Creating an F5 BigIP Virtual Lab

0:00<v Instructor>So let's spend a few minutes</v>

0:02taking a look at our F5 - 101 - Lab Topology,

0:06because we're gonna build this out in an ESXi host.

0:09And you can do this in a VMware workstation

0:14or VMware player or Hyper-V,

0:16or whatever virtualized environment you want to use

0:19because F5 does provide several different types

0:23of their virtual appliance for different environments.

0:26So we're gonna see that too.

0:28So let's start with looking at our lab here.

0:29And the idea is that we have three separate networks.

0:36So, we'll say three nets over here.

0:38And let's start by looking at what those are.

0:40So over here, this area here with the F5 BIG-IP

0:46being the center of our topology.

0:49This area here, that is our external

0:54or WAN portion of our lab.

0:57So this external/WAN subnet or network,

1:04uses the 172.16.101.0/24 subnet, all right?

1:12That is that portion of the network.

1:14And in that portion of the network,

1:16we have a Windows host here, and that is our test host.

1:21So we're gonna use that to test accessing services

1:24behind our F5 BIG-IP.

1:28So we're gonna go from this device here

1:29to Windows operating system.

1:31We're gonna be accessing services.

1:33So that's what that is for.

1:35All right, so let me remove a little bit of that.

1:37There we go.

1:38Now let's talk about our second network.

1:41So this is our first network.

1:43I'm gonna make a division there.

1:45Let's go with our second one.

1:47Our second one was over here on the right,

1:51and let's put a box around that.

1:54That is our management network.

1:57So two is our management,

2:00and that is using 192.168.121.0/24 subnet.

2:07And that is actually where we're going to be accessing

2:10the internet from our F5 device.

2:13So that's the only way the F5 can access the internet,

2:16and that's how we're setting this up,

2:17so that we can go out and we can register our licenses,

2:20we can get updates and do that kind of things

2:22through the management network.

2:25Then we have one more, as you can see.

2:28And this last one is here on the inside

2:32or the internal interface of our F5 appliance.

2:37So three is internal or we're also gonna refer to it as LAN

2:42because it's the LAN side of our network,

2:45and it uses the 10.10.101.0/24 subnet.

2:51So those are our three different networks

2:54that we're going to need to build

2:55and use within our environment.

2:58And actually, we're not gonna build the management network,

3:01it's already built.

3:02It's just my basic LAN here in the lab.

3:05So we're actually gonna build out our WAN, our external,

3:09and our internal LAN, so that we can use that.

3:12Now, let me go ahead and clear some of this off of here

3:16now that we see the three different networks.

3:18And let's talk about the F5 itself.

3:21So here in the center, we have our F5 appliance,

3:25and we can see that Interface 1.1 here

3:28is going to be our external or WAN interface,

3:31and we have an IP address associated with it,

3:34and we see a word "floating" over here.

3:36Now, floating is an IP address, a floating IP,

3:40that is shared amongst multiple F5 BIG-IP devices, okay?

3:44So when we're doing an HA deployment or a high availability,

3:49where we have more than one BIG-IP devices here,

3:54well, those act as a pair.

3:56And this floating IP actually runs on both of them

4:02so that when you're connecting to it,

4:03either one can respond as a pair.

4:06So, this provides this high availability and redundancy.

4:10That's what that floating is for.

4:12Then over here on the inside, we have Interface 1.2.

4:17That's our internal or LAN interface.

4:19We see the IP address associated with it

4:21and the floating IP.

4:23And then of course down here,

4:24we have our management network as well.

4:27Now, we had already seen our external Windows test host

4:31that we're gonna use to perform testing

4:32of accessing services through our F5.

4:35But over here, down at the bottom,

4:38we also have three web servers.

4:40These are all Linux web servers that we're going to use

4:43to load balance between and perform other activities

4:45and services.

4:46So we see that there.

4:48So we do have three of those

4:49that we're gonna need to set up as well.

4:51And I'm gonna show you where you can download an image

4:53that already has those ready to go,

4:55so you can just deploy the image,

4:57makes it very fast and efficient.

4:59And your Windows host, you don't have to use a Windows host

5:01when we're talking about our test machine

5:03up here at the top.

5:04You can use any operating system

5:06that provides you a desktop with a web browser.

5:08So you could run a Linux desktop on there if you wanted to,

5:11or you can use a Windows demo license

5:13like I've done in my lab environment.

5:15So, we're gonna have to set up a couple of these networks,

5:18we're gonna have to set up our three web servers,

5:20we're gonna have to set up a Windows host

5:22or a Linux desktop of your choice, whatever you want to use.

5:25And then of course, we're gonna have to deploy our F5 device

5:29and we're gonna use all these addresses,

5:30and we're gonna go through this.

5:32So no big deal there.

5:34But it's gonna be pretty fun,

5:35I'm excited about setting up this lab with y'all.

5:37So now that we know what the topology looks like,

5:40let's go ahead and continue with setting up the lab

5:42in the next nugget.

0:00All right, here we are. We are on a website. We're at my f5.com

0:05And that's where you need to go to start out and follow along here

0:08So now that we know what we're going to be setting up in our lab, we need to do

0:12a couple things we need to

0:13Go ahead and sign up for an account if you don't already have them with my f5.

0:18com

0:19So you'll come over here click on sign in and

0:21If you don't have an account

0:25You'll go down here to sign up and go ahead and go through the process of

0:28setting up your account, but I already have one

0:30So I'm gonna sign in here. There we go next and sign in

0:33Alright now I am signed in and we need to do this so that we can download our

0:39virtual image of our

0:41big IP virtual appliance and

0:44Get a trial license as well so we can install and use it

0:48So the first thing we're to do is go ahead and download our image

0:52So what we're gonna do we're gonna go up here to

0:55Resources and then go down to downloads. There we go and in order download

1:02product software

1:03You have to accept the terms and conditions. So we'll go ahead and do that and

1:06say next

1:06Now I need to select a family. I'm gonna go with big IP. That's what I want to

1:11use

1:12Then we're gonna come down here to select a product line. We're gonna go down

1:15here to big IP version 17.x

1:18That's the latest of the team-os

1:21Operating system here the traffic management operating system

1:24So we're gonna go ahead and click that then you'll select your product version

1:27over here on the right once it finishes that

1:29We'll go to 17.1 getting the latest version. All right super now

1:34What we're gonna do is scroll down here and we're looking for virtual edition

1:39over here on the right. So right there

1:41There's one 17 1 0 2 virtual edition

1:44So let's go ahead and grab that and we're gonna click on that and what that

1:47does is we're selecting the virtual edition of the F5

1:51Appliance the big IP and we're grabbing the latest version of that perfect

1:56virtual edition. There we go. So now we're gonna scroll on down

1:59So we scroll down here to select and download file now the easiest way to do

2:05this search for VMware

2:06So I'm gonna do control F to search. I'm gonna type in VMware. There we go. We

2:10're looking for right here this

2:12image file set

2:16For VMware ESXi server. That's our 17 1 0 2. This is key here all

2:22ALL that's because it will include all the different modules because if you

2:28select

2:29Something other than that actually will scroll down and I'll show you

2:32Let's see if we go down here to just LTM that LTM is our local traffic manager

2:37only it doesn't have the other module

2:39So we don't want that one the other thing is this one slot you see that that

2:43means there is one

2:45Bootable slot so you can't upgrade

2:47This so we don't want that either. We want this one right here

2:50big IP

2:5317 1 0 2 all VMware OVA. That's exactly what we want

2:56So I'm gonna click on that and then we're going to go ahead and scroll all the

3:00way down here

3:01Then we're going to select our location

3:03I'm gonna say us east coast and then I would click right here on this download

3:08now

3:08You select your location whichever one closes to you and you go ahead and

3:11download that but I've already done that

3:12So we don't have to but that's what you're gonna download so that is

3:16our

3:18OVA file that's our virtual image for our virtual big IP device

3:22So once you've done that you have it we need a trial license

3:27So now let's go ahead and grab that. Oh, but wait there's something else. I

3:31want to show you real quick

3:32Let's go back down here to the downloads. So what I want to show you is that

3:35there are other options

3:37So let's see if I'm scrolling through here

3:39We saw VMware ESXI but if you're wanting to spin this up in KVM red hat boom

3:44there you go

3:45That is your image set for KVM and here's image file set for Microsoft hyper V

3:52in case you want to do it in hyper V

3:53So you don't have to use the anywhere as I said earlier

3:56You can use something else if you want to and you can actually use GNS3 as well

4:01If you go to the GNS3 marketplace, they have a big IP image available for use

4:06there as well

4:07So either way you can grab your image that you want so but we still have to

4:11grab a trial license

4:12Let's go back up to the top and let's go ahead and do that

4:14So I'm gonna go to my products and plans and we'll go to trials right there

4:19come down here

4:21And this is what we want right here. We're gonna say big IP VE and big IQ VE

4:26That's a VE is our virtual edition and this is a 30-day trial and you can

4:30actually do two of these

4:31I think within a 12-month period so you can get 60 days here

4:35So I'm already tried one. I'm gonna grab another trial though here

4:40so I'm gonna say start another trial and here I want you to

4:44deal with export compliance because these

4:48Systems do use cryptography and there are laws against exporting various types

4:53of cryptography

4:54Says are you downloading this software for a non-US government entity?

4:57What we do is go down here and select no

4:59I am not downloading on behalf of a government entity go ahead and hit save

5:05Because we're doing this in a lab environment. This isn't gonna be production

5:09So as there goes setting up your trials might take a few minutes

5:12So we're gonna give that a couple minutes to finish that up and then we'll

5:15continue

5:16okay finished and

5:19Offers me some other trials here, but if I scroll down to my trials now

5:23I can see I have an active status on a big IP VE. That's we're gonna be using a

5:29trial

5:29So if I click on that and go into it here, let this load up

5:34It's gonna give me some information such as downloading the latest version

5:38installing the software and

5:40Doing all those wonderful things, but this is what we're interested in here the

5:44registration key

5:46That's right. So here we're gonna be looking at the big IP virtual edition

5:50licenses and it gives us two of them here and that's because we may want to set

5:56up two in an

5:57HA or high availability pair

6:00So what we're gonna do is we're just gonna leave this up for now because that

6:04wraps up this nugget

6:06We've downloaded our image for our big IP and we've got a license in the next

6:11day

6:12We're gonna start building out a virtual environment. So I'll see you there

6:14[BLANK_AUDIO]

0:00<v Instructor>All right, here we are.</v>

0:01We're on our VMware ESXi lab host, as you can see.

0:06And what we're gonna start off with

0:07is creating our networking.

0:09Pretty simple.

0:09Remember, we're building two networks.

0:12So if I jump back here real quick, this is our topology.

0:15We needed to build out our WAN network,

0:17our external network,

0:18and our LAN network, our internal network,

0:21because the management,

0:22and I said we were gonna just stick

0:23that on our standard lab network

0:26so we don't have to build anything there, okay?

0:28And so let's go ahead and do that.

0:30So let's jump back over here.

0:31All right, super.

0:32So we're gonna go to networking

0:34and you'll see I have F5 WAN virtual switch.

0:37These are virtual switches.

0:38And I have an F5 LAN virtual switch.

0:41So you'll need to create those two.

0:42So we're gonna walk through

0:43and show you how to create one

0:44if you're not familiar with it.

0:45So just do add standard virtual switch,

0:47bada-bing, bada-bang.

0:48We give it a name,

0:50"F5 WAN", something like this.

0:53And now here, this is the key for the uplinks,

0:55We don't need any uplinks.

0:57This is our physical ethernet interface on our VMware box.

1:01I don't need that because remember these two,

1:05the WAN and the LAN don't have any internet connectivity.

1:07So I don't need to assign an uplink port to them.

1:11And so then I would just simply say add,

1:13and it would create that.

1:14And I need to do that for both the LAN and the WAN.

1:17Then we need to go over to port groups.

1:19We need to create an F5 WAN port group

1:20and an F5 LAN port group.

1:22So what I would do is just simply add port group.

1:25There we go.

1:25Give it a name and we're gonna call this,

1:28let's just say "F5 WAN", that works.

1:31You can add a VLAN ID, but we don't need to.

1:33We're not dealing with VLANs.

1:35And then for your V switch, you'd come down here

1:38and attach it to your F5 WAN V switch.

1:41And then that's all you have to do.

1:43Now for the LAN, we would do F5 LAN

1:46as the name of the port group.

1:48Come down here and attach it

1:49to the F5 LAN virtual switch.

1:52There we go and that creates our networking.

1:54And I said with our management network,

1:56we're gonna attach to the just standard VM network.

1:59And here it's the VM network port group,

2:01which is tied to the vSwitch0 up here.

2:05And so that's just your default name

2:06when you first set up VMware ESXi, you have a vSwitch0

2:09with a VM Network port group.

2:12So that's setting up our network for this.

2:14So that's all we have to do in this nugget.

2:16Just go ahead and set those up because when we go ahead

2:19and deploy our big IP in the next nugget,

2:22we're gonna have to have these networks ready

2:24and available so we can assign them

2:25to the interfaces on our big IP.

2:27So I'll see you there shortly.

0:00<v Instructor>All right, here we are</v>

0:01back in our VMware ESXi host,

0:03and we're in our virtual networking

0:04where we set up our virtual networks,

0:06our F5 WAN and LAN environments,

0:09our vSwitch and port group,

0:10and we did that in the last nugget.

0:11So now let's go ahead and deploy our BIG-IP.

0:14So what we're gonna do,

0:15we're gonna go up here to Virtual Machines,

0:17and we're gonna go to Create Register VM.

0:19There we go.

0:20And we're gonna select Deploy a virtual machine

0:23from an OVF or OVA,

0:24because we downloaded the OVA file from F5.

0:28So I'm gonna select that.

0:29I'm gonna say Next, and enter a name.

0:31We're gonna call this BIGIP-1.

0:35There we go, super duper.

0:36I'm gonna see, let's go to here, I can click on this

0:41and go and find the OVA file I downloaded,

0:44or I can drag it up there, so that's what I'm gonna do.

0:47I'm gonna go ahead and drag that up.

0:49There we go. That is what we had downloaded.

0:52I'm gonna say Next.

0:53I'm gonna select the data store where I want that to reside.

0:56I only have one data store, so it's gonna reside there.

0:59And here we have the EULA, so I need to go ahead

1:01and read through this and make sure I agree to it,

1:03and then click I agree, then I'll say Next.

1:07Now here we go.

1:08So for network mappings,

1:11this is our Management, Internal, External,

1:12and HA, or High Availability.

1:15So what I'm going to do here

1:17is select my Management Network,

1:18and that is gonna be just my standard VM network.

1:22I'm gonna select my Internal.

1:23That's gonna be our F5 LAN.

1:26Our External is gonna be our F5 WAN.

1:28And then our HA, or High Availability,

1:31what I'm gonna do is just set that to F5 LAN.

1:35There we go, and super duper.

1:38Now for Deployment Type, number of CPUs and RAM,

1:41I'm just gonna leave as default.

1:43This is a lab environment.

1:43We're not pushing these things hard.

1:45For Disk Provisioning, I'm gonna leave it at Thin.

1:47That's fine. You can do Thick if you want to.

1:49Power On Automatically. I'm gonna turn that off, though.

1:52And I'm gonna say Next, super, and I'm gonna say Finish.

1:56And at this point, it's gonna go ahead

1:58and start deploying our device.

2:01We see BIG-IP is already listed down here at the bottom,

2:05and right now, we can see down here if we look

2:08under Upload Disk right here,

2:10it's going and it's gonna go through and do that.

2:12It's gonna take a little while, and once it's finished,

2:14I'm gonna go ahead and pause this video here,

2:16but once it's finished, I'll come back,

2:17and we'll do the initial configuration

2:20via the command-line interface on this BIG-IP device.

2:23So I'll see you back here when this finishes its deployment.

2:28All right, my deployment has successfully completed. Super.

2:33So I'm gonna go over here to the BIGIP-1.

2:34I've already got that checked there,

2:35so I'm gonna check that,

2:37and we're going to go ahead and do a Power On.

2:39All right, super.

2:40I'm gonna click on BIGIP-1 here,

2:41so I can go into that page and open this up.

2:44There we go, and you can see here

2:45that it's booting up our F5 BIG-IP LTM Virtual Edition,

2:50and we'll just give this a few minutes to boot up

2:52and I'll be back.

2:54All right. It has booted up.

2:55So what we're gonna do now is gonna go ahead and log in.

2:59The default credentials are root. Hit Enter.

3:03And the word default.

3:06There we go.

3:08Now let's see.

3:09I need to enter my current password,

3:12which is the default password of default, D-E-F-A-U-L-T.

3:18Hit Enter.

3:18New BIG-IP password. I'm gonna put one in.

3:22There we go.

3:23Bad password.

3:24It's based on a dictionary word.

3:25So don't use a dictionary word. (laughs)

3:29There. Let's try that one.

3:31And that one.

3:32There we go. Super.

3:34So it says my admin user password has been changed.

3:37All right. Excellent.

3:39And you'll see here now that it shows

3:42that we are in the config #, so we're in the config mode.

3:46So I'm gonna type config, hit Enter,

3:49and it's going to bring up a wizard

3:50for me to go through to set this up.

3:53Just some basics here.

3:54So I'm gonna say OK.

3:56And select IPv4 or 6.

3:58I'm gonna go with IPv4.

4:00All right, now it comes up

4:01and it asks me what I want to use for my IP address.

4:05It says use automatic configuration, which means DHCP.

4:09I'm gonna say No.

4:10Because I want to manually configure this.

4:12So I'm gonna go ahead and do that.

4:14And the address is 192.168.121.something.

4:18So here we're doing our management IP address.

4:21So keep that in mind.

4:22So I'm gonna go over here to our lab topology.

4:26And our management network is 192.168.121.11.

4:31So let's go back now.

4:32Let's put that in there, 11. There we go.

4:35Say OK.

4:38And my subnet mask.

4:40Yes, that is perfect.

4:41Default class C. Enter.

4:43And my current route, my default gateway is 192.168.121.1.

4:47Yes, I want to keep that.

4:49So I'll say yes.

4:52And go over here and hit OK.

4:54Super.

4:55Now my system management connectivity says

4:58it'll be lost if you're changing the address.

5:00Do you want to save these settings?

5:01Yes. Enter.

5:04And now it's gonna go through

5:05and it's going to apply these settings.

5:08And there we go. It's finished.

5:10And I can hit Enter now.

5:11I'm out of this wizard kind of mode.

5:13But what we want to do now

5:15is we want to use the ifconfig | more command.

5:20And that pipe, if you're not familiar with this,

5:22it's usually right below your Delete key.

5:24So we're gonna hit Enter.

5:26And there it's gonna give us our ifconfig information.

5:29And what we're looking for is down here under management.

5:33So if you look all the way down here at the bottom,

5:38the management interface is showing the INET address

5:42is 192.168.121.11.

5:46And that is absolutely correct. So that's working for us.

5:49So now that that's configured, we should be able to,

5:52I'm gonna go ahead and close this out.

5:55There we go.

5:56And I'm gonna open up a web browser here, a new tab.

5:59I'm gonna put in here https://192.168.121.11. Hit Enter.

6:06And say yes, advance. Go ahead and proceed to this.

6:11And there we are.

6:11We are now connected to our BIG-IP configuration utility.

6:15So that's our BIG-IP management interface.

6:17Now in the next nugget, we're going to go through

6:20and configure this thing, all right?

6:22So I will see you there shortly.

0:00<v ->All right, now it's time to log into our BIG-IP appliance</v>

0:03and go ahead and do some basic config.

0:05So here, we are connected to 192.168.121.1,

0:09because that's the IP address of the management interface.

0:12We put in admin as the username,

0:16and the password's gonna be whatever we set

0:19in the last nugget when we went ahead

0:21and configured a password.

0:22So I'm gonna put that in, and there it goes.

0:25I need to put that password in again,

0:26'cause it's gonna make me change it again.

0:28Okay. And then come down here and put in a new password.

0:31And confirm that. Super.

0:34And go ahead and click Save.

0:37All right, "Password changed successfully,"

0:40is what it's shown here.

0:41So now I'm gonna log in with my new password,

0:43admin and the new password.

0:45Excellent. Say Log in.

0:47And super.

0:48Now we are here and let's look at this for a minute.

0:52Now at the very top we've got a message here.

0:53It says, "No license exists for this device."

0:56So that means we need to put a license in,

0:58and we're gonna do that.

0:59So the first thing we're gonna do,

1:00we are in the Welcome, Setup Utility.

1:02So we're gonna go through this Setup Utility.

1:05But before that I want you

1:06to take a look at the top left here.

1:07We have a host name, bigip1. We got our IP address.

1:10We have a date and time up here,

1:12the user that's logged in,

1:13and the role of the user, pretty good.

1:16That's some information you should be familiar with

1:18if you ever need to reference it.

1:19So let's go ahead and click Next on this Setup Utility.

1:22There we go, super. Now it says license not activated.

1:26Let's go ahead and activate a license.

1:27Let's get our trial license. So here we go.

1:30It's now asking for our registration key.

1:33So I'm gonna jump back over to the F5 website,

1:36there we go, where we've got our license key.

1:39So I'm gonna grab that first one

1:41for our BIG-IP Virtual Edition.

1:43I'm gonna grab that. Super.

1:46I'm gonna go back over to my BIG-IP.

1:48I'm gonna paste that in, just like that. Super.

1:52And you can add additional keys if you'd like to,

1:55but we're not gonna do that.

1:56For your Activation Method,

1:57we're gonna do Automatic, requires outbound connectivity,

2:00which is fine, means it's gonna reach out to F5

2:03and make sure everything's okay.

2:04So your Outbound Interface, need to make sure this is set

2:06to our management interface.

2:07That's how we have it configured in the lab.

2:09All right, and license comparison,

2:11we're not gonna do that for now.

2:12We're just gonna say Next.

2:14So right now it's receiving config data from your device,

2:17communicating out to F5.

2:20So we're gonna give that a minute

2:21to go ahead and do its communications.

2:24All right, there it went, it communicated out.

2:26Now we have to accept the EULA.

2:28So let's go ahead and do that. Accept.

2:30It's gonna go ahead and communicate outbound again.

2:32And now it says our BIG-IP system configuration has changed.

2:35So what's happening is it's gonna go ahead

2:38and do a utility update.

2:40So we're gonna let that do that,

2:42and then we'll be back when that finishes.

2:44All right, it has finished with that.

2:46So we can go ahead and click on Continue,

2:50and we'll continue with our setup utility.

2:52And this is a resource provisioning page.

2:55We see Resource Provisioning up here, and we can see

2:58there's a whole bunch of stuff in here.

3:00And right now we're looking

3:01at our local traffic manager, LTM.

3:04There's our management.

3:05The provisioning is set to small.

3:08Down here, you can set to dedicated, nominal, and minimum.

3:12So we're gonna leave that at nominal for now,

3:14and we're not using these others just yet.

3:16So we're gonna leave all of that just like it is.

3:19And we're going to go ahead and click on Next. Super.

3:22Now once that goes ahead and finishes out,

3:25it's taking us to the next page.

3:26And this is dealing with our certificates.

3:30So the certificate name is server.crt,

3:33gives you your localhost,

3:34and gives you some information about your certificates.

3:36We don't need to do anything here. So we'll click Next.

3:39And here we have some general settings.

3:41So we see the IP information that we set up earlier.

3:44This is our management information.

3:46This is our Management Config IPV4.

3:49That's exactly what that is.

3:51And our IPV6 is set to DHCP. That's fine.

3:55We should go ahead and give it a host name.

3:57So let's do that.

3:58Let's call this bigip1.f5lab.int for internal.

4:05There we go, perfect. That's just our local host name.

4:09The host IP address. It says Use Management Port IP Address.

4:14We're gonna leave that.

4:15For your time zone, go ahead and select your time zone.

4:17So I need to find mine, right there. That's the closest one.

4:21Super. There we go.

4:23Now for your user administration SSH Access is enabled.

4:27You can actually disable login

4:29for the root account if you'd like to.

4:30Now for SSH IP Allow,

4:32right now it's set to all IP addresses,

4:34but you can select a specific range.

4:35We're gonna leave it at all IP addresses,

4:37'cause this is lab.

4:39And then Disable External Monitors,

4:41I'm not gonna deal with that right now.

4:42So we're gonna go ahead and say Next.

4:44Gonna let that load up,

4:46and oh, I forgot the root account.

4:48You do have to set the root account password.

4:51So let's go ahead and put in our password for that.

4:54And I'm just using the same password I use for my web login.

4:58There we go, super. Now we'll click Next.

5:00Now we have two areas here.

5:02Your Standard Network Configuration appear towards the top,

5:06and the down here, Advanced Network Configuration.

5:08We're gonna go with the standard network configuration

5:10at this point.

5:11So I'm going to click Next here.

5:13So for redundancies,

5:15your Config Sync and High Availability,

5:16we're not dealing with that right now.

5:17So just go ahead and click Next,

5:19'cause we're just doing a basic setup

5:21at this point to get up and running.

5:23So Internal Network Configuration.

5:24This is our inside, our internal. So what is that gonna be?

5:28We need to bring up our topology here.

5:32So our internal is 10.10.101.11,

5:35and the floating is 10.10.101.13.

5:38So 11 and 13, 10.10.101.

5:40So let's go here for internal is 10.10.101.11.

5:46Netmask is just Class C, 255.255.255.0.

5:51Port Lockdown we're not gonna deal with,

5:52but our floating was 10.10.101.13, super.

5:56Now that Port Lockdown, if we look at it,

5:58you can say Allow None for nobody connect to it,

6:01or Allow 443 only.

6:03This is for management to access, connecting in.

6:06There we go.

6:07Internal VLAN Configuration. We've talked about VLANs.

6:09And we can put a VLAN ID if we want to.

6:13Now here is where we can set it to auto, which is just going

6:17to go ahead and automatically select a VLAN ID to use.

6:21And I'm gonna leave this at auto,

6:23because we're not using VLANs

6:24on our internal or external networks here.

6:29VLAN interface though, I need to select an interface.

6:31Now if we go back to our topology, we look at internal,

6:34we're using Interface 1.2, so let's change that.

6:39All right, we're gonna go Interface 1.2.

6:41The Tagging, we're gonna go Untagged,

6:44'cause we're not tagging any VLANs,

6:47because we're not using VLANs in this lab.

6:50So if you were going to tag though,

6:52you could go ahead and do that, but we're not.

6:55So now I'm gonna hit Add.

6:56And that's basically,

6:57just gonna add that interface in here, that 1.2.

7:01So super.

7:02And now we're gonna click Next,

7:03because we have just configured our internal interface.

7:06So if I say Next, it's gonna go ahead

7:08and update that information.

7:10And now we're at our External Network Configuration.

7:14So under our IP address, we need to put that in.

7:16And what is that gonna be? Let's go take a look.

7:18On our external, that's up top here. 172.16.101.11.

7:22And 13 is our floating. So 11, and it's Interface 1.1.

7:27So 172.16.101. So let's go back over here.

7:31Let's go to 172.16.101.11.

7:37Our floating is, let's go

7:38and put our floating, 172.16.101.13, excellent.

7:43Our netmask is a default Class C.

7:47And our gateway, we're not gonna have one,

7:48because we're not providing internet access

7:51through our WAN interface.

7:52So this again, is only gonna be there

7:54so we can connect to it with our test box to try

7:58to access services on the internal side of our F5.

8:01So Port Lockdown, we're not gonna deal with that.

8:04VLAN name is external.

8:06Tag, we'll leave to auto. Interface was again 1.1.

8:09If I jump back real quick,

8:11that's because here on our topology, our interface is 1.1.

8:15Super. And Tagging is Untagged.

8:18We're not gonna tag, we're not using VLANs here.

8:20I'm gonna say Add. And Next, there we go.

8:23We configured our external interface.

8:26Now this is our High Availability Network Configuration.

8:30So we're just gonna do Select existing VLAN,

8:33and we're gonna go with internal, remember.

8:36When we first set up our virtual appliance,

8:38we had to assign the WAN switch to the external interface,

8:43the LAN to the internal,

8:44and for the high availability we selected internal.

8:47So there we go.

8:48Now we want to leave everything else as is,

8:53because this is the self IP address,

8:5410.10.101.11, that's perfect.

8:57VLAN is internal and I gave it this VLAN ID of 4094.

9:01It's fine, just perfect.

9:02It already has the internal 1.2 interface applied to it.

9:06So we're gonna click Next.

9:08All right, time for NTP,

9:09your network time protocol configuration.

9:12So what you can do is come in here

9:14and add your own NTP servers if you want to,

9:16which you should do if you're in a production environment,

9:19because you want this device to use the same NTP servers

9:23as the rest of your devices.

9:24But since this is a lab, we're not gonna set those up,

9:27but you could just put in your IP addresses there,

9:29and then click the Add button and they'll show up in here.

9:31And then there you go. So Next.

9:34Now we come to DNS.

9:36So for your DNS servers, it does provide you

9:39with some defaults, which we're gonna leave as default.

9:42But in your environment,

9:43if this is a production environment,

9:45of course you're gonna wanna put your DNS servers in there,

9:47the same DNS servers the rest of your environment uses.

9:50You can also put in DNS search domain lists,

9:53for your local domain you'd wanna put in there.

9:55And any BIND forward servers,

9:57you'd wanna put those in there as well, super.

10:00But we're gonna leave this all as is, and say Next.

10:04Now this is our ConfigSync Configuration,

10:07and we're not gonna deal with this right now.

10:08So click Next.

10:10And this is the management failover unicast setup.

10:13And that is our failover,

10:14that's our IP address of our local host, 10.10.101.11.

10:18This is for our high availability,

10:20and it's already pulled that information in.

10:21So we're just gonna say Next.

10:23Now for our Mirroring Configuration, we don't deal

10:27with mirroring right now, so we're just going to say Next,

10:29'cause we're not using it yet.

10:31All right, there we go. And we have just finished up there.

10:35So let's go ahead and click our Finished button down here.

10:38There we go. Super.

10:39And we are now finished with our base configuration.

10:43So let's go ahead and back this up.

10:45We're gonna do an archive.

10:46So what we're gonna do is we're gonna click on System,

10:49and we're going to find Archives, which is right here.

10:53So I clicked on Archives

10:55and it brought me into the Archive List.

10:57And this is basically your backups.

10:59So what we want to do is go to create, there we go.

11:03We're gonna give it a name.

11:04We're going to call this BigIP1-Base-Config,

11:10'cause that's exactly what this is.

11:11It's our base configuration.

11:13You can enable encryption if you would like to

11:16and provide a passphrase,

11:17but since this is in lab, I'm not going to do that.

11:20But generally, you would definitely do this, okay?

11:23There we go.

11:24And your private keys, if you wanted to,

11:25you could include or exclude private keys.

11:28There we go.

11:29So all we're gonna do is put in the name at this point.

11:31So I'm gonna say Finished.

11:33And right now it's creating this archive for us.

11:37And again, an archive is just a backup

11:39of your configurations.

11:41And once it's finished saving,

11:43it's gonna give us a notification here in a moment.

11:46And there it goes. So it says, "Operation Status."

11:49It says, "Saving your active configuration,"

11:52and it is saved.

11:53There we go. So we'll say, OK, super.

11:55And we can see we now have our BigIP1-Base-Config.ucs.

11:59And that UCS is user configuration set.

12:04And that user configuration set is an archive

12:07that contains all the files that you're gonna need

12:09to restore the current configuration to a new system.

12:12This is things like config files, licenses, accounts

12:15that were created, SSL certificates,

12:17like the whole shebang, it's in there.

12:20So now we're gonna download a copy of this.

12:21So we have an offline copy of our backup or our archive.

12:25So I'm gonna click on the archive name. There we go.

12:27It's gonna take us in here.

12:28And now I'm gonna go over here to the Download button.

12:31I'm gonna click on that, and there it goes.

12:33It has just downloaded that archive.

12:36So I now have a copy of my backups

12:39that I can store somewhere, securely, of course.

12:42So there you go.

12:43That is walking through the base config

12:46of our F5 BIG-IP device.

12:49Now in the next nugget, we're going to go ahead

12:52and set up our test host and verify connectivity.

0:01<v Instructor>All right, here we are</v>

0:02in our VMware environment

0:04and I've already got a Windows Test PC set up.

0:08So what you're gonna do is just set one up.

0:11So you can go to create register VM

0:13and you can either do it from an OVA here,

0:16or you could create a new one

0:18and use an ISO if you've got like a downloaded Linux

0:22or Windows ISO file that you want to use.

0:25But basically just spin you up something

0:27with a desktop environment.

0:28That's the key here.

0:30Once you do, you want to make sure,

0:33we're actually gonna go into this here.

0:35You wanna make sure you go into the actions

0:36and go into, let's see, where is it?

0:39There it is. Edit settings.

0:40You're gonna wanna make sure that you have

0:43a network adapter in the F5 WAN network, okay?

0:47That is very key

0:49because otherwise you won't be able to communicate

0:51with the WAN interface

0:52or the external interface of the BIG-IP.

0:56So I'm gonna show you what I did here.

0:58You should have multiple network adapters.

1:00That's just because I wanted to have some outside

1:03connectivity at some point.

1:04I'm not sure what this one was for,

1:06but this F5 WAN though,

1:08that's what I'm really concerned about here.

1:10So I'm gonna cancel that and I'm gonna show you something.

1:12I'm gonna go in here and this is my Windows desktop.

1:15And let's see, let's make it a little bigger. There we go.

1:19Let's go into networks, network status. That'll work.

1:23Let that fire up.

1:25I don't know why it makes the windows so small.

1:28There we go. Let's go into change adapter options.

1:33And you'll see here, that's my ethernet2 on the WAN,

1:37the F5 WAN network.

1:38So I'm gonna go down to properties

1:41and you're gonna see that I have 172 16 101.5,

1:45which is in the same subnet, class C there.

1:48255 255 255 0 subnet

1:51of my external BIG-IP machine

1:55because its IP address is 172 16 101.11.

1:59So there you go. I'm .5.

2:00So I should be able to ping from here,

2:04.11.

2:05So let's try that. Let's go here, let's go CMD.

2:08Bring up a terminal.

2:12Okay, there we go.

2:14I should be able to ping 172.16.101.11.

2:20And I'm not able to, okay, but I think I know what's wrong

2:25and I'll show you what's wrong here.

2:27This is weird.

2:28I've run into this with VMware

2:29where when deploying the F5 appliances

2:32that sometimes the interfaces don't quite match up.

2:36So let's stop that there

2:38and I'll show you what I mean by that.

2:39So here we go.

2:40When we went through and configured,

2:43I'll bring up an image here for you.

2:45Let me spin this up.

2:47And I'm gonna pull this in so you can see this.

2:49This is the video I recorded earlier.

2:51So here, when we first deployed this, we went through

2:53and we set the management to the VM network, which is fine,

2:56internal to F5 LAN, external to F5 WAN.

2:59And then our HA was F5 LAN, right?

3:01Just as we would expect.

3:03LAN to internal, WAN to external, right?

3:05Well, for some reason VMware gets things not quite right.

3:09So I'll show you what you need to do

3:10to fix this if this is happening to you.

3:12So let me close that.

3:13What you need to do, go to your BIG-IP,

3:16go to action, go down to edit settings,

3:19and here's what we need to do.

3:20See, for some reason, this LAN here should be WAN.

3:23So I need to switch that one to WAN.

3:24And this WAN needs to go to LAN.

3:27So you need to swap those two.

3:28Now if I click save, there we go.

3:32All right.

3:33And if I go back to my Windows PC, fire that up,

3:38and I hit the up arrow

3:40and you can see now I can ping my BIG-IP device.

3:43Yeah, so for some reason VMware tends

3:46to swap those, I don't know why, but it does.

3:49And that's how you fix it.

3:50So lemme close this stuff outta here.

3:52So now we have our Windows test box.

3:53We verified connectivity. I can ping my BIG-IP device.

3:56I'm gonna close that.

3:57Let's jump over to BIG-IP,

3:58make sure we can ping the Windows device.

4:00So I'm gonna do a ping, well, if I can click in there.

4:03There we go. Ping 172.16.101.5, which is the Windows host.

4:09There you go. So I have to weigh communications.

4:11All right, super. That solves that piece.

4:14So now we have our test host

4:15and we have communications between BIG-IP and the test host.

4:18So now we're going to, in the next nugget,

4:21set up our web servers and make sure those are functioning.

4:24So I will see you there shortly.

0:00<v Instructor>Now it's time to deploy our web servers.</v>

0:02You see I've got three of them already.

0:04I've got F5 server one, two, and three.

0:08But I'm gonna show you how I did this.

0:09Because I went over here,

0:12and I went to bitnami.com/stack/nginx/virtual-machine.

0:17Here's the URL there.

0:18Because I wanted to download

0:19an NGINX virtual machine image ready to go.

0:24So what you do is, you go to this page

0:26or you can use whatever you want.

0:27It doesn't matter, it's up to you.

0:28This is just an easy way to get it up and running quickly.

0:30Download your OVA format to your machine, okay?

0:33And it's an OVA, just like we downloaded from F5

0:36for our BIG-IP Virtual Edition.

0:38So then I come over here

0:39and I'm gonna go to Create/Register VM

0:42and I'm gonna do it from an OVA,

0:43I'm gonna say Next, give it a name

0:46and maybe you'll wanna call this like Web1 or something.

0:49That's fine.

0:50Then you're gonna need to browse

0:52to your OVA file or drag and drop.

0:55So I'm going to drag and drop that in there.

0:57There we go.

0:58I'm gonna say Next,

0:59select my storage, Next,

1:02Agree to the EULA.

1:03Very simple, Next.

1:05Alright, here we go.

1:06Network Mapping,

1:07I want these to be on my F5 LAN there,

1:09so they're on the inside,

1:11the internal of my F5 device.

1:13They're on that same network.

1:15I can leave that at Thin,

1:16Power on automatically, that's up to you.

1:19I'm going to not select that.

1:21Go ahead and say Next.

1:23Alright, and here under Network Properties,

1:27you can go ahead and put your IP address in here.

1:31So actually what we could do is,

1:34go over to our topology,

1:38and we see here where we've got 10.10.101.101, 102 and 103.

1:43So we'll do 10.10.101.101 here.

1:45So I'll come back to here,

1:48and I'll say 10.10.101.101.

1:52There we go.

1:53Default gateway is gonna be 10.10.101.11,

1:56because that's the IP address of our F5 BIG-IP,

2:02Domain Name Servers,

2:03let's just do 8.8.8.8, Google domain name.

2:06It's gonna be F5lab.int.

2:09And DNS Search Path, don't worry about it.

2:12There we go.

2:13So now I'll say Next.

2:15There we go, super.

2:16That all looks good.

2:18Go ahead and Finish.

2:20And I'm gonna let that fire up.

2:22We see BIG-IP-1 there

2:23and it's doing it's,

2:25down here you can see it's go ahead and it's deploying that.

2:27So I'm gonna come back as soon as this is finished

2:29and we will wrap up,

2:31how to set up on these web servers.

2:32Alright, it has finished.

2:34So I'm gonna go over to my Web1.

2:35I'm gonna go in there.

2:37I'm gonna go ahead and fire it up.

2:38Let this thing boot up here.

2:40And once it does, we're gonna login

2:43and using the default credentials of bitnami, bitnami.

2:48So the username is bitnami, password is bitnami.

2:52And then we're gonna edit one of the files

2:54to allow us to use password authentication.

2:57So once this boots up,

2:59we'll go ahead and do that and I'll show you.

3:00It's pretty simple.

3:02Alright, we are back and it has booted up.

3:04So there we go, Enter,

3:06make sure we're click down here.

3:09So bitnami is the username, and the password as well.

3:13There we go.

3:14So I need to change the password,

3:16current password, bitnami,

3:18new password, there is one.

3:21There we go, excellent.

3:23Super duper.

3:24Now we need to change a file.

3:26So what we're gonna do,

3:27and we're changing this

3:28because by default this VM is set

3:31to do authentication with certificates,

3:34but we want use passwords,

3:35just make things a little easier.

3:36So what we're gonna do,

3:38we're going to type sudo or sudo,

3:41just depending on how you pronounce it,

3:42nano/etc/ssh/sshd_config,

3:53just like that.

3:54Enter, there we go.

3:55So now what we're gonna do,

3:56we're gonna modify the password authentication line.

4:00So how do we find that in this whole config file?

4:03Well you can use Control + W.

4:05So I'm gonna do that Control + W, it's a search,

4:08and I'm gonna type in PasswordAuthentication,

4:13capital P, capital A, hit Enter,

4:15and it's gonna take me to it.

4:17Which we can see if,

4:19I'm moving the cursor across the screen,

4:21can't really highlight it, but it's right here.

4:22And it said PasswordAuthentication set to no.

4:24So I'm gonna change this to yes,

4:27just like that, excellent.

4:30And what I'm gonna do now is,

4:33I need to save these changes.

4:35So I'm gonna hit Control + X.

4:37There's a little menu down here at the bottom of the screen.

4:41Here's the cursor,

4:42if you look down here,

4:43there's all these different letters.

4:45X is for exit.

4:45So I'm gonna hit Control.

4:47Let me make sure I'm clicked in there Control + X.

4:49There you go.

4:50Save these changes, Yes.

4:53And I want to use the same name.

4:54So just hit Enter.

4:55There we go, we have made that change.

4:57Now I need to restart the SSH server.

4:59So I'm gonna do sudo,

5:01I'm say /etc/init.d/ssh Space force-reload.

5:12There it goes.

5:13Now I'm gonna hit the Up Arrow

5:15to bring that command up again.

5:16And ssh instead of force-reload, I just remove that.

5:19I'm gonna put to restart,

5:23and there we go.

5:24So now we can use our password

5:26to SSH into these devices to manage them.

5:29Now let's make sure that we can communicate

5:31with the internal interface of our BIG-IP.

5:34So we should be able to do ping.

5:36Let's see, what is our IP address on this?

5:38Is it the 10.10?

5:39Let's do it real quick.

5:40Let's check this,

5:41ifconfig | more.

5:45And it doesn't like that.

5:46So let's do ipaddress.

5:48Let's try that and | more.

5:51Nope, doesn't like that either.

5:54That's pretty interesting.

5:56So let's do this then, ipconfig maybe.

5:58No, whatever it is.

6:00That's really interesting, it doesn't,

6:02maybe I have to do a sudo,

6:03sudo ifconfig.

6:04There we go.

6:05Okay, that's what it was.

6:06Alright, super.

6:07Now we got that figured out.

6:09It was simply, I need to escalate

6:10my privileges within Linux.

6:12I'm just a standard user right now,

6:13but if I run a command sudo,

6:16that runs it as root.

6:17Alright, super.

6:18So we can see the IP address is 10.1.101.101.

6:21Alright, there we go.

6:22So now let's try pinging 10.1.101.11

6:26which is the internal interface of the BIG-IP.

6:30And survey says host unreachable.

6:33Okay, not a problem.

6:35Let's figure out why.

6:36So let's go ahead and stop that.

6:38And you know what?

6:39I don't know that I set this to use that network.

6:41So let me check that.

6:42Let's go to Actions.

6:43Let's go to Edit Settings and it is set to F5 LAN.

6:47That's interesting.

6:49All right, so I am on this correct network.

6:52Let me ahead and Cancel that.

6:54Okay, I see what I did,

6:55and hopefully you cut it too

6:57because what is my IP address, 10.1.101.101, right?

7:01Yes, what am I trying to ping?

7:0310.1.101.101, all right?

7:07But if we go back to our topology,

7:08you'll see I kind of messed up.

7:10It's supposed to be 10.10.101,

7:12but I had put 10.1.101.

7:15So that is obviously the problem.

7:17I'm not gonna be able to pinging it

7:18because I have the wrong IP address on my server.

7:22So don't do that.

7:23So I'm gonna go ahead and close this out.

7:26I'm gonna go ahead and power it off.

7:27Say yes, I'm gonna go to one of the servers that I have

7:31that I had created earlier.

7:32Let's see, go back to virtual machines.

7:36So now I'm gonna go over here

7:37and click on my F5 server one.

7:39There we go, we're gonna open this up.

7:42Do a quick ifconf,

7:44click one more time, ifconfig.

7:46We see my IP address is 10.10.101.101.

7:49So I'm gonna make sure I can ping 10.10.101.11.

7:53It's our internal interface IP address of our BIG-IP.

7:57And there we go, we can ping.

7:59So just be sure to put the right IP addresses

8:01on your servers or they're not gonna work.

8:04(Instructor chuckles)

8:04Lesson learned, right?

8:05We all knew that anyway.

8:07Okay, super.

8:08That wraps this part up.

8:09Next we're actually gonna

8:10jump back in the IP device.

8:12We're gonna create a pool, add some pool members.

8:14We're gonna talk about what that is,

8:15and then we're gonna do some final testing of our labs.

8:18So I'll see you there shortly.

0:00<v Instructor>All right, now it's time</v>

0:00to bring this whole thing together.

0:03And before we jump into the BIG-IP

0:04and do our configuration, final testing,

0:06we're gonna talk about a couple of things.

0:07Pools, members, and virtual servers.

0:11So we've got our BIG-IP here.

0:12We're gonna, boom, BIG-IP.

0:16There we go. So we've got our test host out here.

0:18We're just gonna call this our Windows host.

0:20We've got three web servers on this side over here.

0:24There we go.

0:25We're just gonna W for web, super.

0:28There we go.

0:29Now, what we have to do

0:30is create three things on the BIG-IP

0:34so that we can then come in here

0:38and use the load balancing services

0:39to load balance to our various hosts, okay?

0:44So let me remove those.

0:46What we're going to do is create three things.

0:47We're gonna create a pool.

0:50So a pool is a group of members,

0:53and this here is a member.

0:55And the way we identify a member

0:58within the BIG-IP is we give an IP address.

1:01So like 10.10.101.101.

1:07And then we put a colon and a port number.

1:08And this port number would be like 80,

1:11and that's for HTTP, or could be 443 for HTTPS.

1:17We just need a port number in there.

1:18So this is a member and we're gonna have three of them.

1:22We're gonna have one for our 101 server,

1:25one for our 102 server,

1:26and one for our 103 server.

1:28And we're gonna use port 80 on all of them.

1:31So we're gonna have these three members

1:32and these three members are inside of a pool, okay?

1:35and these three members are inside of a pool, okay?

1:37And now that we have a pool,

1:38we create something called a virtual server

1:42that is running inside of our BIG-IP.

1:46And basically, what this is,

1:48it's a big ear, right?

1:49It listens for inbound connections.

1:52And I configure this virtual server

1:54to then load balance or analyze traffic,

1:57do something to traffic,

1:59and then forward it onto a pool

2:01that consists of various members.

2:06So this is how this all ties together.

2:08So now, we're gonna jump into the BIG-IP.

2:09We're gonna go ahead and configure a pool with some members.

2:12We're gonna create a virtual server

2:13and tie it to the pool.

2:15Then from our Windows test box,

2:17we're gonna test it out to make sure it all works.

2:20All right, here we are in our BIG-IP

2:22and what we're gonna do

2:23is we're gonna go down to local traffic,

2:24that's our LTM, our local traffic manager.

2:27And we're then going to go down to Virtual Servers.

2:32I'm gonna go ahead and click on Virtual Server List.

2:34It's gonna come in here.

2:35Guess what? We don't have any virtual servers.

2:38So what are we gonna do?

2:39We're gonna come over to our Create button on the right.

2:41We're gonna click Create

2:42and it's gonna bring up a page

2:43so that we can create a virtual server.

2:47Now, before we create the virtual server,

2:49we need to have a pool of members in it.

2:52So then why did I come into the virtual servers page?

2:54Well, I'll show you why.

2:55If we scroll right on down here to the bottom,

2:57we're looking for our pools.

2:59Let's see, Policies, Default Pool, here we go.

3:02So here's our Default Pool for this virtual server.

3:05And I have no pools, but there's a plus button.

3:06Let's click on that plus button, there we go.

3:09And here is where we can create a new pool.

3:11So let's give it a name.

3:13Now, I'm gonna call this pool HTTP_APP1_Pool, okay?

3:17Now, I'm gonna call this pool HTTP_APP1_Pool, okay?

3:21And that's because I'm trying to give some description.

3:23This is gonna be for my APP1, okay?

3:26We're just running a webpage.

3:27It says default nginx webpage,

3:30but I'm gonna reference it APP1,

3:32and I'm using the HTTP protocol,

3:34and of course, it's a pool.

3:35So that way, if I ever see this name,

3:36I know it's a pool and I don't need a description

3:38because I gave it a descriptive name.

3:41Health Monitors, we're not gonna do that right now.

3:44Now, when it comes to Load Balancing Methods,

3:45we're gonna leave this at Round Robin,

3:46but we have a lot of options in here

3:48and we'll get to those later on.

3:50And then down here in the New Members section,

3:52what we're gonna do is, this is a new node.

3:55So what I'm gonna give it is a node address here

3:59and I'm gonna give it 10.10.101.101

4:04and a service port.

4:05Remember, I had to add a port here.

4:08So we're gonna say 80, there we go.

4:09And it automatically filled in HTTP for me.

4:11I'm gonna say Add.

4:13And what's nice is you'll see

4:15that it actually leaves that information.

4:17So now, I can just hit that

4:19and backspace, put a two, say Add,

4:23backspace, three, say Add.

4:26And now, I have all three

4:27of my members in the pool.

4:31So now, I can go ahead and click Finished

4:35and it's gonna take me back

4:37to my Virtual Servers page.

4:38Now, if I scroll to the bottom,

4:41I now have my HTTP_APP1_Pool down here

4:43under my Default Pool.

4:44So let's go ahead and create this virtual server.

4:46We got a few things to put in here.

4:48All right, so let's go ahead

4:49and fill out these properties here.

4:51I need a name.

4:52So I'm gonna call VS

4:53for virtual server, -172.16.101.11.

4:56That's the IP on the external interface

4:59of my BIG-IP that's listening and gonna answer

5:02for this service or this virtual server,

5:04say -HTTP for the protocol I'm using and APP1

5:08because that's the application's

5:09gonna be tied to on the inside.

5:11Just give me a reference.

5:12Then you can put a description in, if you'd like.

5:14If we go to type, there's a whole bunch of options,

5:16but we're gonna stick with standard there.

5:19And I'm gonna do a destination address.

5:21And here, I'm gonna put in the address

5:22that's listening on the external interface,

5:25which is the same IP I have up there in the name.

5:28It's gonna be 172.16.101.11.

5:33There we go.

5:34And port, I'm gonna put 80, there we go.

5:37It's gonna fill in HTTP for me.

5:39State is enabled, that's perfect.

5:41I'm gonna scroll on down to the bottom

5:43and go and click Finished.

5:45And now, it's gonna go ahead

5:46and I have my virtual server up and running.

5:50All right, and now,

5:51I need to jump over to our test box.

5:53I'm gonna do that, jump over to my ESXi,

5:55go to my Lab-Admin-PC, connect in there.

5:59There we go, super.

6:02And put in my password.

6:04Let's make this quite a bit bigger.

6:06All right, let's open up Google Chrome.

6:09And I should be able to go to 172.16.101.11.

6:12And I should be able to go to 172.16.101.11.

6:14Hit Enter, and there we go.

6:17Congratulations, you're now running NGINX.

6:21So this is one of my web servers on the backend.

6:24So this shows me that I can use my lab Windows PC

6:28and use the load balancing through the BIG-IP

6:31connecting to one of the web servers.

6:34All right, super cool.

6:35So now, we have a lab up and running and working.

6:39Good job, everybody.

0:00<v ->Alright, for our validation, you need to go ahead</v>

0:04and create a new virtual server, if you would.

0:06And that means you're also gonna need to create a new pool.

0:09Now, earlier we set one up for HTTP, going to our app one

0:14that went to our three web servers.

0:16We're gonna do the exact same thing except instead

0:18of HTTP, we're gonna use HTTPS, which is port 443.

0:23Now we're still gonna have it connect to,

0:25or basically have a virtual server run on 172 16 101 dot 11,

0:30just as we did before.

0:31But this time again, we're using HTTPS or port 443

0:35and you're gonna set up your pool

0:37with the three members in it of our three web servers.

0:40So good luck and let's see how you do.

0:43I'm gonna go ahead and show you the resolution

0:46or how to do this just in case you wanna take a look.

0:49So here we go.

0:50Let's jump over to our big IP.

0:52We're gonna go to our local traffic here

0:54and we're gonna go to virtual servers.

0:56Go to our server list.

0:58We have our one virtual server there.

1:00So what we're gonna do, I'm just gonna copy that name.

1:03because we're just changing this to HTTPS.

1:05So let's go ahead and go over to create on the right here.

1:09Go to create, and I'm first gonna need to create a pool.

1:13So let's scroll to the bottom.

1:14Let's create us a new pool.

1:15And that's because, again,

1:17we're using a different protocol here.

1:19So go to new pool, click the plus sign and the pool

1:22I'm gonna call HTTPS underscore app one underscore pool.

1:29There we go.

1:29And that's our HTTPS traffic to our app one.

1:33All right, then I'm come down here

1:35and we're gonna leave this at round robin load balancing.

1:38I'm gonna come down here to my new member section.

1:41Go to my address and put in my 10 dot 10 dot 101 dot 101.

1:45And here we're gonna put 443, there we go.

1:48And of course it auto-filled the HTTPS for us.

1:50I'm gonna add that.

1:52I'm simply going to hit the backspace

1:54and change that 101 right here to 102.

1:58There we go, hit add, backspace and change that to 103.

2:02Hit add, there you go.

2:04Go ahead and click finished.

2:06Gonna take us back to our virtual server page

2:08and if I scroll to the bottom,

2:10you'll see our HTTPS app one pool.

2:12So go back to the top.

2:14I'm gonna go ahead and paste in what I'd copied earlier.

2:16Remember I copied that, a virtual server name.

2:19There we go, get rid of that.

2:21I'm gonna change this HTTP to HTTPS in the name.

2:25Alright, perfect.

2:26We're gonna go down here to our destination address,

2:28and this is gonna be our external address.

2:30172 dot 16 dot 101 dot 11, port is gonna be 443.

2:36It's gonna do HTTPS, there we go.

2:38State is enabled.

2:40That's exactly what we want.

2:41And we're finished here.

2:42Let's scroll to the bottom and create this thing already.

2:45Go ahead and do finished.

2:47Super, we'll let that finish up.

2:49And there you go, we have it.

2:50So let's go test.

2:51I'm gonna jump over to my ESX host here.

2:54This is my lab admin pc, my Windows box.

2:56I'm gonna put HTTPS this time, colon slash slash

3:00172 dot 16 dot 101 dot 11 and hit enter.

3:07And the first time we run through this,

3:08it does take it a few seconds for it

3:10to connect, which is fine.

3:11It's a live environment.

3:14All right, and there it goes.

3:15It's showing up now.

3:16Now, I will say it took about 20 seconds

3:18and I had to refresh it once so that it would go through.

3:22It's just because when we first set up a virtual server,

3:24it's starting up the services and all that on our big IP.

3:27So it does take a little bit the first time,

3:28but there you go.

3:29And we see that it is HTTPS up here at the top.

3:32And so that is working properly.

3:33And if we take out the HTTPS

3:36and just make it HTTP, that should work fine as well.

3:40Hit enter and sure enough, absolutely.

3:43So there you go.

3:44That's how we set up a new virtual server

3:46with a new pool and the pool members.

3:48I hope this has been informative for you,

3:49and I'd like to thank you for viewing.