Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

F5 BigIP LTM v11.5.3 Virtual Appliance HA Configuration - Part 1

4/9/2016

0 Comments

 
BIG-IP Virtual Edition (VE) is a version of the BIG-IP system that runs as a virtual machine. Supported modules include Local Traffic Manager, BIG-IP DNS (formerly Global Traffic Manager), Application Security Manager, Access Policy Manager, Application Acceleration Manager, Policy Enforcement Manager, Application Firewall Manager, and Analytics. BIG-IP VE includes all features of device-based BIG-IP modules running on standard BIG-IP TMOS, except as noted in release notes and product documentation. BIG-IP VE includes all features of device-based BIG-IP modules running on standard BIG-IP TMOS, except as noted in release notes and product documentation.
Note: The BIG-IP VE product license determines the maximum allowed throughput rate. To view this rate limit, you can display the licensing page within the BIG-IP Configuration utility.


There are some related posts in this site regarding F5 BigIP LTM configuration:
  • F5 BigIP LTM v11.5.3 Virtual Appliance Configuration - Part 1
  • F5 BigIP LTM v11.5.3 Virtual Appliance Configuration - Part 2
  • F5 BigIP LTM Basic Configuration Steps
  • F5 Big-IP 2500 Appliance System Initial Configuration
  • Download and Install F5 BIG-IP v11.x / Virtual Edition 11.3.x into Vmware Workstation
1. Download VE:

1.1 In a browser, open the F5 Support page (https://support.f5.com) or Downloads page (https://downloads.f5.com).
 photo 2016-04-02_9-54-09_zpsecf0mwam.png

If you have not already logged in, you must log in with your F5 support id, not F5 id, before proceeding to next step.
 photo 2016-04-02_9-54-44_zps8jzumzb7.png 


1.2 On the Downloads Overview page, select Find a Download.The Select a Product line screen opens.
 photo 2016-04-02_9-56-18_zpsze6xczsd.png


1.3 Under Product Line, select BIG-IP v12.x/Virtual Edition.The Select a Product Version and Container for BIG-IP V12.X/VIRTUAL EDITION screen opens. From the version list at the top of the screen, select the version number that you want to install. 

The screen lists the product containers for BIG-IP VE version you selected.
Under Name, select Virtual-Edition.

 photo 2016-04-02_9-57-08_zpsj1fasnh6.png 

1.4 The first time you select an option, the Software Terms and Conditions screen opens. Otherwise, the Select a Download screen opens. If the End User Software License is displayed, read through it and then click I Accept. 
The Select a Download screen opens.
Download the BIG-IP VE file package ending with scsi.ova for Vmware ESXi environment or ide.ova for Citrix Xen environment.

  photo 2016-04-02_9-58-14_zpsxfil2cd6.png 



 photo 2016-04-02_9-59-19_zpslpdqiidk.png 

2. Deploy VE

Check Virtual Edition and Supported Hypervisors Matrix before deployment.

2.1 Import into Vmware ESXi

Follow the screenshots to import OVA file into my lab environment Vmware ESXi 5.5. This lab are using default settings for CPU, Memory and Hard drive.
 photo 2016-04-02_10-46-28_zpspqkqq5g3.png 
 photo 2016-04-02_10-47-30_zpssp9qpvkg.png 
 photo 2016-04-02_10-48-04_zpsn83tqsdf.png 
 photo 2016-04-02_10-53-46_zpscwm4a1p7.png

Note: If Memory of VE is  4 GB or less

The following guidelines apply to VE guests provisioned with 4 GB or less of memory.
  • No more than two modules may be configured together.
  • AAM should not be provisioned, except as Dedicated.
 photo 2016-04-02_10-57-28_zpswszdgw3o.png 
 photo 2016-04-02_10-58-21_zpswk9yqilt.png
Network Settings are most critical parts for your VM environment.
Network adapter 1 - > F5's Management NIC  - > ESXi's VM Internet network.
Network adapter 2 - > F5's Internal NIC          - > ESXi's VM DMZ network
Network adapter 3 - > F5's External NIC         - > ESXi's VM Internal network
Network adapter 4 - > F5's HA NIC                 - > ESXi's VM LAN1

You will find topology with IP address details in next post:
  • F5 BigIP LTM v11.5.3 Virtual Appliance Configuration - Part 2
 
 photo 2016-04-02_10-58-50_zpsjyfkryr5.png 


2.2  Import into Citrix Xen
Similar steps in Citrix Xen server environment. Here are some screenshots from Citrix Xen Center:

 photo 2016-03-31_17-09-42_zps6nt8nk0x.jpg 
 photo 2016-03-31_17-10-28_zpsznbgjwp9.png 
 photo 2016-03-31_17-10-12_zpsvd3m9zsv.png

 photo 2016-03-31_17-10-44_zpsblthvdwg.png  


2.3 Start Virtual Appliance:

 photo 2016-03-31_17-11-31_zpsdxsgb8lz.png 
Note: If your VM is stuck at "grub loading stage 2" , you may need to add a serial port on your VM configuration. 
 photo 2016-03-31_17-11-08_zpsazabpjju.png 

3. Management Configuration

Log in as root with default as password for cli:


login as: root
Using keyboard-interactive authentication.
Password:default
Last login: Fri Apr  1 07:47:22 2016
[root@localhost:NO LICENSE:Standalone] config #
[root@localhost:NO LICENSE:Standalone] config # tmsh
root@(localhost)(cfg-sync Standalone)(NO LICENSE)(/Common)(tmos)# show sys version

Sys::Version
Main Package
  Product  BIG-IP
  Version  11.5.3
  Build    2.10.196
  Edition  Engineering Hotfix HF2
  Date     Thu Sep 24 12:44:06 PDT 2015

Hotfix List
ID515139-4   ID516075-5   ID527649-1   ID534630-3   ID491771-1  ID497564-5
ID495702-3   ID454086-4   ID526419-2   ID525595-1   ID512383-4  ID517872-2
...


Change Management IP from default 192.168.1.245/24 to your management zone ip


root@(localhost)(cfg-sync Standalone)(NO LICENSE)(/)(tmos.sys)# delete /sys management-ip 192.168.1.245/24

root@(localhost)(cfg-sync Standalone)(NO LICENSE)(/)(tmos.sys)# create /sys management-ip 10.94.12.26/24

root@(localhost)(cfg-sync Standalone)(NO LICENSE)(/Common)(tmos)# list /sys management-ip
sys management-ip 10.94.12.26/24 { }
root@(localhost)(cfg-sync Standalone)(NO LICENSE)(/Common)(tmos)# list /sys management-route
sys management-route default {
    gateway 10.94.12.1
    network default
}


Create a default route for management interface to 10.94.12.1
 photo 2016-03-31_16-26-49_zps9ixkrdrx.png

Log in Web GUI using admin/admin as username and password:

 photo 2016-04-02_10-39-30_zpsgfu8dcnq.png


Reference:

  • SOL15040: Configuring and displaying the management IP address for the BIG-IP system
  • F5 Big-IP 2500 Appliance System Initial Configuration



0 Comments



Leave a Reply.

    Categories

    All
    Architecture
    Blog
    Checkpoint
    Cisco
    Cloud
    CyberArk
    F5
    Fortigate
    Guardium
    Juniper
    Linux
    Network
    Others
    Palo Alto
    Qualys
    Raspberry Pi
    Security
    SIEM
    Software
    Vmware
    VPN
    Wireless

    Archives

    March 2024
    February 2024
    January 2024
    December 2023
    November 2023
    October 2023
    September 2023
    August 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    October 2019
    September 2019
    June 2019
    July 2018
    May 2018
    December 2017
    August 2017
    April 2017
    March 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Print Page:

    RSS Feed

    Email Subscribe
Powered by Create your own unique website with customizable templates.
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org