---

1

Introducing the IP Application Switch Platform

---

• Working with the IP Application Switch platform
• Getting started
• Familiarizing yourself with the IP Application Switch
• Environmental requirements
• Installing and connecting the hardware
• Interfaces
• Activating the license
• Using the Setup utility
• Hardware acceleration
• Optional redundant power supply
• Additional resources

Working with the IP Application Switch platform

The IP Application Switch^TM platforms are powerful systems capable of managing traffic for any size of enterprise.

Externally, the IP Application Switch platforms look similar. However, there are internal differences and some external differences.

• 1000 series
  This is the switch designed for the best performance at the price. This switch can manage all the capabilities of F5 Networks traffic management software. The 1000 series (Figure 1.1 ) provides the power of a 1 (Fiber Gigabit Ethernet) X 8 (10/100) switch, with SSL processing available as an additional add-on through the software license. For details, see Reviewing hardware specifications .
• 2000 series
  The 2000 series switch has 2 (Fiber Gigabit Ethernet) X 16 (10/100) ports (Figure 1.2 ). The 2400 version of this switch incorporates the F5 Networks Packet Velocity ASIC^TM for accelerating Layer 4 (IP address and port) requests. All BIG-IP 2000 series switches include integrated SSL processing. For details, see Reviewing hardware specifications .
• 5000 series
  The 5000 series switches are available with 4 (Fiber Gigabit Ethernet) X 24 (10/100) ports (Figure 1.3 ). The 5110 version of the switch includes 4 Copper Gigabit Ethernet interfaces instead of 4 Fiber Gigabit Ethernet interfaces. While all versions of the IP Application Switch accelerate Layer 7 traffic, the 5100 version of the switch is optimized to accelerate Layer 7 traffic. All 5000 series switches include dual processors and integrated SSL processing. For details, see Reviewing hardware specifications .

Figure 1.1 An example of the IP Application Switch, in this case a BIG-IP 1000

Figure 1.2 An example of a 2000 series IP Application Switch, in this case a BIG-IP 2000

Figure 1.3 An example of a 5000 series IP Application Switch, in this case a BIG-IP 5000

Getting started

There are several basic tasks you must complete to get the IP Application Switch platform installed and set up.

• Review the hardware requirements.
• Familiarize yourself with the IP Application Switch hardware.
• Review the environmental requirements.
• Connect the IP Application Switch to the network, and optionally connect the peripheral hardware.
• Activate the license.

The IP Application Switch comes with the hardware that you need for installation and maintenance. However, you must also provide standard peripheral hardware, such as a keyboard or serial terminal, if you want to administer the IP Application Switch directly.

Components provided with the IP Application Switch

When you unpack the IP Application Switch, you should make sure that the following components, shown in Figure 1.4 , are included:

• One power cable
• Four rack-mounting screws
• Documentation and Software CD

If you purchased a hardware-based redundant system, you also received one fail-over cable to connect the two IP Application Switch units together (network-based redundant systems do not require a fail-over cable).

Figure 1.4 Components included with the IP Application Switch

Peripheral hardware that you provide

For each IP Application Switch in the system, you need to provide the following peripheral hardware:

• If you plan to use direct administrative access to the IP Application Switch, you need standard input/output hardware. This requires a serial terminal and a null modem cable. For serial terminal configuration information, refer to the BIG-IP Reference Guide, Chapter 3, Post-Setup Tasks in the section Using a serial terminal with the BIG-IP system.
• If you want to use the default IP Application Switch configuration, you must have an administrative workstation on the same IP network as the IP Application Switch.
• You also need network hubs, switches, or concentrators to connect to the IP Application Switch network interfaces. The devices you select must be compatible with the network interface cards installed in the IP Application Switch. The devices can support 10/100 Ethernet or Gigabit Ethernet.
  
  
  • Ethernet requires either a 10 Mbps or 100 Mbps hub or switch.
  • Gigabit Ethernet requires a compatible Gigabit Ethernet switch.
    
    

    If you plan on doing remote administration from your own PC workstation as most users do, we recommend that you have your workstation already in place. Keep in mind that the Setup utility prompts you to enter your workstation's IP address when you set up remote administrative access.

Familiarizing yourself with the IP Application Switch

The IP Application Switch is offered in several different hardware configurations. Before you begin to install the IP Application Switch, you may want to quickly review the following figures that illustrate the controls and ports on both the front and the back of an IP Application Switch.

Using the IP Application Switch hardware

This section describes the front and back layout of a IP Application Switch. Figure 1.5 illustrates the front of a IP Application Switch. On the front of the unit, you can turn the unit off and on, or you can reset the unit. You can also view the indicator lights for hard disk access.

Note

---

The interfaces on every IP Application Switch are labeled, so it should be clear what each port is, no matter which hardware configuration you have purchased.

Figure 1.5 Front view of an IP Application Switch

If you have a special hardware configuration, such as one that includes more than two interfaces, the ports on the back of your unit differ slightly from those shown in Figure 1.6, on page 1-7 .

Table 1.1 describes the behavior of the LEDs in normal startup and in error conditions.

Figure 1.6 , following, illustrates the back of a IP Application Switch. Note that all ports are labeled.

Figure 1.6 Back view of an IP Application Switch

Environmental requirements

Before you install the IP Application Switch, review the following guidelines to make sure that you are installing and using the IP Application Switch in the appropriate environment.

General guidelines

An IP Application Switch is an industrial network appliance, designed to be mounted in a standard 19-inch rack. To ensure safe installation and operation of the unit:

• Install the rack according to the manufacturer's instructions, and check the rack for stability before placing equipment in it.
• Build and position the rack so that once you install the IP Application Switch, the power supply and the vents on both the front and back of the unit remain unobstructed. The IP Application Switch must have adequate ventilation around the unit at all times.
• Do not allow the air temperature in the room to exceed 40° C.
• Do not plug the unit into a branch circuit shared by more electronic equipment than the circuit is designed to manage safely at one time.
• Verify that the voltage selector is set appropriately before connecting the power cable to the unit.
  
  

Guidelines for DC-powered equipment

A DC-powered installation must meet the following requirements:

• Install the unit using a 20 Amp external branch circuit protection device.
• For permanently connected equipment, incorporate a readily accessible disconnect in the fixed wiring.
• Use only copper conductors.
  
  

Installing and connecting the hardware

There are two basic tasks required to install the hardware. You simply need to install the IP Application Switch in a rack, and then connect the peripheral hardware and the interfaces.

Warning

---

Do not turn on an IP Application Switch until all peripheral hardware is connected to the unit.

To install the hardware in a rack

1. Lift the unit into place. This requires more than one person.
2. Secure the unit using the four rack-mounting screws that are provided.
   Figure 1.7 shows the orientation of the IP Application Switch and the mounting screws for installation in a standard 19" rack. Figure 1.8 shows the IP Application Switch installed in the rack.
   
   

   Figure 1.7 Platform orientation for rack mounting

   Figure 1.8 Platform installed in a 19" rack

To connect the cables and hardware for input/output

1. Connect the hardware that you have chosen to use for input/output:
   
   

   If you are using a serial terminal as the console, connect the serial cable to the terminal serial port (number 1 in Figure 1.5 ).

2. Connect the interfaces to the network from which the IP Application Switch processes connection requests. For more information about interfaces, see Interfaces .
3. If you have a hardware-based redundant system, connect the fail-over cable to the fail-over port on each unit (number 2 in Figure 1.5 ).
4. Connect the power cable to the IP Application Switch power in (number 2 in Figure 1.6 ), and then connect it to the power source.

Interfaces

This platform can have as few as one network interface. It is helpful to understand interface naming conventions before you perform configuration tasks such as displaying interface status and settings, setting the media type, and setting the duplex mode.

Interface naming conventions

By convention, the Ethernet interfaces on the platform take the name <s>.<p>, where s is the slot number of the NIC, and p is the port number on the NIC. As shown in Figure 1.9 , for the Application Switch, slot numbering is left-to-right and port numbering is top-to-bottom, as shown in Figure 1.9 . Note that slot 2 is used for the gigabit ports, and slot 3 for a dedicated administrative port.

Figure 1.9 IP Application Switch platform slot and port numbering

When a bigpipe command calls for a list of interfaces, the list may consist of one or more interfaces, with multiple interfaces separated by spaces. For example:

1.1 1.2 2.1 2.2

Displaying status and settings for interfaces

From the command line interface, use the following syntax to display the current status and the settings for all installed interfaces:

b interface show

Figure 1.10 shows an example of the output you see when you issue this command on an active/standby unit in active mode.

Use the following syntax to display the current status and the setting for a specific interface:

b interface <if_name> show

Media type and duplex mode

Properties that are configurable on the interfaces include media type and duplex mode, as shown in Table 1.2 .

Setting the media type

You can set the media type to that of the interface, or to auto for auto-detection. If the media type is set to auto and the card does not support auto-detection, the default type for that interface is used, for example 100BaseTX.

Use the following syntax to set the media type:

b interface <if_name> media <media_type> | auto

(Default media type is auto.)

To view the valid media types for an interface, type the following command:

b interface <if_name> media show

Note

---

If the platform is inter-operating with an external switch, the media setting should match that of the switch.

Setting the duplex mode

You can set duplex mode to full or half duplex. If the media type does not allow duplex mode to be set, this is indicated by an onscreen message. If media type is set to auto, or if setting duplex mode is not supported for the interface, the duplex setting is not saved to bigip_base.conf.

Use the following syntax to set the duplex mode:

b interface <if_name> duplex full | half | auto

(Default mode is auto.)

Activating the license

Once the platform is installed in the rack and connected to the network, you need a valid license certificate to activate the software. To gain a license certificate, you need to provide two items to the license server: a registration key and a dossier.

The registration key is a 25-character string. In some cases, you may have received the key by email. If you received a CD, the number is on the back of the CD case. The registration key lets the license server know which F5 products you are entitled to license.

The dossier is obtained from the software, and is an encrypted list of key characteristics used to identify the platform

You can obtain a license certificate using one of the following methods:

• Automatic license activation
  You perform automatic license activation from the command line, the License utility on an unlicensed unit, or from the web-based Configuration utility of an upgraded unit. The automatic method automatically retrieves and submits the dossier to the F5 license server, as well as installing the signed license certificate. In order for you to use this method, the unit must be installed on a network with Internet access.
• Manual license activation
  You perform manual license activation from the License utility on an unlicensed unit, or from the web-based Configuration utility of an upgraded unit. With the manual method, you submit the dossier to, and retrieve the signed license file from, the F5 license server manually. In order for you to use this method, the administrative workstation must have Internet access.
  
  

  Note
  

  ---

  You can open the Configuration utility with Netscape® Navigator version 4.7x, or Microsoft® Internet Explorer version 5.0, 5.5 or 6.0.

Automatically activating a license

You can perform automatic license activation from the command line, the License utility on an unlicensed unit, or from the web-based Configuration utility of an upgraded unit. This section describes the automatic license activation process in the following cases:

• From the web-based License utility or Configuration utility
• From the command line, first-time installation
• From the command line, upgrading a current installation

To automatically activate a license using the Configuration utility

1. Open the Configuration utility according to the type of BIG-IP unit you are licensing:
   
   
   • If you are licensing a previously configured BIG-IP unit, open the Configuration utility using the configured address.
   • If you are licensing a new BIG-IP unit, from the administrative workstation, open the Configuration utility using one of the the following addresses:
     
     https://192.168.1.245
     https://192.168.245.245.
     
     These are default addresses on the unit's local area network.
2. Type the name and password, based on the type of BIG-IP unit you are licensing:
   
   
   • f you are licensing a previously configured BIG-IP unit, type your user name and password at the log on prompt.
   • If you are licensing a new BIG-IP system, type the user name root, and the password default at the log on prompt.

   The product welcome screen displays.

3. Access the License utility based on the type of BIG-IP unit you are licensing:
   
   
   • If the unit does not have a license from a previouse version, click License Utility to open the License Administration screen.
   • If the unit has a license from a previous version, or an evaluation license, click Configuration Utility. In the navigation pane, click System Admin, and then click the License Administration tab.
4. In the Registration Key box, type the 25-character registration key that you received. If you have more than one key to install, click Enter More Keys to install multiple keys. Once you have entered all registration keys, click Automated Authorization.
   
   

   The License Status screen displays status messages, and Process complete appears when the licensing activation is finished.

5. Click License Terms, review the EULA, and accept it.
6. At the Reboot Prompt screen, select when you want to reboot the platform.
   License activation is complete only after rebooting.

To automatically activate a license from the command line for first time installation

Type the user name root and the password default at the logon prompt.

At the prompt, type license.
The following prompts appear:

IP:
Netmask:
Default Route:
Select interface to use to retrieve license:

The platform uses this information to make an Internet connection to the license server.

After you type the Internet connection information, continue to the following prompt:

The Registration Key should have been included with the software or given when the order was placed.

Do you have your Registration Key? [Y/N]:

Type Y, and the following prompt appears:

Registration Key:

Type the 25-character registration key you received.

After you press Enter, the dossier is retrieved and sent to the F5 license server, and a signed license file is returned and installed. A message displays indicating the process was successful. If the licensing process is not successful, contact your vendor.

You are asked to accept the End User License Agreement.
The system will not be fully functional until you accept this agreement.

You are prompted to reboot the system. Press Enter to reboot.
The system will not be fully functional until you reboot.

To automatically activate a license from the command line for upgrades

1. Type your user name and password at the log on prompt.
2. At the prompt, type setup.
3. Choose menu option L.
4. The following prompt displays:
   
   

   Number of keys: 1

   If you have more than one registration key, enter the appropriate number.

5. The following prompt displays:
   
   

   Registration Key:

6. Type the 25-character registration key you received. If you received more than one key, enter all of the keys separated by blanks.
   
   

   After you press Enter, the dossier is retrieved and sent to the F5 license server, and a signed license file is returned and installed. A message displays indicating the process was successful.

7. If the licensing process is not successful, contact your vendor.
8. When you are finished with the licensing process, type the following command to restart the services on the system:
   
   

   bigstart restart

Manually activating a license

You can perform manual license activation from the License utility on an unlicensed unit, or from the web-based Configuration utility of an upgraded unit. With this method, you submit the dossier to, and retrieve the signed license file from, the F5 license server manually. This section describes the manual license activation process using the Configuration utility or License utility.

To manually activate a license using the License utility or Configuration utility

1. Open the Configuration utility according to the type of BIG-IP unit you are licensing:
   
   
   • If you are licensing a previously configured BIG-IP unit, open the Configuration utility using the configured address.
   • If you are licensing a new BIG-IP unit, from the administrative workstation, open the Configuration utility using one of the following addresses:
     
     https://192.168.1.245
     https://192.168.245.245.
     
     These are default addresses on the unit's local area network.
2. Type the name and password, based on the type of BIG-IP unit you are licensing:
   
   
   • If you are licensing a previously configured BIG-IP unit, type your user name and password at the log on prompt.
   • If you are licensing a new BIG-IP system, type the user name root, and the password default at the log on prompt.

     The product welcome screen displays.

3. Access the License utility based on the type of BIG-IP unit you are licensing:
   
   
   • If the unit does not have a license from a previouse version, click License Utility to open the License Administration screen.
   • If the unit has a license from a previous version, or an evaluation license, click Configuration Utility. In the navigation pane, click System Admin and then click the License Administration tab.
4. In the Registration Key box, type the 25-character registration key that you received. If you have more than one key to install, click Enter More Keys to install multiple keys. Once you have entered all registration keys, click Manual Authorization.
5. At the Manual Authorization screen, retrieve the dossier using one of the following methods:
   
   
   • Copy the entire contents of the Product Dossier box.
   • Click Download Product Dossier, and save the dossier to the hard drive.
6. Click the link in the License Server box.
   The Activate F5 License screen opens in a new browser window.
7. From the Activate F5 License screen, submit the dossier using one of the following methods:
   
   
   • Paste the data you just copied into the Enter your dossier box, and click Activate.
   • At the Product Dossier box, click Browse to locate the dossier on the hard drive, and then click Activate.

     The screen returns a signed license file.

8. Retrieve the license file using one of the following methods:
   
   
   • Copy the entire contents of the signed license file.
   • Click Download license, and save the license file to the hard drive.
9. Return to the Manual Authorization screen, and click Continue.
10. At the Install License screen, submit the license file using one of the following methods:
    
    
    • Paste the data you copied into the License Server Output box, and click Install License.
    • At the License File box, click Browse to locate the license file on the hard drive, and then click Install License.

      The License Status screen displays status messages, and Process complete appears when licensing activation is finished.

11. Click License Terms, review the EULA, and accept it.
12. At the Reboot Prompt screen, select when you want to reboot the platform.
    License activation is complete only after rebooting.

Using the Setup utility

Once you install the platform and obtain a license, you can configure the software with the Setup utility. The Setup utility defines the initial configuration settings required to install the platform into the network.

See the BIG-IP Reference Guide, Chapter 2, Using the Setup Utility for full details and instructions. You can download the guide from the CD.

Hardware acceleration

The Packet Velocity ASIC optimizes application performance, and reduces application wait times. An ASIC is an Application Specific Integrated Circuit. The Packet Velocity ASIC is designed to accelerate Layer 4 decisions. Off-loading the Layer 4 decisions enables the BIG-IP system to increase performance and throughput for basic routing functions (Layer 4) and application switching (Layer 7). Figure 1.11 is an example of the Packet Velocity ASIC.

Figure 1.11 The Packet Velocity ASIC

Optional redundant power supply

Several switch platforms are available with a redundant power supply. With this option, the standard power supply is replaced with a new unit which occupies the same space, but includes two independent power supply modules with separate connections to the power mains.

The redundant power supply has no user controls. If one unit fails or is disconnected, the other unit takes over transparently.

To report the status of the redundant power supply modules from the command line

Type the following command to report the status of the redundant power supply modules:

b power [show]

Figure 1.12 is an example of the output when both modules are active.

Figure 1.12 Redundant power supply status

top power supply: active bottom power supply: active

Figure 1.13 shows how the redundant power supply modules are located in the switch chassis.

Figure 1.13 Location of the power modules in the redundant power supply option

Additional resources

You can find additional technical information about this product in the following resources:

• CD
  You can download additional documentation such as the BIG-IP Reference Guide and the BIG-IP Solutions Guide.
• Release notes
  Release notes for the current version of this product are available from the product web server home page, and are also available on the technical support site. The release notes contain the latest information for the current version, including a list of new features and enhancements, a list of fixes, and, in some cases, a list of known issues.
• Online help
  You can find help online in three different locations:
  
  
  • The web server on the product has PDF versions of the guides included on the Software and Documentation CD.
  • The web-based Configuration utility has online help for each screen. Simply click the Help button.
  • Individual bigpipe commands have online help, including command syntax and examples, in standard UNIX man page format. Simply type the command followed by the word help, and the BIG-IP software displays the syntax and usage associated with the command.
• Third-party documentation for software add-ons
  The Product and Documentation CD contains online documentation for all third-party software, such as the Advanced Routing Modules.
• Technical support through the World Wide Web
  The F5 Networks Technical Support web site, http://tech.f5.com, provides the latest technical notes, answers to frequently asked questions, updates for administrator guides (in PDF format), and the AskF5 natural language question and answer engine. To access this site, you need to register at http://tech.f5.com.

---