Manual Chapter : System Settings

Applies To:

Show Versions Show Versions

F5OS

  • 1.0.0
Manual Chapter

System Settings

System settings overview

You can access system settings in the system controller webUI and chassis partition webUI but the settings are different in the two areas. The following table lists the available system settings in the system controller and the chassis partition webUIs:
Available system settings in the webUIs
System controller webUI
Chassis partition webUI
Alarms and Events
Alarms and Events
Controller Management
High Availability
System Inventory
Log Settings
Log Settings
Device Certificate
Time Settings
General
Device Certificate
Licensing
General

Display system alarms and events in the webUI

The Alarms & Events screen is available in both the system controller webUI and chassis partition webUI. This screen lists the alert information for all performance and network indicators that have currently crossed a performance or health threshold. Use this screen to identify the specific object affected.
  1. Log in to the VELOS system controller webUI or the chassis partition webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Alarm & Events
    .
  3. The following actions are available:
      • To refresh the alarms or events list, click the Refresh icon on the right of the screen.
      • To display events result by time preference, click the down arrow next to
        Refresh
        icon, select a value from the list. The default value is one hour. For example, selecting five minutes would display any event that occurred in the last five minutes.
      • To display events by severity, select a value from the
        Severity
        list. The default value is WARNING.
    Severity
    Description
    Emergency
    Emergency system panic messages
    Alert
    Serious errors that require administrator intervention
    Critical
    Critical errors, including hardware and file system failures
    Error
    Non-critical, but possibly important, error messages
    Warning
    Warning messages that should be logged and reviewed
    Notice
    Messages that contain useful information, but may be ignored
    Informational
    Messages that contain useful information, but may be ignored
    Debug
    Verbose messages used for troubleshooting

Configure log settings from the webUI

The
Log Settings
screen is available in both the system controller webUI and chassis partition webUI. You can configure log settings and remote log servers at both the system controller level and the partition level.
  1. Log in to the VELOS system controller webUI or the chassis partition webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Log Settings
    .
  3. To add access to a
    Remote Log Server
    , click
    Add
    .
  4. For the
    Host
    field:
    • In the system controller webUI, type either the IPv4 IP address or the Fully Qualified Domain Name (FQDN) of the remote server.
    • In the chassis partition webUI, type the IPv4 IP address of the remote server.
  5. In the
    Port
    field, type the port number of the remote server.
    The default port value is 514.
  6. From the
    Facility
    list, select
    LOCAL0
    .
    F5OS supports only the LOCAL0 logging facility. All logs are directed to this facility, and it is the only one that you can use for remote logging.
  7. In the
    Severity
    list, select the severity level of the messages to log.
    Severity
    Description
    Emergency
    Emergency system panic messages
    Alert
    Serious errors that require administrator intervention
    Critical
    Critical errors, including hardware and file system failures
    Error
    Non-critical, but possibly important, error messages
    Warning
    Warning messages that should be logged and reviewed
    Notice
    Messages that contain useful information, but may be ignored
    Informational
    Messages that contain useful information, but may be ignored
    Debug
    Verbose messages used for troubleshooting
  8. Click
    Save & Close
    to add the remote log server.
  9. To delete a remote log server, select the server and click
    Delete
    .

Update system controller software from webUI

It is a good idea to create a backup of the system controller configuration before you update the system. From the system controller CLI, type:
system database config-backup name ccs_backup
Configuration file backups are stored in
/mnt/var/confd/configs
. To export the configuration file, use
file export
.
You can update system controller software while the system is up and running. The software update is applied to both of the system controllers.
Updating the system controller software reboots both system controllers and might impact production traffic.
  1. Log in to the system controller webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Controller Management
    .
  3. For
    Update System Controller Software
    :
    • To install a full F5OS version release, select
      Bundled
      .
    • To install F5OS and service version releases independently, select
      Unbundled
      .
  4. For
    ISO Image
    , select the full version release ISO image from the drop-down.
    This field is available when
    Bundled
    is selected.
  5. For
    F5OS
    , select the F5OS version release from the drop-down.
    This field is available when
    Unbundled
    is selected.
  6. For
    Service Version
    , select the service version release from the drop-down.
    This field is available when
    Unbundled
    is selected.
  7. Click
    Save
    .
The software on the system controllers is updated.

Display system inventory report in the webUI

The
System Inventory
screen is available in the system controller webUI. You can display an inventory all of the system components on the VELOS system that includes system controllers, blades, power supply units (PSU), PSU controller, fan tray, and LCD. The inventory includes the component name, status, part number, and serial number.
  1. Log in to the system controller webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    System Inventory
    .
The system inventory is displayed and you can review the information about the VELOS system. An example is shown here.

Configure time settings from the webUI

The
Time Settings
screen is available in the system controller webUI. After the license of the VELOS system is activated, you can configure the Network Time Protocol (NTP) servers and time zone. The NTP server ensures that the VELOS system clock is synchronized with Coordinated Universal Time (UTC). You can specify a list of servers that you want the system to use when updating the time on network systems.
  1. Log in to the system controller webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Time Settings
    .
  3. To synchronize the system clock with an NTP server, for
    NTP Service
    , click
    Enable
    .
    The
    NTP Service
    is set to
    Disable
    , by default.
  4. To specify an
    NTP server
    , click
    Add
    .
  5. In the
    NTP Server
    field, type the IPv4 IP address or the Fully Qualified Domain Name (FQDN) of the NTP server.
    If specifying an FQDN, a resolvable DNS server must be configured for the system.
  6. To set the time zone, select the time zone area from the
    Locations
    list.
  7. Click
    Save
    .

License activation from the webUI

The
License
screen is only available in the system controller webUI. For more information on licensing, refer
VELOS system licensing overview
.
There are two methods for activating a license:
Automatic
If your system is connected to the Internet, use the Automatic method to prompt the VELOS system to contact the F5 license server and activate the license.
Manual
If your system is not connected to the Internet, use the Manual method to retrieve the activation key from a system that is connected to the Internet, and transfer it to the VELOS system.

Activate the license automatically from the webUI

You can use the webUI to automatically activate the VELOS system license.
  1. Log in to the system controller webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Licensing
    .
  3. For the
    Base Registration Key
    field, the registration key is auto-populated.
    You can choose to overwrite this field with a new registration key.
  4. For the
    Add-On Keys
    field, the associated add-on keys are auto-populated.
    You can click
    +
    or
    x
    to add or remove additional add-on keys .
    To add add-on keys to a licensed system, enter keys in the
    Add-On Keys
    field and click
    Reactivate
    .
  5. For the
    Activation Method
    , select
    Automatic
    .
  6. Click
    Activate
    .
    The End User License Agreement (EULA) displays.
  7. Click
    Agree
    to accept the EULA, .
The system is now licensed. If a base registration key or add-on key fails to activate, try re-activating the license or contact support.f5.com.

Activate the license manually from the webUI

You can use the webUI to manually activate the VELOS system license.
  1. Log in to the system controller webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    Licensing
    .
  3. For the
    Base Registration Key
    field, the registration key is auto-populated.
    You can choose to overwrite this field with a new registration key.
  4. For the
    Add-On Keys
    field, the associated add-on keys are auto-populated.
    You can click
    +
    or
    x
    to add or remove additional add-on keys .
    To add add-on keys to a licensed system, enter keys in the
    Add-On Keys
    field and click
    Reactivate
    .
  5. For the
    Activation Method
    , select
    Manual.
  6. For the
    Device Dossier,
    click
    Get Dossier
    .
    The VELOS system refreshes and displays the dossier.
  7. Copy the dossier text into the
    Device Dossier
    field.
  8. Click
    Click here to access F5 Licensing Server
    .
    The Activate F5 Product page displays.
  9. Paste the dossier in the
    Enter Your Dossier
    field.
  10. Click
    Next
    .
    The license key text displays.
  11. Copy the license key text.
    Alternatively, you can use the F5 license activation portal at activate.f5.com/license.
  12. In the
    License Text
    field, paste the license key text.
  13. Click
    Activate
    .
    The End User License Agreement (EULA) displays.
  14. Click
    Agree
    to accept the EULA.
The system is now licensed. If a base registration key or add-on key fails to activate, try re-activating the license or contact support.f5.com.

What is appliance mode?

The VELOS system can be run in
appliance mode
. Appliance mode adds a layer of security by restricting user access to root and the bash shell. When enabled, the root user cannot log in to the device by any means, including from the serial console.
You can enable appliance mode at each of the following levels:
  • System controller
  • Chassis partition
  • Tenant
Appliance mode is disabled at all levels, by default. You can enable it using the webUI or the CLI. The appliance mode option for system controllers and partitions is available to users with admin access under
SYSTEM SETTINGS
General
in the respective webUIs. For tenants, it is available in the chassis partition webUI under
TENANT MANAGEMENT
Tenant Deployments
.
Following are the effects of enabling appliance mode at each of the different levels.
System controller appliance mode
  • Root or bash access is disabled on both system controllers.
  • The AOM menu on the system controllers is unavailable.
  • Users can access the system controllers through the webUI or CLI.
  • Console access: Root or bash access is disabled on both system controller consoles. Users can log in to the system controller CLI from the console using an admin account.
Chassis partition appliance mode
  • Root access to the partition is disabled by all means. Bash access is disabled for admin and operator accounts.
  • The AOM menu is unavailable on the blades in the partition.
  • Users can access the partition through the webUI or the CLI.
  • Console access is disabled on all blades in a partition. Users cannot log in to blades (only the root account is generally present on blades. The root account gets disabled on blades).
Tenant appliance mode
  • Root access to the tenant is disabled by all means. Bash access is disabled for users (with a terminal shell flag enabled) inside the tenant.
  • Users can access the tenant only through the webUI of the CLI.
  • Tenant console access: Users can log in to the CLI from the virtual console using an admin account (with a terminal shell flag enabled).

Configure appliance mode from the webUI

Enable appliance mode if you want to disable all root and bash shell access. From the system controller webUI, appliance mode disables root and bash access to the controllers. From the chassis partition webUI, appliance mode limits access to the specific partition you are logged in to. Use the following procedure to enable or disable the appliance mode for system controllers and partitions.
The appliance mode option for tenants is available in the chassis partition webUI under
TENANT MANAGEMENT
Tenant Deployments
.
  1. Log in to the VELOS system controller webUI or the chassis partition webUI using an account with admin access.
  2. On the left, click
    SYSTEM SETTINGS
    General
    .
  3. For
    Appliance Mode
    , select
    Enable
    to enable it, or
    Disable
    to disable it.
  4. Click
    Save
    .