F5 Virtual Environment

vLab Setup Guide for VMware Workstation

Document version 13.0.A
Written for: TMOS® Architecture v13.0.0
Virtual images:
BIGIP_A_v13.0
LAMP_4
DoS_Tool_4.0
Windows_7_External
Windows_7_Internal

NOTE: The F5 vLab (virtual lab environment) is an F5-community supported tool.

Please DO NOT contact F5 Support for assistance with the vLab. For help with the setup of the vLab
or running a demonstration, you should contact your F5 Channel Account Manager (CAM).

F5 Worldwide Field Enablement Last Updated: 10/8/2017

Learn More, Sell More, Sell Faster
©2016 F5 Networks, Inc. All rights reserved. F5, F5 Networks, and the F5 logo are trademarks of F5 Networks, Inc. in the U.S. and in
certain other countries. Other F5 trademarks are identified at f5.com.

Any other products, services, or company names referenced herein may be trademarks of their respective owners with no endorsement or
affiliation, express or implied, claimed by F5.

These training materials and documentation are F5 Confidential Information and are subject to the F5 Networks Reseller Agreement. You
may not share these training materials and documentation with any third party without the express written permission of F5.

The F5 vLab (virtual lab environment) is an F5-community supported tool. Please DO NOT contact F5 Support for assistance with the vLab.
For help with the setup of the vLab or running a demonstration, you should contact your F5 Channel Account Manager (CAM).
 Part 1 – Configuring VMware Workstation

Part 1 – Configuring VMware Workstation

• This guide is written for a Windows workstation
• Estimated completion time: 40 minutes

Task 1 – Install VMware Workstation

You can skip this step if you already have VMware Workstation 10, 11, or 12 installed on your laptop. If not,
download and install VMware Workstation 12.

 Open a new Web browser and access http://www.vmware.com/products/workstation/overview.html.

 Download and install the trial version of VMware Workstation 12.

→NOTE: These exercises are tested for VMware Workstation version 10. There may be issues
with previous versions.

You need to purchase a VMware Workstation license; however, you have 30 days to use
the trial version.

Task 2 – Set Up the VMware Network Environment

You will configure three VMware networks. VMnet1 acts as the Out of Band Management network for
accessing the BIG-IP Configuration Utility. VMnet2 acts as the external network for users accessing virtual
servers. VMnet3 acts as the internal VLAN where the back-end Web servers are located.

 Launch VMware Workstation, and then select Edit > Virtual Network Editor.
 Remove any existing VMnet Networks except for VMnet0.
 Click the Add Network button, and add VMnet1, VMnet2 and VMnet3.
 Select VMnet1, and configure as follows:
o Select the Host-only (connect VMs internally in a private network) option.
o Select the Connect a host virtual adapter to this network checkbox.
o Leave the Use local DHCP service to distribute IP address to VMs checkbox selected.
o In the Subnet IP field enter 10.1.1.0,
o In the Subnet mask field enter 255.255.255.0.
o Click the DHCP Settings button.
o Change the Start IP address to 10.1.1.150 and the End IP address to 10.1.1.160, and then
click OK.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 3
 Part 1 – Configuring VMware Workstation
→NOTE: You will use this network to access the BIG-IP management interface.

This configures your local workstation with a VMware Network Adapter VMnet1 IP address within the
10.1.1.0 network.
 Select VMnet2 and configure as follows:
o Select the NAT (shared host’s IP address with VMs) option.
o Select the Connect a host virtual adapter to this network checkbox.
o Leave the Use local DHCP service to distribute IP address to VMs checkbox selected.
o In the Subnet IP field enter 10.1.10.0.
o In the Subnet mask field enter 255.255.255.0.
o Click the NAT Settings button.
o In the Gateway IP field enter 10.1.10.2, and then click OK.
o Click the DHCP Settings button.
o Change the Start IP address to 10.1.10.150 and the End IP address to 10.1.10.160, and then
click OK.

→NOTE: These NAT settings enable the BIG-IP VE system reach the Internet through your
workstation’s network adapter.

This configures your local workstation with a VMware Network Adapter VMnet 2 IP address within
the 10.1.10.0 network.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 4
 Part 1 – Configuring VMware Workstation
 Select VMnet3, and configure as follows:
o Select the Host-only (connect VMs internally in a private network) option.
o Clear the Connect a host virtual adapter to this network checkbox.
o Clear the Use local DHCP service to distribute IP address to VMs checkbox.
o In the Subnet IP field enter 10.1.20.0.
o In the Subnet mask field enter 255.255.255.0.

→NOTE: Ensure that the “Connect a host virtual adapter to this network” checkbox is cleared.
This prevents your local PC from having direct access to the internal network.

 Click OK.
Your local workstation should not receive a VMware Network Adapter VMnet3 IP address.
 Open a command prompt and type:
ipconfig

 Use the table below to note the IP addresses for your VMnet adapters.
Adapter IPv4 Address
VMnet1
VMnet2

 Close the command prompt.

Task 3 – Download the Virtual Images

Download the BIG-IP image file to your local workstation, and then download and unzip the VMware back-end
server image and other vLab files.

 Access and log in to the F5 product download page at https://downloads.f5.com/esd/productlines.jsp.

 Click BIG-IP v13 x / Virtual Edition, and ensure that 13.0.0 is selected in the product version list box.
 Click Virtual-Edition, and then accept the license agreement.
 Click BIGIP-13.0.0.0.0.1645.ALL-scsi.ova.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 5
 Part 1 – Configuring VMware Workstation
 Click the best download link for your location.
 Save the file to a directory on your local workstation.

→NOTE: Ensure the location of this directory has at least 6GB of free disk space.

 Access the F5 product download page again.

 Click Virtual Lab Environment (vLab).

 Ensure that 4.0 is selected in the version list box.

 Click vLab_files, and then accept the software terms and conditions.
 Download the following files:
o The most current _Partner_vLab_Package.zip file
o LAMP_4.zip
o Windows_7_External_v2.zip
o Windows_7_Internal_v1.zip

→NOTE: You can use the Windows 7 image instead of your own workstation to prevent installing
agents on your own workstation. In addition, all browsers and utilities needed for
hands-on exercises or customer demonstrations have already been configured on this
image. In order to use the Windows 7 image it is expected that you have a valid
Microsoft license key.

 Unzip each downloaded file in the local directory you created earlier in this task.

Task 4 – Open the BIG-IP VE System VMware Image

Use VMware Workstation to open the BIG-IP VE image file.

 In VMware Workstation, go to File > Open.

 Navigate to the location where you saved the BIG-IP image file, then select the
BIGIP-13.0.0.0.0.1645.ALL-scsi.ova image file, and then click Open.
 Name the new virtual machine BIGIP_A_v13.0.
 Enter or browse to a location with at least 4 GB of free disk space and click Import.

 Click the Accept button.

It will take a few minutes for the BIG-IP VE image to import.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 6
 Part 1 – Configuring VMware Workstation
 After the import completes, select BIGIP_A_v13.0 from the Library menu, and then
click Edit virtual machine settings.

 Adjust the Memory to 4096 MB.

 For Hard Disk (SCSI), ONLY IF the current value is less than 80 GB, select Hard Disk (SCSI), and then on
the right-side of the window go to Utilities > Expand, then set the Maximum disk size (GB) to 80, and
then click Expand.

 For Hard Disk 2 (SCSI), ONLY IF the current value is less than 20 GB, select Hard Disk (SCSI), and then on
the right-side of the window go to Utilities > Expand, then set the Maximum disk size (GB) to 20, and
then click Expand.
 Map the network adapters to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: VMnet1 (Host-only) Management port access
Network Adapter 2 Custom:VMnet2 (NAT) Used for the external self IP address
Network Adapter 3 Custom: VMnet3 Used for the internal self IP address
Network Adapter 4 Bridged (Automatic) Not used; clear the Connect at power on
checkbox

 Click OK.

Task 5 – Open the LAMP VMware Image

Use VMware Workstation to open the LAMP VMware server images.

 In VMware Workstation, go to File > Open.

 Navigate to directory that you unzipped the VMware images and open LAMP_4.
 Select the LAMP_4.vmx image file, and then click Open.
 In the VMware Workstation dialog box, click Take Ownership.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 7
 Part 1 – Configuring VMware Workstation
 Select LAMP_4 from the Library menu, and then click Edit virtual machine settings.
 Map the network adapters to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: Communicates with the management port
VMnet1 (Host-only)
Network Adapter 2 Custom: VMnet3 Communicates within the internal VLAN

 Click OK.

Task 6 – Edit the Settings of the LAMP Image

The LAMP_4 image requires manual network configuration changes.

 Select LAMP_4 from the Library menu, and then click Power on this virtual machine.
 If prompted, click “I copied it”.
 After the image powers on, within the VMware window on the LAMP desktop, leave the Xubuntu user
account selected and click Login.
 Click the Applications Menu icon on the top-left of the screen and go to Settings > Settings Manager.

 In the Hardware section, click Network Connections.

 Select Wired connection 1, and then click Edit.
 From the Device MAC address list box, select the MAC address for eth0.

 Click Save.
 Select Wired connection 3, and then click Edit.
 From the Device MAC address list box, select the MAC address for eth1, and then click Save.
 Delete Wired connection 2 and Wired connection 4.

→NOTE: The wired connection entries will not be removed from the Network Connections list
until you reboot the image.

 Close the Network Connections and Settings dialog boxes.

 In the VMware library, power off the LAMP_4 image.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 8
 Part 1 – Configuring VMware Workstation
 Right-click LAMP_4 in the Library menu and select Snapshot > Take Snapshot.
 Name the snapshot LAMP_4_Clean, and then click Take Snapshot.

Task 7 – Open the DoS_Tool VMware Image

Use VMware Workstation to open the DoS_Tool VMware server images.

 In VMware Workstation, select File > Open.

 Navigate to the _Partner_vLab_Package directory, then open the DoS_Tool directory, then select
DoS_Tool_4.0.vmx, and then click Open.
 Click Take Ownership.
 Select DoS_Tool_4.0 from the Library bar, and then select Edit virtual machine settings.
 Map the network adapter to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: VMnet3 Communicates within the internal VLAN

 Click OK.

Task 8 – Open the Windows 7 External VMware Image

Use VMware Workstation to open the Windows 7 External image.

 In VMware Workstation, go to File > Open.

 Navigate to directory that you unzipped the VMware images, and open Windows_7_External.
 Select the Windows_7_External.vmx image file, and then click Open.
 Click Take Ownership.
 Select Windows_7_External from the VMware library, and then click Edit virtual machine settings.
 Map the network adapter to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: VMnet2 (NAT) Communicates within the external VLAN
Network Adapter 2 Custom: VMnet1 Communicates with management port

 Right-click Windows_7_External in the Library bar and select Snapshot > Take Snapshot.
 Name the snapshot Windows_7_External_Clean, and then click Take Snapshot.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 9
 Part 1 – Configuring VMware Workstation

Task 9 – Open the Windows 7 Internal VMware Image

Use VMware Workstation to open the Windows 7 image.

 In VMware Workstation, go to File > Open.

 Navigate to directory that you unzipped the VMware images, and open Windows_7_Internal.
 Select the Windows_7_Internal.vmx image file, and then click Open.
 Click Take Ownership.
 Select Windows_7 from the VMware library, and then click Edit virtual machine settings.
 Map the network adapter to the appropriate VMware networks using the following table:
Device Network connection Use
Network Adapter Custom: VMnet3 Communicates within the internal VLAN

 Right-click Windows_7_Internal in the Library bar and select Snapshot > Take Snapshot.
 Name the snapshot Windows_7_Internal_Clean, and then click Take Snapshot.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 10
 Part 2 – Configuring the BIG-IP VE

Part 2 – Configuring the BIG-IP VE

• Your workstation needs Internet access to complete the licensing portion of this exercise.
• Required virtual images: BIGIP_A_v13.0.0.
• Estimated completion time: 30 minutes

Task 1 – Configure BIG-IP Management Interface Settings

Power on the BIG-IP VE image and then configure the management interface settings.

 Click BIGIP_A_v13.0 from the Library menu, and then click Power on this virtual machine

 After the BIG-IP VE system has powered on, you are presented with the localhost login screen.

 Log in to the BIG-IP system using the following credentials:

localhost login: root
Password: default
 At the CLI prompt, type:
config

→NOTE: The following must be completed using your keyboard only.

 Press the Enter key to activate the OK option.

 Use the Tab key to activate the No option, and then press the Enter key.
 Edit the IP Address to 10.1.1.245, then press the Tab key to activate the OK option, and then press
the Enter key.
 Ensure that the Netmask is 255.255.255.0, press the Tab key to activate the OK option, and then press
the Enter key.
 Press the Enter key to activate the Yes option to create a default route for the management port.
 Edit the Management Route to 10.1.1.1, then press the Tab key to activate the OK option, and then
press the Enter key.
 Press the Enter key to activate the Yes option to accept the settings.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 11
 Part 2 – Configuring the BIG-IP VE

Task 2 – Generate a BIG-IP VE License Key

Request BIG-IP trial licenses from F5.com.

 Use a new tab to access https://f5.com/products/trials/product-trials.

 Under Download a Free Trial Now click Start your trial.

→NOTE: You can generate up to 9 BIG-IP trial licenses each year. Each license is good for 90 days.
However, you are only able to submit a request 3 times each year. Therefore, it is
recommended that each time you request a trial license you request the maximum of 3
licenses per request.

 Click Generate Registration Key.

 On the next screen, answer the first two questions.
 We recommend you request 3 license keys.
 Enter the correct CAPTCHA challenge and then click Request license keys.
You will receive an email with 3 BIG-IP trial licenses and 1 BIG-IQ trial license.

Task 3 – Configure Network Settings on the BIG-IP VE System

Use TMSH to configure the BIG-IP VE system with network settings.

 Use an SSH session to access 10.1.1.245, and log in using the following credentials:
Username: root
Password: default
 Copy the following TMSH commands and then paste them at the CLI prompt. You can copy and paste all
lines together.
tmsh create net vlan external interfaces add { 1.1 { untagged } }
tmsh create net vlan internal interfaces add { 1.2 { untagged } }
tmsh create net self 10.1.10.241 address 10.1.10.241/24 vlan external allow-service add { tcp:443 }
tmsh create net self 10.1.20.241 address 10.1.20.241/24 vlan internal allow-service default
tmsh create net route Default_Gateway network 0.0.0.0/0 gw 10.1.10.2
tmsh save sys config
exit

Task 4 – Access the BIG-IP VE System and Complete the Setup Utility
Use a web browser to access the management port of your BIG-IP system, and then complete the steps of the
Setup Utility, including activating the BIG-IP system.

 Open a web browser and access https://10.1.1.245.

 Log into the BIG-IP VE system using the following credentials:
Username: admin
Password: admin
 On the Welcome page click Next.
 On the License page click Activate.
 Open the email from F5 Networks with your Evaluation Registration Key and copy the
Registration Key text.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 12
 Part 2 – Configuring the BIG-IP VE
 In the Setup Utility, in the Base Registration Key field, paste the registration key text.
 For Activation Method, select Manual, and then click Next.

 Select and copy all of the dossier text to your clipboard. (NOTE: Use Ctrl + A and then Ctrl + C.)
 Select Click here to access F5 Licensing Server.
 On the Activate or Upgrade BIG-IP page, click Activate License.
 Paste the dossier text in the field, and then click Next.
 Select to accept the legal agreement, and then click Next.
 Select and copy all of the license key text to your clipboard (NOTE: Use Ctrl + A and then Ctrl + C.),
and then close the Activate F5 Product page.
 On the Setup Utility > License page, paste the license key text into the Step 3: License field, and then
click Next.
The BIG-IP VE system configuration updates. This takes several seconds.
 After the configuration changes complete, log in to the BIG-IP VE system.
 On the Resource Provisioning page leave Local Traffic (LTM) as the only provisioned module and
click Next.
 On the Device Certificates page click Next.
 On the Platform page, configure these settings using the following information, and then click Next.
Host Name bigipA.f5demo.com
Root Account (Password and Confirm) default
Admin Account (Password and Confirm) admin

 Click OK, and then log back in to the BIG-IP VE system.

 Under Standard Network Configuration click Next.
 On the Redundant Device Wizard Options page leave the default settings and click Next.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 13
 Part 2 – Configuring the BIG-IP VE
 In the Internal Network Configuration and Internal VLAN Configuration sections, configure the
highlighted settings using the following information, and then click Next.
Self IP: Address 10.1.20.241
Self IP: Netmask 255.255.255.0
Self IP: Port Lockdown Allow Default
Floating IP: Address 10.1.20.240
Floating IP: Port Lockdown Allow Default
Interfaces 1.2 (untagged)

 In the External Network Configuration and External VLAN Configuration sections, configure the
highlighted settings using the following information, and then click Finished.
External VLAN Create VLAN external
Self IP: Address 10.1.10.241
Self IP: Netmask 255.255.255.0
Self IP: Port Lockdown Allow 443
Default Gateway 10.1.10.2
Floating IP: Address 10.1.10.240
Floating IP: Port Lockdown Allow 443
VLAN Interfaces 1.1 (untagged)

 On the High Availability Network Configuration page, configure the highlighted settings using the
following information, and then click Next.
High Availability VLAN Select existing VLAN
Select VLAN internal
Self IP: Address 10.1.20.241
Self IP: Netmask 255.255.255.0
VLAN Interfaces 1.2 (untagged)

 On the Network Time Protocol Configuration page, enter10.1.20.252, then click Add, and then
click Next.
 On the Domain Name Server Configuration page, enter 4.2.2.2 and then click Add.
 Select the 10.1.1.1 entry, then click Delete, and then click Next.
 On the ConfigSync Configuration page, leave 10.1.20.241 (internal) selected and click Next.
 On the Failover Unicast Configuration page, leave the default settings and click Next.
 On the Mirroring Configuration page, leave the default settings and click Next.
 On the Active/Standby Pair page, under Advanced Device Management Configuration click Finished.
 Open the Network > Self IPs page and click 10.1.10.241.
 Add TCP port 22 to the Custom List and click Update.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 14
 Part 2 – Configuring the BIG-IP VE

Task 5 – Configure System Settings

Configure system preferences and a default node monitor.

 Open the System > Preferences page and modify the following, and then click Update.
o Records Per Screen: 25
o Idle Time Before Automatic Logout: 100000 seconds
o Security Banner Text:
Welcome to the F5 BIG-IP VE (Virtual Edition) vLab environment.

The vLab environment is intended for F5 Networks training and demonstration purposes only.
You are not authorized to distribute the vLab to any other parties.

Task 6 – Import an SSL Certificate and Key

Import the vlab.f5demo.com.2017 certificate and key, and then import the entrust_chain certificate chain.

 Open the System > Certificate Management > Traffic Certificate Management > SSL Certificate List page
and click Import.
 From the Import Type list box, select Certificate.
 In the Certificate Name field, type f5demo_2017, and then click the Browse button.
 Navigate to the Documents\Exercise_Files folder, select the vlab.f5demo.com.2017.pem file, and then
click Open.
 Click Import.
 Click the Import button again, and then from the Import Type list box, select Key.
 In the Key Name box, type f5demo_2017, and then click the Browse button.
 Select the vlab.f5demo.com.2017.key file, and then click Open.
 Click Import.
 Click the Import button again, and then from the Import Type list box, select Certificate.
 In the Certificate Name box, type chain_2017, and then click the Browse button.
 Select the entrust-chain.txt file, and then click Open.
 Click Import.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 15
 Part 2 – Configuring the BIG-IP VE

Task 7 – Create a Client SSL Profile

Create a new client SSL profile using the vlab.f5demo.com.2017certificate and key.

 Open the Local Traffic > Profiles > SSL > Client page, and then click Create.
 Name the profile f5demo_client.ssl.
 For Certificate Key Chain select the Custom checkbox, and then click Add.
 Use following information: (NOTE: Copy and paste the pass phrase.)
Certificate f5demo_2017
Key f5demo_2017
Chain chain_2017
Pass Phrase IamFfive2Day

 Click Add.

 Click Finished.

Task 8 – Create an Archive File

Create an archive file which you’ll use as the starting point in all exercise and demonstration guides.

 In the Configuration Utility, open the System > Archives page.

 Create a new archive file named clean_install_bigipA_v13.0.
 In the VMware library, shut down the BIGIP_A_v13.0.0 image.
 Create a VMware snapshot named BIGIP_A_clean_install.

That concludes the setup and configuration of the F5 vLab.

WWFE vLab Guides – vLab Setup Guide for VMware Workstation; v13.0.A Page | 16