArg -o StrictHostKeyChecking=no -o CheckHostIP=no -f $userarg@$1 'nohup sh -c "( ( nc -vl 2224 &>/dev/null) & )"'

The notes say the failures don't apply to my tmos release version, so should I just ignore them?

portcmbigip[1]=22,tcp # Only required for BIG-IP versions 11.5.0 to 11.6.0

f5_network_connectivity_checks: Question

BIG-IQ version 8.2.0.1, 2* BIG-IQ CMs and 6*BIG-IQ DCDs

At the question: BIG-IQ DCD Discovery/Listener IP address(es)?
What do you mean? Should we enter the Discovery AND Listener IP of each DCD?

At the question: BIG-IQ DCD Data Collection IP address(es)?
What IP are you referring to? there are only 4 possible IPs: Mgmt, Discovery, Listener and Cluster.

remove currentRPM from the upgrade cmd

Just used the script and it works great.

The only confusing part was actually in the README.

When upgrading BIG-IQ with the new AS3 package the description says "./as3_rpm_update_bigiq.sh "

My experience is that only defining the newRPM is enough to be successful. Can you please update and remove the

btw. just using the script ./as3_rpm_update_bigiq.sh returns an explanation how to use the script. I like that.

Cloud-init on BIG-IQ

Hi, is there any possibility to add cloud-init to big-iq ve image? Are you planning to add this?