Platform Overview

Platform Overview

F5 r5000/r10000/r12000 Series models

F5 r5000/r10000/r12000 Series platforms are powerful systems that are designed specifically for application delivery performance and scalability.

The F5 r5000 Series platforms are available with either an AC, a standard DC, or a high-voltage DC (HVDC) configuration. HVDC power supply units (PSUs) are available as a field-installed upgrade option (part number PWR-0378-xx) only on r5000 Series platforms with a part number of 200-0411-xx.

The F5 r10000/r12000 Series platforms are available with either an AC, a standard DC, or a high-voltage DC (HVDC) configuration. HVDC power supply units (PSUs) are available as a field-installed upgrade option (part number PWR-0384-xx) only on r10000/r12000 Series platforms with a part number of 200-0413-xx.

The F5 r5000 (part number 203-0464-xx) and r10000 (part number of 203-0463-xx) Series platforms with either an AC, a standard DC, or a high-voltage DC (HVDC) configuration available and support only F5OS-A 1.8.4 or later software versions.

Warning: High-voltage DC (HVDC) power supply units (PSUs) are specially designed to operate at a DC voltage range from 180VDC to 400VDC, and they are NOT compatible with standard DC PSUs that operate from -44VDC to -72VDC. DO NOT attempt to install an HVDC PSU for standard DC PSU operations OR mix HVDC PSUs and DC PSUs in the same unit.

The F5 r5000 (r5000-DF) and r10000 (r10000-DF) Series platforms are available with a FIPS-validated hardware security module (HSM) as a factory-installed option. These platforms have dual solid-state drives (SSDs). For more information on managing FIPS platforms, see F5 Platforms: FIPS Administration at Documentation - F5OS-A and F5 rSeries.

Note: Verify the part number of your platform by logging in to the CLI of the system and typing this command:

Verify the part number of your platform by from the CLI

1. Connect to the system using a management console or console server. The default baud rate and serial port configuration is 19200/8-N-1.

2. Log in to the command line interface (CLI) of the system using an account with admin access.

   When you log in to the system, you are in user (operational) mode.

3. View the part number of your platform:

   Copy

   show components component platform state

   A summary to this example displays: In this example the new revision for the platform r5000 is displayed:

   Copy

   appliance-1# show components component platform state
   state description    r5900
   state serial-no      f5-tynv-itdy
   state part-no        "203-0464-00 REV B"
   state empty          false
   state tpm-integrity-status Valid
   state memory total    134725894144
   state memory available 9439006720
   state memory free     5881118720
   state memory used-percent 93
   state memory platform-total 16106782720
   state memory platform-used 6272737280
   state memory platform-used-percent 38
   state temperature current 17.8
   state temperature average 18.1
   state temperature minimum 17.8
   state temperature maximum 18.7
                                                                                           USED    
   AREA                          CATEGORY           TOTAL         FREE          USED         PERCENT 
   ---------------------------------------------------------------------------------------------------
   platform/sysroot              F5OS System        111606771712  83976163328   21937680384  20      
   platform/big-ip-tenant-disks  F5OS Tenant Disks  459252056064  435822940160  76701696     0       
   platform/images 

   In this example the old revision for the platform r5000 is displayed:

   Copy

   appliance-1# show components component platform state
   state description    r5900
   state serial-no      f5-oqhv-lkbc
   state part-no        "203-0411-05 REV B"
   state empty          false
   state tpm-integrity-status Unavailable
   state memory total    134725898240
   state memory available 9734971392
   state memory free     5664395264
   state memory used-percent 92
   state memory platform-total 16106786816
   state memory platform-used 5964849152
   state memory platform-used-percent 37
   state temperature current 24.7
   state temperature average 24.2
   state temperature minimum 23.3
   state temperature maximum 24.9
                                                                                           USED     
   AREA                          CATEGORY           TOTAL         FREE          USED         PERCENT  
   ---------------------------------------------------------------------------------------------------
   platform/sysroot              F5OS System        111606771712  83369607168   22544236544  21       
   platform/big-ip-tenant-disks  F5OS Tenant Disks  459252056064  428182343680  7717298176   1        
   tenant/bigiptenant9           BIG-IP Tenant      152471339008  144830750720  7640588288   5        
   tenant/defaultbip-1           BIG-IP Tenant      152471339008  145197432832  7273906176   4        
   platform/images               F5OS Images        114710360064  92504252416   16355475456  15

For more information, please see the data sheet at www.f5.com/services/resources/datasheets.

Platform overview

Before you install your F5 rSeries platform, review information about the controls and ports located on both the front and back of the platform.

On the front of the platform, you can use the LCD touchscreen to view information about, manage, and reset the system. You can also use the front-panel LEDs to assess the condition of the system.

1. 1000-BaseT capable management port
2. USB 3.0 port
3. Serial console port
4. Serial failover port *
5. 100G/40G QSFP+/QSFP28 ports (2)
6. 25G/10G SFP28/SFP+ ports (8)
7. Indicator LEDs
8. 2.2 inch LCD touchscreen

1. 1000-BaseT capable management port
2. USB 3.0 port
3. Serial console port
4. Serial failover port *
5. 100G/40G QSFP+/QSFP28 ports (2)
6. 25G/10G SFP28/SFP+ ports (8)
7. Indicator LEDs
8. 2.2 inch LCD touchscreen

1. 1000-BaseT capable management port
2. USB 3.0 port
3. Serial console port
4. Serial failover port *
5. 100G/40G QSFP28/QSFP+ ports (2)
6. 25G/10G SFP28/SFP+ ports (8)
7. 100G/40G QSFP28/QSFP+ ports (2)
8. 25G/10G SFP28/SFP+ ports (8)
9. Indicator LEDs
10. 2.2 inch LCD touchscreen

1. 1000-BaseT capable management port
2. USB 3.0 port
3. Serial console port
4. Serial failover port *
5. 100G/40G QSFP28/QSFP+ ports (2)
6. 25G/10G SFP28/SFP+ ports (8)
7. 100G/40G QSFP28/QSFP+ ports (2)
8. 25G/10G SFP28/SFP+ ports (8)
9. Indicator LEDs
10. 2.2 inch LCD touchscreen

1. 1000-BaseT capable management port
2. USB 3.0 port
3. Serial console port
4. Serial failover port *
5. 100G/40G QSFP28/QSFP+ ports (2)
6. 25G/10G SFP28/SFP+ ports (8)
7. 100G/40G QSFP28/QSFP+ ports (2)
8. 25G/10G SFP28/SFP+ ports (8)
9. Indicator LEDs
10. 2.2 inch LCD touchscreen

Note: * Serial (hardwired) failover is not supported by the F5OS-A software layer. If high availability (HA) failover is required, configure network failover between BIG-IP tenants.

The back of the r5000 Series platform includes one power supply unit (PSU), one power blank, and a chassis ground terminal. The dual PSU option is shown below.

1. Power input panel 1 (AC power receptacle)
2. Power input panel 2 (AC power receptacle)
3. Chassis ground terminal

1. Power input panel 1 (DC terminal)
2. Power input panel 1 (DC terminal)
3. Chassis ground terminal

1. Power input panel 1 (HVDC power receptacle)
2. Power input panel 2 (HVDC power receptacle)
3. Chassis ground terminal

The back of the r10000/r12000 Series platform includes a removable fan tray, two power supply units (PSUs), and a chassis ground terminal.

1. Fan tray (removable)
2. Power input panel 1 (AC power receptacle)
3. Power input panel 2 (AC power receptacle)
4. Chassis ground terminal

1. Fan tray (removable)
2. Power input panel 1 (DC terminal)
3. Power input panel 2 (DC terminal)
4. Chassis ground terminal

1. Fan tray (removable)
2. Power input panel 1 (HVDC power receptacle)
3. Power input panel 2 (HVDC power receptacle)
4. Chassis ground terminal

Hardware included with the platform

This platform includes all of the hardware components listed here.

Peripheral hardware recommendations

For each platform, you might need to provide additional peripheral hardware. If you plan to remotely administer the system, it would be helpful to have a workstation already connected to the same subnet as the management interface.

F5OS software on F5 rSeries

F5 rSeries platforms include a new software layer known as F5OS. F5OS is the operating system software for rSeries hardware, and it manages the configuration for software components, such as networking, tenants, and users.

For more information about installing and configuring F5OS on your F5 rSeries system, see these documents at Documentation - F5OS-A and F5 rSeries:

• F5 rSeries Systems: Getting Started
• F5 rSeries Systems: Software Installation and Upgrade
• F5 rSeries Systems: Administration and Configuration

LCD menus overview

The LCD touchscreen enables you to manage the platform without attaching a console or network cable. You can configure the display options to meet your needs.

To prolong the life of the backlight, the LCD will auto-dim the brightness when there has been no user activity for a period of 5 minutes. After an additional 10 seconds, the backlight will turn off entirely.

Touching anywhere on the LCD will restore the backlight to the operational brightness.

The LCD displays a splash screen by default. Tap the touchscreen to display the main menu, which displays options for navigating to the System, Health, Options, and Setup menus.

The LCD touchscreen also supports these modes:

Standard

Allows access to all options.

Secure

Allows access only to management and setup options. A padlock icon displays next to limited options.

Disabled

Does not allow access to any options and displays only an image to indicate that the LCD touchscreen is disabled.

Main menu

The main menu includes sections for accessing additional sub menus.

System menu

You can use the System menu to reboot, reset, halt, power off, or power on the system.

The available options vary depending on whether the LCD touchscreen is operating in secure or standard mode. For more information on configuring the modes, see LCD configuration overview. Approximate system boot time from power-on to login is 1 minute for both r5000 and r10000.

Health menu

You can use the Health menu to view active alarms, view the event log, and run LCD tests.

Options menu

You can use the Options menu to enable/disable the system locator LED and configure LCD brightness.

Setup menu

You can use the Setup menu to configure the management interface Always-On Management (AOM) management interface, and serial port baud rate.

Important: When using the LCD touchscreen to configure system or AOM management IP addresses, be sure to use the Commit option to save all settings.

System configuration from the LCD

To manage the platform using the LCD menu options, tap the touchscreen LCD to put it into menu mode. The LCD is operational even when the Host is powered off, provided that Always-On Management and the LCD are fully booted.

Important: It might take a few minutes for the LCD to become operational when the system is started from a powered off state.

When using the LCD to configure the unit, be sure to use the Commit option to save all settings.

View system information

You can use the touchscreen LCD to view a summary of system information.

Important: This is disabled for security purposes when the LCD user interface is in Secure Mode, as indicated by a padlock icon. It is also disabled when the current state of Secure Mode is unknown.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, swipe up to scroll down and tap System Info.

4. Expand the AOM Info and LCD Info sections by tapping the plus sign (+)

   

5. Tap Back to return to the previous screen.

Perform a soft reboot

You can use the touchscreen LCD to perform a soft reboot of the system.

Important: This is disabled for security purposes when the LCD user interface is in Secure Mode, as indicated by a padlock icon. It is also disabled when the current state of Secure Mode is unknown.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, swipe up to scroll down and tap Soft Reboot.

4. Tap Reboot. to confirm.

   

Perform a network reboot

You can use the touchscreen LCD to perform a network reboot of the system.

Important: This is disabled for security purposes when the LCD user interface is in Secure Mode, as indicated by a padlock icon. It is also disabled when the current state of Secure Mode is unknown.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, swipe up to scroll down and tap Network Reboot.

4. Tap Reboot. to confirm.

   

Shut down the system

You can use the touchscreen LCD to shut down and power off the system.

Important: This is disabled for security purposes when the LCD user interface is in Secure Mode, as indicated by a padlock icon. It is also disabled when the current state of Secure Mode is unknown.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, tap Shutdown.

4. Tap Shutdown. to confirm.

   

Perform a hard reset

You can use the touchscreen LCD to halt the unit.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, swipe up to scroll down and tap Hard Reset.

4. Tap Reset. to confirm.

   

Power off/on the unit

You can use the touchscreen LCD to power the unit off and on.

1. Touch the screen to activate the LCD menus.

   

2. Tap System

   The System screen displays.

   

3. On the System screen, swipe up to scroll down and tap Power Off or Power On.

4. Tap Power Off or Power On to confirm.

   

   

Run LCD tests

You can use the touchscreen LCD to verify LCD components, including the touchscreen, LCD backlight, F5 logo ball, and system LEDs.

1. Touch the screen to activate the LCD menus.

   

2. Tap Health.

   The Health screen displays.

   

3. On the Health screen, tap Run LCD Tests.

   The Touchscreen Test displays.

4. Tap Continue to begin the test.

   

5. Tap each of the nine Xs that display, in sequence.

   The test is complete after you have tapped all nine locations.

   

6. Next, you test the LCD backlight.

   Tap anywhere on the screen to verify that the backlight functions correctly.

   

7. Next, you test the logo ball.

8. Tap Yes if the logo ball is flashing.

   

9. Finally, you test the system LEDs (status, alarm, power 1, and power 2).

   You are prompted to verify each LED in sequence.

10. Tap Yes if each LED functions correctly.

    

11. When all tests have completed, on the Test complete screen, press OK to return to the Health menu.

    

Enable the system locator

You can use the touchscreen LCD to enable the system locator. This flashes the F5 logo ball, enabling you to more easily locate the system in your data center.

1. Touch the screen to activate the LCD menus.

   

2. Tap Options. The Options screen displays.

   

3. On the Options screen, tap Locator.

   When the locator is enabled, the logo ball will flash.

   

   When the locator is disabled, the logo ball will no longer flash.

   

Configure LCD brightness

You can use the touchscreen LCD to adjust the brightness of the display.

1. Touch the screen to activate the LCD menus.

   

2. Tap Options.

   The Options screen displays.

3. On the Options screen, tap Display Brightness.

4. Tap plus (+) and minus (-) to adjust the brightness of the LCD in real-time.

Configure DHCP for management addresses

You can use the touchscreen LCD to configure whether to use DHCP to assign management addresses. When DHCP is enabled, manual configuration of management IP addresses is disabled.

1. Touch the screen to activate the LCD menus.

   

2. Tap Setup.

   The Setup screen displays.

   

3. On the Setup screen, tap Management.

   The Management screen displays.

4. For DHCP, tap to enable (On) or disable (Off) DHCP.

   

5. Tap Commit.

Configure management IP addresses manually

You can use the touchscreen LCD to configure management IP addresses manually if you are not enabling DHCP.

1. Touch the screen to activate the LCD menus.

   

2. Tap Setup.

   The Setup screen displays.

   

3. On the Setup screen, tap Management.

   The Management screen displays.

4. For DHCP, ensure that it is disabled (Off)

   

5. For IPv4 or IPv6, tap to enable (On).

6. [Expand the IPv4 or IPv6 section by tapping the plus sign (+) .]

   

   

7. Tap IPv4 Address or IPv6 Address

8. Use the up and down arrows to increment/decrement values and the left and right arrows to select which octet to modify.

   

   

9. Click Save.

   The Management screen displays.

10. Tap Prefix Length.

11. Use the up and down arrows to increment/decrement values.

12. Click Save.

    The Management screen displays.

13. Tap IPv4 Gateway.

14. Use the up and down arrows to increment/decrement values and the left and right arrows to select which octet to modify.

    

    

15. Click Save.

16. Tap Commit.

Configure DHCP for the AOM management address

You can use the touchscreen LCD to configure whether to use DHCP to assign the Always-On Management (AOM) management address. For more information about AOM, see Always-On Management overview

When DHCP is enabled, manual configuration of the AOM management IP address is disabled.

1. Touch the screen to activate the LCD menus.

   

2. Tap Setup.

   The Setup screen displays.

   

3. On the Setup screen, tap AOM Management.

   The AOM Mgmt screen displays.

   

4. Expand the IPv4 or IPv6 section by tapping the plus sign (+).

5. For DHCP, tap to enable (On).

   

6. Tap Commit.

Configure the AOM management IP address manually

You can use the touchscreen LCD to configure management IP addresses manually if you are not enabling DHCP.

1. Touch the screen to activate the LCD menus.

   

2. Tap Setup.

   The Setup screen displays.

   

3. On the Setup screen, tap AOM Management.

   The AOM Mgmt screen displays.

4. For IPv4 or IPv6, tap to enable (On).

5. Expand the IPv4 or IPv6 section by tapping the plus sign (+).

6. For DHCP, ensure that it is disabled (Off).

7. Tap IPv4 Address or IPv6 Address

8. Use the up and down arrows to increment/decrement values and the left and right arrows to select which octet to modify.

   

   

9. Click Save.

   The AOM Mgmt screen displays.

10. Tap Prefix Length.

11. Use the up and down arrows to increment/decrement values.

    

12. Click Save.

    The AOM Mgmt screen displays.

13. Tap IPv4 Gateway.

14. Use the up and down arrows to increment/decrement values and the left and right arrows to select which octet to modify.

15. Click Save.

16. Tap Commit.

Configure the baud rate

You can use the touchscreen LCD to configure the baud speed for connecting to the front-panel serial port from a serial console.

1. Touch the screen to activate the LCD menus.

   

2. Tap Setup.

   The Setup screen displays.

   

3. On the Setup screen, tap Baud Rate.

4. Select which baud rate to use for the front-panel serial port.

   

5. Tap Back to return to the previous screen.

LCD configuration from the CLI

You can configure options, including operational mode, for the LCD touchscreen from the CLI.

Show the LCD mode from the CLI

You can show the current mode for the LCD touchscreen from the CLI.

1. Log in to the command line interface (CLI) of the system using an account with admin access. When you log in to the system, you are in user (operational) mode.

2. Show which LCD mode is currently configured.

   Copy

   show components component lcd

   A summary similar to this example displays:

   Copy

   appliance-1# show components component lcd
   components component lcd
   state serial-no sub0872g00ct
   state part-no "SUB-0872-02 REV 1"
   state empty false
   state mode standard

Configure LCD secure mode from the CLI

The LCD touchscreen supports a secure mode, which allows access only to management and setup options. No customer data is shown. You can enable secure mode for the LCD touchscreen from the CLI.

1. Log in to the command line interface (CLI) of the system using an account with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Enable secure mode for the LCD.

   components component lcd config mode secure

   In this example, you enable secure mode for the LCD:

   Copy

   appliance-1(config)# components component lcd config mode secure

4. Commit the configuration changes.

   commit

Disable the LCD from the CLI

You can choose to disable the LCD touchscreen from the CLI. This prevents access to all options and shows only an image to indicate that it is disabled.

1. Log in to the command line interface (CLI) of the system using an account with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Enable standard mode for the LCD.

   components component lcd config mode disabled

   In this example, you disable the LCD:

   Copy

   appliance-1(config)# components component lcd config mode disabled

4. Commit the configuration changes.

   commit

Enable LCD standard mode from the CLI

You can choose to enable standard mode for the LCD touchscreen from the CLI. This allows access to all options.

1. Log in to the command line interface (CLI) of the system using an account with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Enable standard mode for the LCD.

   components component lcd config mode standard

   In this example, you enable standard mode for the LCD:

   Copy

   appliance-1(config)# components component lcd config mode standard

4. Commit the configuration changes.

   commit

Platform LEDs overview

The behavior of the various LEDs on the platform indicate the status of the system or component.

Status LED

The status LED indicates the operating state of the system.

Alarm LED

The alarm LED indicates system alarm conditions and the severity of the alarm condition.

There are five levels of messages.

Note: The alarm LED shows the highest severity of active alarms. Clearing the event log does not turn off the LED. The LED turns off when the alarm condition is fixed.

Management port LED

The management port LED indicates the link and activity status of the management port.

F5 logo ball LED

The F5 logo ball on the front of the chassis indicates when the platform has valid input power and can also function as a system locator.

You can enable the system locator from the touchscreen LCD.

For more information, see lcd-enable-system-locator.dita

Power 1 and Power 2 LEDs

The Power 1 and Power 2 LEDs on the front of the chassis indicate the general operating state of the power supply units (PSUs).

650W AC power supply LEDs

The LEDs located on the 650W AC power supply units (PSUs) indicate PSU operating state.

OV - Over Voltage; OTP - Over Temperature Protection; UV - Under Voltage; OC - Over Current; VSB - Standby Voltage

650W DC power supply LEDs

The LEDs located on the DC power supply units (PSUs) indicate PSU operating state.

OV - Over Voltage; OTP - Over Temperature Protection; UV - Under Voltage; OC - Over Current; VSB - Standby Voltage

650W HVDC power supply LEDs

The LEDs located on the DC power supply units (PSUs) indicate PSU operating state.

OV - Over Voltage; OTP - Over Temperature Protection; UV - Under Voltage; OC - Over Current; VSB - Standby Voltage

1200W AC power supply LEDs

The LEDs located on the 1200W AC power supply units (PSUs) indicate PSU operating state.

OV - Over Voltage; OTP - Over Temperature Protection; UV - Under Voltage; OC - Over Current; VSB - Standby Voltage

1200W DC power supply LEDs

The LEDs located on the 1200W DC power supply units (PSUs) indicate PSU operating state.

OV - Over Voltage; OTP - Over Temperature Protection; UV - Under Voltage; OC - Over Current; VSB - Standby Voltage

Platform interfaces overview

Every platform includes multiple interfaces. The exact number of interfaces that are on the system depends on the platform type.

Each interface on the platform has a set of properties that you can configure, such as enabling or disabling the interface, setting the requested media type and duplex mode, and configuring Ethernet flow control.

25G SFP28 interfaces

The r2000/r4000 Series platforms include 25G (SFP28) ports (5.0-8.0), in which you can use 25G (SFP28), 10G (SFP+) or 1G (SFP) transceiver modules.

100G QSFP28 interfaces

On platforms that include 100G interface ports, you can use only F5-branded 100G QSFP28 transceiver modules in those ports.

When a 100G interface operates at either 40G and 100G speeds, it is considered to be bundled. On the r10000/r12000S platform, the 100G ports (1, 2, 11, and 12) default to 100G. The cable that you use when operating at 100G with 100GBASE-SR4 transceiver modules is an industry-standard OM4 qualified multi-mode fiber optic cable with female MPO/MTP connectors at both ends. The cable that you use with 100GBASE-LR4 transceiver modules is an industry-standard SMF fiber optic cable with LC duplex connectors and a reach of up to 10km. You must provide your own cable and F5-branded QSFP28 transceiver modules for 100G operation.

Interface duplex mode and port speed

The fiber SFP interfaces are set to default and native speeds for 10GB and 25GB. The 1GB interface is set to auto negotiate. For copper SFP, both 1GB and 10GB are set to auto negotiate.  We recommend that you also configure any network equipment that you plan to use with the system to auto-negotiate speed and duplex settings. If you connect the system to network devices with forced speed and duplex settings, you must force the speed and duplex settings of the system to match the settings of the other network device.

Important: If the system is attempting to auto-negotiate interface settings with an interface that has the speed and duplex settings forced (that is, auto-negotiation is disabled), you will experience severe performance degradation.

The system provides restrictions to prevent you from configuring an interface with invalid settings.

Important: Auto-MDI/MDIX functionality is retained when you manually configure an interface to use specific speed and duplex settings. You can use either a straight-through cable or a crossover cable when media settings are forced, and you will be able to successfully link to either DTE or DCE devices.

Management port configuration overview

You can configure the front-panel management port on this platform from the CLI or webUI.

Enable the management port from the CLI

You can enable the management port from the CLI.

1. Connect to the system using a management console or console server.

   The default baud rate and serial port configuration is 19200/8-N-1.

2. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

3. Change to config mode.

   config

   The CLI prompt changes to include (config).

4. [Enable the specified management port.] [interfaces interface mgmt config enable] In this example, you enable the management port on the platform:

appliance-1(config)# interfaces interface mgmt config enable

5. Return to user (operational) mode.

   end

6. Verify that the management interface is enabled.

   show interfaces interface mgmt state enabled

   A summary similar to this example displays:

   Copy

   appliance-1# show interfaces interface mgmt state enabled
   state enabled true

Disable the management port from the CLI

You can disable the management port from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Disable the specified management port.

   interfaces interface mgmt config disabled

   In this example, you enable the management port on the platform:

   Copy

   appliance-1(config)# interfaces interface mgmt config disabled

4. Return to user (operational) mode.

   end

5. Verify that the management interface is disabled.

   show interfaces interface mgmt state enabled

   A summary similar to this example displays:

   Copy

   appliance-1# show interfaces interface mgmt state enabled
   state enabled false

Configure auto-negotiation for the management port from the CLI

You can configure auto-negotiation for the management port from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Configure auto-negotiation for the management port.

   Copy

   interfaces interface mgmt ethernet config auto-negotiate { [true] \| [false] }

   In this example, you enable auto-negotiation:

   Copy

   appliance-1(config)# interfaces interface mgmt ethernet config auto-negotiate true

4. Commit the configuration changes.

   commit

Configure duplex mode for the management port from the CLI

You can configure duplex mode for the management port from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Configure duplex mode for the management port.

   Copy

   interfaces interface mgmt ethernet config duplex-mode { [FULL] \| [HALF] }

   In this example, you configure the management port to be full speed:

   Copy

   appliance-1(config)# interfaces interface mgmt ethernet config duplex-mode FULL

4. Commit the configuration changes.

   commit

Configure port speed for the management port from the CLI

You can configure port speed for the management port from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Configure the port speed for the management port.

   Copy

   interfaces interface mgmt ethernet config port-speed {[SPEED_1GB] \| [SPEED_10MB] \| [SPEED_100MB] }

   In this example, you configure the management port to use 100MB speed:

   Copy

   appliance-1(config)# interfaces interface mgmt ethernet config port-speed SPEED_100MB

4. Commit the configuration changes.

   commit

Front-panel interface configuration overview

You can manage the front-panel interfaces on the platform from the CLI or webUI.

Show the status of all interfaces from the webUI

You can show the status of all interfaces on the platform from the webUI.

1. Log in to the webUI using an account with admin access.

2. On the left, click [NETWORK SETTINGS > Interfaces

   A table showing all interfaces displays.

Configure an interface from the CLI

You can configure front-panel interfaces from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Configure settings for the specified interface.

   Copy

   interfaces interface \<interface> config { disabled \|enabled } description <interface-description> type <interface-type>]

   In this example, you enable and configure interface 1.0 with a custom description:

   Copy

   appliance-1(config)# interfaces interface 1.0 config enabled description 
   "Interface 1.0"

   Note: Changing the MTU at the platform level would affect all tenants, so this is configurable at the tenant level for greater control.

4. Commit the configuration changes.

   commit

Show the state of a specific interface from the CLI

You can show the state of a specific interface on a platform from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Display the current status of a specific interface.

   show interface interface <interface-number>

   Copy

   appliance-1# show interfaces interface 1.0
   interfaces interface 1.0
   state name 1.0
   state type ethernetCsmacd
   state mtu 9600
   state enabled true
   state ifindex 19
   state oper-status DOWN
   state counters in-octets 0
   state counters in-unicast-pkts 0
   state counters in-broadcast-pkts 0
   state counters in-multicast-pkts 0
   state counters in-discards 0
   state counters in-errors 0
   state counters in-fcs-errors 0
   state counters out-octets 0
   state counters out-unicast-pkts 0
   state counters out-broadcast-pkts 0
   state counters out-multicast-pkts 0
   state counters out-discards 0
   state counters out-errors 0
   state forward-error-correction auto
   state lacp_state LACP_DEFAULTED
   ethernet state port-speed SPEED_100GB
   ethernet state hw-mac-address 00:98:a1:76:54:0d
   ethernet state counters in-mac-control-frames 0
   ethernet state counters in-mac-pause-frames 0
   ethernet state counters in-oversize-frames 0
   ethernet state counters in-jabber-frames 0
   ethernet state counters in-fragment-frames 0
   ethernet state counters in-8021q-frames 0
   ethernet state counters in-crc-errors 0
   ethernet state counters out-mac-control-frames 0
   ethernet state counters out-mac-pause-frames 0
   ethernet state counters out-8021q-frames 0
   ethernet state flow-control rx on

Show the state of all interfaces from the CLI

You can show the state of all interfaces on the platform from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show the current state of all interfaces.

   show interfaces interface

   A summary similar to this example displays:

   Copy

   appliance-1# show interfaces interface state oper-status
   OPER
   NAME STATUS
   --------------
   1.0 UP
   2.0 UP
   3.0 DOWN
   4.0 DOWN
   5.0 DOWN
   6.0 DOWN
   7.0 DOWN
   8.0 DOWN
   9.0 DOWN
   10.0 DOWN
   11.0 DOWN
   12.0 DOWN
   13.0 DOWN
   14.0 DOWN
   15.0 DOWN
   16.0 DOWN
   17.0 DOWN
   18.0 DOWN
   19.0 DOWN
   20.0 DOWN
   mgmt UP

Show statistics for all interfaces from the CLI

You can show statistics for all interfaces from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show statistics for all interfaces.

   show interfaces interface state counters

   Possible completions include:

   Copy

   in-broadcast-pkts 
   in-discards 
   in-errors 
   in-fcs-errors 
   in-multicast-pkts 
   in-octets 
   in-unicast-pkts 
   out-broadcast-pkts 
   out-discards 
   out-errors 
   out-multicast-pkts 
   out-octets 
   out-unicast-pkts 

   A summary similar to this example displays:

   Copy

   appliance-1# show interfaces interface state counters
   interfaces interface 1.0
   state counters in-octets 0
   state counters in-unicast-pkts 0
   state counters in-broadcast-pkts 0
   state counters in-multicast-pkts 0
   state counters in-discards 0
   state counters in-errors 0
   state counters in-fcs-errors 0
   state counters out-octets 0
   state counters out-unicast-pkts 0
   state counters out-broadcast-pkts 0
   state counters out-multicast-pkts 0
   state counters out-discards 0
   state counters out-errors 0
   interfaces interface 2.0
   state counters in-octets 0
   state counters in-unicast-pkts 0
   state counters in-broadcast-pkts 0
   state counters in-multicast-pkts 0
   state counters in-discards 0
   state counters in-errors 0
   state counters in-fcs-errors 0
   state counters out-octets 0
   state counters out-unicast-pkts 0
   state counters out-broadcast-pkts 0
   state counters out-multicast-pkts 0
   state counters out-discards 0
   state counters out-errors 0
   ...

Show the current running configuration for all interfaces from the CLI

You can show the current running configuration for all interfaces from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show the current running configuration for all interfaces.

   show running-config interfaces interface

   A summary similar to this example displays:

   Copy

   appliance-1# show running-config interfaces interface
   interfaces interface 1.0
   config name 1.0
   config type ethernetCsmacd
   config enabled
   !
   interfaces interface 2.0
   config name 2.0
   config type ethernetCsmacd
   config enabled
   !
   interfaces interface 3.0
   config name 3.0
   config type ethernetCsmacd
   config enabled
   !
   ...

Show the current running configuration of VLAN interface members from the CLI

You can show the current running configuration of VLAN interface members from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show the current running configuration of VLAN interface members.

   Copy

   show running-config interfaces interface ethernet switched-vlan

   A summary similar to this example displays:

   Copy

   appliance-1# show running-config interfaces interface ethernet switched-vlan
   interfaces interface 1.0
   ethernet switched-vlan config trunk-vlans [ 2001 ]
   !

Reset counters for specified interfaces from the CLI

You can reset counters for specified interfaces from the CLI.

1. [Log in to the command line interface (CLI) of the system using an account with admin access.]When you log in to the system, you are in user (operational) mode.

2. [Change to config mode.][config]The CLI prompt changes to include [(config)].

3. [Reset counters for specified interfaces.] [reset counters interfaces [ <interface-number> ]] In this example, you reset counters for interfaces 1.0 and 2.0:

appliance-1(config)# reset counters interfaces [1.0 2.0]

4. [Commit the configuration changes.][commit] .userinput

Create a LAG interface from the CLI

You can create a LAG interface from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Create a LAG interface.

   interfaces interface <lag-name> config

   Possible completions include:

   Copy

   aggregation
   config
   hold-time

   In this example, you create an IEEE 802ad LAG interface named “new-lag”:

   Copy

   appliance-1(config)# interfaces interface new-lag config type ieee802adLag

4. Commit the configuration changes.

   commit

Show the current running configuration for LAG interfaces from the CLI

You can show the current running configuration for LAG interfaces from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show the current running configuration for LAG interfaces.

   show running-config interfaces interface <lag-name> aggregation

   When you specify a LAG interface, a summary similar to this example displays:

   Copy

   appliance-1# show running-config interfaces interface lag-test aggregation
   interfaces interface lag-test
   aggregation config lag-type STATIC
   aggregation config distribution-hash src-dst-ipport

Associate an interface with a specified LAG from the CLI

You can associate an interface with a specified LAG from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Associate an interface with a specified LAG.

   Copy

   interfaces interface <interface-number> ethernet config aggregate-id <lag-name> 

   In this example, you associate interface 1.0 with a LAG named “new-lag”:

   Copy

   appliance-1(config)# interfaces interface 1.0 ethernet config aggregate-id new-lag

4. Commit the configuration changes.

   commit

Port groups overview

The front-panel QSFP28 100G ports on r5000/r10000/r12000S Series systems support port group functionality. Port groups enable you to change which mode, or port speed, that port uses. QSFP28 ports operate at 100G by default, but depending on the optical transceiver module that you have installed in the port, you can configure the port group to use one of these modes:

100G mode Creates one interface at 100G speed. This is the default mode for 100G ports.

40G mode Creates one interface at 40G speed. This is the default mode for 40G ports.

Changing the mode for a port group reboots the system, removes stale interfaces from your configuration, and removes any references to stale interfaces from your configuration. You will then need to reconfigure any previously-configured protocols to use the modified port group.

Available interfaces for port groups

The system creates and breaks down interfaces based on how you have configured port groups.

Configure the mode of a port group from the CLI

You can configure a port group for the interfaces on the system at either 100G or 40G speeds from the CLI. .

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Change to config mode.

   config

   The CLI prompt changes to include (config).

3. Configure port groups for a specific interface.

   Copy

   portgroups portgroup <interface-number> config mode { MODE_100GB | MODE_40GB }

   In this example, you configure the port group mode on interface 2 to use the 100GB mode:

   Copy

   appliance-1(config)# portgroups portgroup 2 config mode MODE_100GB

4. Commit the configuration changes.

   commit

Show the state of port groups from the CLI

You can show the state for port groups on the system from the CLI.

1. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

2. Show the current state for the port groups configuration.

   show portgroups portgroup

A summary similar to this example displays:

``` 
appliance-1# show portgroups portgroup
portgroups portgroup 1
state vendor-name "F5 INC."
state vendor-oui 009065
state vendor-partnum "OPT-0031 "
state vendor-revision A0
state vendor-serialnum "A1B2C3D40 "
state transmitter-technology "850 nm VCSEL"
state media 100GBASE-SR4
state optic-state QUALIFIED
state ddm rx-pwr low-threshold alarm -14.0
state ddm rx-pwr low-threshold warn -11.0
state ddm rx-pwr instant val-lane1 -1.96
state ddm rx-pwr instant val-lane2 -0.95
state ddm rx-pwr instant val-lane3 -1.06
state ddm rx-pwr instant val-lane4 -1.98
state ddm rx-pwr high-threshold alarm 3.4
state ddm rx-pwr high-threshold warn 2.4
state ddm tx-pwr low-threshold alarm -10.0
state ddm tx-pwr low-threshold warn -8.0
state ddm tx-pwr instant val-lane1 0.07
state ddm tx-pwr instant val-lane2 0.67
state ddm tx-pwr instant val-lane3 0.32
state ddm tx-pwr instant val-lane4 0.45
state ddm tx-pwr high-threshold alarm 5.0
state ddm tx-pwr high-threshold warn 3.0
state ddm temp low-threshold alarm -5.0
state ddm temp low-threshold warn 0.0
state ddm temp instant val 40.8046
state ddm temp high-threshold alarm 75.0
state ddm temp high-threshold warn 70.0
state ddm bias low-threshold alarm 0.003
state ddm bias low-threshold warn 0.005
state ddm bias instant val-lane1 0.00753
state ddm bias instant val-lane2 0.007448
state ddm bias instant val-lane3 0.007536
state ddm bias instant val-lane4 0.007504
state ddm bias high-threshold alarm 0.013
state ddm bias high-threshold warn 0.011
state ddm vcc low-threshold alarm 2.97
state ddm vcc low-threshold warn 3.135
state ddm vcc instant val 3.3027
state ddm vcc high-threshold alarm 3.63
state ddm vcc high-threshold warn 3.465
...
```

Network interface LED behavior

The appearance and behavior of the network interface LEDs on the platform indicate network traffic activity, interface speed, and interface duplexity.

SFP28/SFP+ port LED behavior

The appearance and behavior of the SFP28 port LEDs indicate network traffic activity, interface speed, and interface duplexity.

QSFP28/QSFP+ port LED behavior

The appearance and behavior of the QSFP28/ QSFP+ port LEDs indicate network traffic activity, interface speed, and interface duplexity.

Always-On Management overview

The Always-On Management (AOM) subsystem enables you to manage the system remotely from a serial console, even if the host is powered down. The AOM Command Menu operates independently of F5OS.

You can use the command menu to reset the unit if the system has locked up or get access to the system directly, so that you can configure it from the command-line interface.

Access the AOM Command Menu from the serial console

You can access the AOM Command Menu after connecting to the front panel serial console.

1. Connect to the system using a management console or console server.

   The default baud rate and serial port configuration is 19200/8-N-1.

2. Open the AOM Command Menu.

   Esc (

Quitting the AOM Command Menu returns you to the system console.

AOM Command Menu options

The AOM Command Menu provides the AOM options for the platform. You can access the AOM Command Menu from a serial console.

The availability of menu options varies depending on the platform type.

Create an AOM user

If you would like to access AOM over the network rather than using the serial console, you need to create an AOM user. This account is created on the AOM subsystem only and is not saved to your F5OS system configuration.

1. Connect using SSH to the management IP address.

2. Log in to the command line interface (CLI) of the system with admin access.

   When you log in to the system, you are in user (operational) mode.

3. Change to config mode.

   config

   The CLI prompt changes to include (config).

4. Type system aom set-ssh-user-info.

5. Type the user name you want.

6. Type the required password.

   When the account creation is successful, a message similar to this one displays: AOM SSH username and password set successfully.

Configure the AOM management network

You can assign a management IP address, netmask, and gateway to access AOM either manually or with DHCP.

1. Connect to the system using a management console or console server.

   The default baud rate and serial port configuration is 19200/8-N-1.

2. Open the AOM Command Menu.

   Esc (

3. Type n to open the AOM management network configurator.

4. Assign a management IP address, netmask, and gateway:

    - To use DHCP to assign the addresses, enter `y` when prompted about using DHCP.
    - To manually assign the addresses, enter `n` when prompted about using DHCP. At the prompts, type values for IP address (required), netmask (required), and gateway (optional).
   

   A confirmation message displays the configured management IP address, netmask, and gateway.

5. Type i to verify the assigned addresses.

Access the AOM Command Menu using SSH

Before you access the AOM Command Menu using SSH, you must assign a management IP address, netmask, and gateway for AOM. You can assign the addresses manually or with DHCP. You must also create an AOM admin user account.

You can access the AOM Command Menu remotely using SSH from a management workstation connected to the same subnet as the platform’s management (MGMT) interface.

On this platform, AOM allows only one SSH connection at a time.

1. Open an SSH session, where <aom-username> is the AOM admin user account that you configured for the system, and <ip-address> is the IP address that you configured for AOM.

   Copy

   ssh <aom-username>@<ip-address> 

2. Type the previously configured AOM user password.

3. Open the AOM Command Menu.

   Esc (

Set an SSH idle session timeout

You can specify a timeout value (in seconds) for idle AOM SSH sessions. You can access the AOM Command Menu using either a serial console or SSH.

1. Connect to the system using a management console or console server.

   The default baud rate and serial port configuration is 19200/8-N-1.

2. Open the AOM Command Menu.

   Esc (

3. Type s to configure a timeout value for idle SSH sessions.

4. Type a timeout value.

   The default value is 0 (no timeout). Available values are 0, or between 30 and 86400 (one day).

Disable network configuration

You can connect to the system's serial console to disable SSH access to AOM over the network. This does not affect console access to AOM.

1. Connect to the system using a management console or console server.

   The default baud rate and serial port configuration is 19200/8-N-1.

2. Open the AOM Command Menu.

   Esc (

3. Type n to open the AOM management network configurator.

4. When prompted about using DHCP, enter n.

5. At the IP address prompt type 0.0.0.0

   A confirmation message displays the configured management IPaddress, netmask, and gateway.

6. Type i to verify that network configuration is disabled.