Escolar Documentos
Profissional Documentos
Cultura Documentos
Any other products, services, or company names referenced herein may be trademarks of their respective owners with no endorsement or
affiliation, express or implied, claimed by F5.
These training materials and documentation are F5 Confidential Information and are subject to the F5 Networks Reseller Agreement. You
may not share these training materials and documentation with any third party without the express written permission of F5.
The F5 vLab (virtual lab environment) is an F5-community supported tool. Please DO NOT contact F5 Support for assistance with the vLab.
For help with the setup of the vLab or running a demonstration, you should contact your F5 Channel Account Manager (CAM).
Part 1 – Configuring VMware Workstation
→NOTE: These exercises are tested for VMware Workstation version 10. There may be issues
with previous versions.
You need to purchase a VMware Workstation license; however, you have 30 days to use
the trial version.
Launch VMware Workstation, and then select Edit > Virtual Network Editor.
Remove any existing VMnet Networks except for VMnet0.
Click the Add Network button, and add VMnet1, VMnet2 and VMnet3.
Select VMnet1, and configure as follows:
o Select the Host-only (connect VMs internally in a private network) option.
o Select the Connect a host virtual adapter to this network checkbox.
o Leave the Use local DHCP service to distribute IP address to VMs checkbox selected.
o In the Subnet IP field enter 10.1.1.0,
o In the Subnet mask field enter 255.255.255.0.
o Click the DHCP Settings button.
o Change the Start IP address to 10.1.1.150 and the End IP address to 10.1.1.160, and then
click OK.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 3
Part 1 – Configuring VMware Workstation
→NOTE: You will use this network to access the BIG-IP management interface.
This configures your local workstation with a VMware Network Adapter VMnet1 IP address within the
10.1.1.0 network.
Select VMnet2 and configure as follows:
o Select the NAT (shared host’s IP address with VMs) option.
o Select the Connect a host virtual adapter to this network checkbox.
o Leave the Use local DHCP service to distribute IP address to VMs checkbox selected.
o In the Subnet IP field enter 10.1.10.0.
o In the Subnet mask field enter 255.255.255.0.
o Click the NAT Settings button.
o In the Gateway IP field enter 10.1.10.2, and then click OK.
o Click the DHCP Settings button.
o Change the Start IP address to 10.1.10.150 and the End IP address to 10.1.10.160, and then
click OK.
→NOTE: These NAT settings enable the BIG-IP VE system reach the Internet through your
workstation’s network adapter.
This configures your local workstation with a VMware Network Adapter VMnet 2 IP address within
the 10.1.10.0 network.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 4
Part 1 – Configuring VMware Workstation
Select VMnet3, and configure as follows:
o Select the Host-only (connect VMs internally in a private network) option.
o Clear the Connect a host virtual adapter to this network checkbox.
o Clear the Use local DHCP service to distribute IP address to VMs checkbox.
o In the Subnet IP field enter 10.1.20.0.
o In the Subnet mask field enter 255.255.255.0.
→NOTE: Ensure that the “Connect a host virtual adapter to this network” checkbox is cleared.
This prevents your local PC from having direct access to the internal network.
Click OK.
Your local workstation should not receive a VMware Network Adapter VMnet3 IP address.
Open a command prompt and type:
ipconfig
Use the table below to note the IP addresses for your VMnet adapters.
Adapter IPv4 Address
VMnet1
VMnet2
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 5
Part 1 – Configuring VMware Workstation
Click the best download link for your location.
Save the file to a directory on your local workstation.
→NOTE: Ensure the location of this directory has at least 6GB of free disk space.
→NOTE: You can use the Windows 7 image instead of your own workstation to prevent installing
agents on your own workstation. In addition, all browsers and utilities needed for
hands-on exercises or customer demonstrations have already been configured on this
image. In order to use the Windows 7 image it is expected that you have a valid
Microsoft license key.
Unzip each downloaded file in the local directory you created earlier in this task.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 6
Part 1 – Configuring VMware Workstation
After the import completes, select BIGIP_A_v13.0 from the Library menu, and then
click Edit virtual machine settings.
For Hard Disk 2 (SCSI), ONLY IF the current value is less than 20 GB, select Hard Disk (SCSI), and then on
the right-side of the window go to Utilities > Expand, then set the Maximum disk size (GB) to 20, and
then click Expand.
Map the network adapters to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: VMnet1 (Host-only) Management port access
Network Adapter 2 Custom:VMnet2 (NAT) Used for the external self IP address
Network Adapter 3 Custom: VMnet3 Used for the internal self IP address
Network Adapter 4 Bridged (Automatic) Not used; clear the Connect at power on
checkbox
Click OK.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 7
Part 1 – Configuring VMware Workstation
Select LAMP_4 from the Library menu, and then click Edit virtual machine settings.
Map the network adapters to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: Communicates with the management port
VMnet1 (Host-only)
Network Adapter 2 Custom: VMnet3 Communicates within the internal VLAN
Click OK.
Select LAMP_4 from the Library menu, and then click Power on this virtual machine.
If prompted, click “I copied it”.
After the image powers on, within the VMware window on the LAMP desktop, leave the Xubuntu user
account selected and click Login.
Click the Applications Menu icon on the top-left of the screen and go to Settings > Settings Manager.
Click Save.
Select Wired connection 3, and then click Edit.
From the Device MAC address list box, select the MAC address for eth1, and then click Save.
Delete Wired connection 2 and Wired connection 4.
→NOTE: The wired connection entries will not be removed from the Network Connections list
until you reboot the image.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 8
Part 1 – Configuring VMware Workstation
Right-click LAMP_4 in the Library menu and select Snapshot > Take Snapshot.
Name the snapshot LAMP_4_Clean, and then click Take Snapshot.
Click OK.
Right-click Windows_7_External in the Library bar and select Snapshot > Take Snapshot.
Name the snapshot Windows_7_External_Clean, and then click Take Snapshot.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 9
Part 1 – Configuring VMware Workstation
Right-click Windows_7_Internal in the Library bar and select Snapshot > Take Snapshot.
Name the snapshot Windows_7_Internal_Clean, and then click Take Snapshot.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 10
Part 2 – Configuring the BIG-IP VE
Click BIGIP_A_v13.0 from the Library menu, and then click Power on this virtual machine
After the BIG-IP VE system has powered on, you are presented with the localhost login screen.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 11
Part 2 – Configuring the BIG-IP VE
→NOTE: You can generate up to 9 BIG-IP trial licenses each year. Each license is good for 90 days.
However, you are only able to submit a request 3 times each year. Therefore, it is
recommended that each time you request a trial license you request the maximum of 3
licenses per request.
Use an SSH session to access 10.1.1.245, and log in using the following credentials:
Username: root
Password: default
Copy the following TMSH commands and then paste them at the CLI prompt. You can copy and paste all
lines together.
tmsh create net vlan external interfaces add { 1.1 { untagged } }
tmsh create net vlan internal interfaces add { 1.2 { untagged } }
tmsh create net self 10.1.10.241 address 10.1.10.241/24 vlan external allow-service add { tcp:443 }
tmsh create net self 10.1.20.241 address 10.1.20.241/24 vlan internal allow-service default
tmsh create net route Default_Gateway network 0.0.0.0/0 gw 10.1.10.2
tmsh save sys config
exit
Task 4 – Access the BIG-IP VE System and Complete the Setup Utility
Use a web browser to access the management port of your BIG-IP system, and then complete the steps of the
Setup Utility, including activating the BIG-IP system.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 12
Part 2 – Configuring the BIG-IP VE
In the Setup Utility, in the Base Registration Key field, paste the registration key text.
For Activation Method, select Manual, and then click Next.
Select and copy all of the dossier text to your clipboard. (NOTE: Use Ctrl + A and then Ctrl + C.)
Select Click here to access F5 Licensing Server.
On the Activate or Upgrade BIG-IP page, click Activate License.
Paste the dossier text in the field, and then click Next.
Select to accept the legal agreement, and then click Next.
Select and copy all of the license key text to your clipboard (NOTE: Use Ctrl + A and then Ctrl + C.),
and then close the Activate F5 Product page.
On the Setup Utility > License page, paste the license key text into the Step 3: License field, and then
click Next.
The BIG-IP VE system configuration updates. This takes several seconds.
After the configuration changes complete, log in to the BIG-IP VE system.
On the Resource Provisioning page leave Local Traffic (LTM) as the only provisioned module and
click Next.
On the Device Certificates page click Next.
On the Platform page, configure these settings using the following information, and then click Next.
Host Name bigipA.f5demo.com
Root Account (Password and Confirm) default
Admin Account (Password and Confirm) admin
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 13
Part 2 – Configuring the BIG-IP VE
In the Internal Network Configuration and Internal VLAN Configuration sections, configure the
highlighted settings using the following information, and then click Next.
Self IP: Address 10.1.20.241
Self IP: Netmask 255.255.255.0
Self IP: Port Lockdown Allow Default
Floating IP: Address 10.1.20.240
Floating IP: Port Lockdown Allow Default
Interfaces 1.2 (untagged)
In the External Network Configuration and External VLAN Configuration sections, configure the
highlighted settings using the following information, and then click Finished.
External VLAN Create VLAN external
Self IP: Address 10.1.10.241
Self IP: Netmask 255.255.255.0
Self IP: Port Lockdown Allow 443
Default Gateway 10.1.10.2
Floating IP: Address 10.1.10.240
Floating IP: Port Lockdown Allow 443
VLAN Interfaces 1.1 (untagged)
On the High Availability Network Configuration page, configure the highlighted settings using the
following information, and then click Next.
High Availability VLAN Select existing VLAN
Select VLAN internal
Self IP: Address 10.1.20.241
Self IP: Netmask 255.255.255.0
VLAN Interfaces 1.2 (untagged)
On the Network Time Protocol Configuration page, enter10.1.20.252, then click Add, and then
click Next.
On the Domain Name Server Configuration page, enter 4.2.2.2 and then click Add.
Select the 10.1.1.1 entry, then click Delete, and then click Next.
On the ConfigSync Configuration page, leave 10.1.20.241 (internal) selected and click Next.
On the Failover Unicast Configuration page, leave the default settings and click Next.
On the Mirroring Configuration page, leave the default settings and click Next.
On the Active/Standby Pair page, under Advanced Device Management Configuration click Finished.
Open the Network > Self IPs page and click 10.1.10.241.
Add TCP port 22 to the Custom List and click Update.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 14
Part 2 – Configuring the BIG-IP VE
Open the System > Preferences page and modify the following, and then click Update.
o Records Per Screen: 25
o Idle Time Before Automatic Logout: 100000 seconds
o Security Banner Text:
Welcome to the F5 BIG-IP VE (Virtual Edition) vLab environment.
The vLab environment is intended for F5 Networks training and demonstration purposes only.
You are not authorized to distribute the vLab to any other parties.
Open the System > Certificate Management > Traffic Certificate Management > SSL Certificate List page
and click Import.
From the Import Type list box, select Certificate.
In the Certificate Name field, type f5demo_2017, and then click the Browse button.
Navigate to the Documents\Exercise_Files folder, select the vlab.f5demo.com.2017.pem file, and then
click Open.
Click Import.
Click the Import button again, and then from the Import Type list box, select Key.
In the Key Name box, type f5demo_2017, and then click the Browse button.
Select the vlab.f5demo.com.2017.key file, and then click Open.
Click Import.
Click the Import button again, and then from the Import Type list box, select Certificate.
In the Certificate Name box, type chain_2017, and then click the Browse button.
Select the entrust-chain.txt file, and then click Open.
Click Import.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 15
Part 2 – Configuring the BIG-IP VE
Open the Local Traffic > Profiles > SSL > Client page, and then click Create.
Name the profile f5demo_client.ssl.
For Certificate Key Chain select the Custom checkbox, and then click Add.
Use following information: (NOTE: Copy and paste the pass phrase.)
Certificate f5demo_2017
Key f5demo_2017
Chain chain_2017
Pass Phrase IamFfive2Day
Click Add.
Click Finished.
WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 16