Hello there, 

We need to move from IDG X1 to IDG X3 both for Datapower (MPG, WS, ...) and APIC Gateway. Concerning MPG & more, it's simple, we restored Domains, configured all Ethernet Interface with exactly the same IP adresses as X1. The plan will be to stop all domains & ethernet Interface on X1 and plug all Network Cables on the new one, the X3. 

We already did it in the past and it's ok, no pb. 

But right now we have apic domains on X1 and my question is : If I do exactly the same, except TLS Certificates, will APIC_Management repopulate every API & configuration on the new one ? 

If not, do you have suggestion such as recreate the APIC Domain and redeploy all Products ? 

Thanks a lot. 

Cyril.

Hi Cyril,

I would think that if you replace your old IDGs (reusing IP addresses and such) with the new IDG X3 one at a time, including the APIC domains and static configurations/certificates, you should be able to rely on the cluster rebuilding the configuration on the new IDG X3 each time. 

Then wait until the configuration has synched onto the new appliance before replacing the second and then finally the third appliance.

You could also just build a completely new gateway cluster for APIC and configure APIC to use the new cluster.

The first way should be able to complete the upgrade with no downtime I think, although it might be sensible to ask the question of IBM by opening a case.

The objective is to keep quorum in the cluster at all times.

It is similar to doing an upgrade, where you would also do it one at a time.

Also, like an upgrade, move the primary Gateway Peers onto a single machine before starting the replacements. Do the primary last, and move the primary to one of the replacements before completing the last replacement.

Regards,

Hello there, 

We need to move from IDG X1 to IDG X3 both for Datapower (MPG, WS, ...) and APIC Gateway. Concerning MPG & more, it's simple, we restored Domains, configured all Ethernet Interface with exactly the same IP adresses as X1. The plan will be to stop all domains & ethernet Interface on X1 and plug all Network Cables on the new one, the X3. 

We already did it in the past and it's ok, no pb. 

But right now we have apic domains on X1 and my question is : If I do exactly the same, except TLS Certificates, will APIC_Management repopulate every API & configuration on the new one ? 

If not, do you have suggestion such as recreate the APIC Domain and redeploy all Products ? 

Thanks a lot. 

Cyril.

Hello Casey,

Thanx for answer ;) 

SO I have two options : 

-> First, do what I said, simply disconnect the old Gateway and reconnect on the new one after configure everything,
-> Second, add the new gateway onto the APIC Cluster and configuring peering. Right ? 

For the second option the only thing which let me try the first one is the difference version between the old one (2018.4.1.17) and the new one (v10.) (even If I know that APIs are working fine from 2018 APIC to a v10 Gateway (tested it on a sandbox gateway) but I prefer to try network option ;) ) 

I'll let know here how it worked. 

Cyril 

Hi Cyril,

I would think that if you replace your old IDGs (reusing IP addresses and such) with the new IDG X3 one at a time, including the APIC domains and static configurations/certificates, you should be able to rely on the cluster rebuilding the configuration on the new IDG X3 each time. 

Then wait until the configuration has synched onto the new appliance before replacing the second and then finally the third appliance.

You could also just build a completely new gateway cluster for APIC and configure APIC to use the new cluster.

The first way should be able to complete the upgrade with no downtime I think, although it might be sensible to ask the question of IBM by opening a case.

The objective is to keep quorum in the cluster at all times.

It is similar to doing an upgrade, where you would also do it one at a time.

Also, like an upgrade, move the primary Gateway Peers onto a single machine before starting the replacements. Do the primary last, and move the primary to one of the replacements before completing the last replacement.

Regards,

Hello there, 

We need to move from IDG X1 to IDG X3 both for Datapower (MPG, WS, ...) and APIC Gateway. Concerning MPG & more, it's simple, we restored Domains, configured all Ethernet Interface with exactly the same IP adresses as X1. The plan will be to stop all domains & ethernet Interface on X1 and plug all Network Cables on the new one, the X3. 

We already did it in the past and it's ok, no pb. 

But right now we have apic domains on X1 and my question is : If I do exactly the same, except TLS Certificates, will APIC_Management repopulate every API & configuration on the new one ? 

If not, do you have suggestion such as recreate the APIC Domain and redeploy all Products ? 

Thanks a lot. 

Cyril.

Hi Cyril,

when I wrote my answer, I foolishly assumed that you were not changing APIC or DP firmware versions, just replacing like for like.

If you are upgrading to a new firmware level and APIC version, you will need to follow the migration instructions for APIC from your old APIC version to the new APIC version, and most likely build a new gateway cluster for the new APIC instance.

The migration instructions for 2018 -> v10 are in the v10 manuals for the target APIC version (v10.0.5.x is the latest LTS release I believe). There are separate chapters under https://www.ibm.com/docs/en/api-connect/10.0.5.x_lts?topic=installing-maintaining-api-connect depending on the platform that you use to run APIC.

Regards,

Hello Casey,

Thanx for answer ;) 

SO I have two options : 

-> First, do what I said, simply disconnect the old Gateway and reconnect on the new one after configure everything,
-> Second, add the new gateway onto the APIC Cluster and configuring peering. Right ? 

For the second option the only thing which let me try the first one is the difference version between the old one (2018.4.1.17) and the new one (v10.) (even If I know that APIs are working fine from 2018 APIC to a v10 Gateway (tested it on a sandbox gateway) but I prefer to try network option ;) ) 

I'll let know here how it worked. 

Cyril 

Hi Cyril,

I would think that if you replace your old IDGs (reusing IP addresses and such) with the new IDG X3 one at a time, including the APIC domains and static configurations/certificates, you should be able to rely on the cluster rebuilding the configuration on the new IDG X3 each time. 

Then wait until the configuration has synched onto the new appliance before replacing the second and then finally the third appliance.

You could also just build a completely new gateway cluster for APIC and configure APIC to use the new cluster.

The first way should be able to complete the upgrade with no downtime I think, although it might be sensible to ask the question of IBM by opening a case.

The objective is to keep quorum in the cluster at all times.

It is similar to doing an upgrade, where you would also do it one at a time.

Also, like an upgrade, move the primary Gateway Peers onto a single machine before starting the replacements. Do the primary last, and move the primary to one of the replacements before completing the last replacement.

Regards,

Hello there, 

We need to move from IDG X1 to IDG X3 both for Datapower (MPG, WS, ...) and APIC Gateway. Concerning MPG & more, it's simple, we restored Domains, configured all Ethernet Interface with exactly the same IP adresses as X1. The plan will be to stop all domains & ethernet Interface on X1 and plug all Network Cables on the new one, the X3. 

We already did it in the past and it's ok, no pb. 

But right now we have apic domains on X1 and my question is : If I do exactly the same, except TLS Certificates, will APIC_Management repopulate every API & configuration on the new one ? 

If not, do you have suggestion such as recreate the APIC Domain and redeploy all Products ? 

Thanks a lot. 

Cyril.

Hello Neil 

Well ... I know about the migrating procedure 'cause we experienced it on our tech/sandbox environment but .. we had a problem because of our subsys 2018 with "_" in the name (ex : ak_mgmt), "_" is replaced by "-" in the procedure and because of this, security keys inside mgmt didn't work at all and we had a lot of work with support to restart everything in v10. 

It was a test one, it's something I really don't want to see in a real life ;) 
So I suppose I'll plan to create a full new APIC subsys and plug it on the new V10 IDG X3. 
Two (three?) options after that : 

--> trying to restore a backup inside ... I seriously doubt it ! 
--> recreate catalogs/security and redeployed everything (not hard but a long way to go) 
--> import ? But for this one I really don't know if it's possible to backup a full catalog to restore it on a new apic mgmt ! 

Hi Cyril,

when I wrote my answer, I foolishly assumed that you were not changing APIC or DP firmware versions, just replacing like for like.

If you are upgrading to a new firmware level and APIC version, you will need to follow the migration instructions for APIC from your old APIC version to the new APIC version, and most likely build a new gateway cluster for the new APIC instance.

The migration instructions for 2018 -> v10 are in the v10 manuals for the target APIC version (v10.0.5.x is the latest LTS release I believe). There are separate chapters under https://www.ibm.com/docs/en/api-connect/10.0.5.x_lts?topic=installing-maintaining-api-connect depending on the platform that you use to run APIC.

Regards,

Hello Casey,

Thanx for answer ;) 

SO I have two options : 

-> First, do what I said, simply disconnect the old Gateway and reconnect on the new one after configure everything,
-> Second, add the new gateway onto the APIC Cluster and configuring peering. Right ? 

For the second option the only thing which let me try the first one is the difference version between the old one (2018.4.1.17) and the new one (v10.) (even If I know that APIs are working fine from 2018 APIC to a v10 Gateway (tested it on a sandbox gateway) but I prefer to try network option ;) ) 

I'll let know here how it worked. 

Cyril 

Hi Cyril,

I would think that if you replace your old IDGs (reusing IP addresses and such) with the new IDG X3 one at a time, including the APIC domains and static configurations/certificates, you should be able to rely on the cluster rebuilding the configuration on the new IDG X3 each time. 

Then wait until the configuration has synched onto the new appliance before replacing the second and then finally the third appliance.

You could also just build a completely new gateway cluster for APIC and configure APIC to use the new cluster.

The first way should be able to complete the upgrade with no downtime I think, although it might be sensible to ask the question of IBM by opening a case.

The objective is to keep quorum in the cluster at all times.

It is similar to doing an upgrade, where you would also do it one at a time.

Also, like an upgrade, move the primary Gateway Peers onto a single machine before starting the replacements. Do the primary last, and move the primary to one of the replacements before completing the last replacement.

Regards,

Hello there, 

We need to move from IDG X1 to IDG X3 both for Datapower (MPG, WS, ...) and APIC Gateway. Concerning MPG & more, it's simple, we restored Domains, configured all Ethernet Interface with exactly the same IP adresses as X1. The plan will be to stop all domains & ethernet Interface on X1 and plug all Network Cables on the new one, the X3. 

We already did it in the past and it's ok, no pb. 

But right now we have apic domains on X1 and my question is : If I do exactly the same, except TLS Certificates, will APIC_Management repopulate every API & configuration on the new one ? 

If not, do you have suggestion such as recreate the APIC Domain and redeploy all Products ? 

Thanks a lot. 

Cyril.