F5 ARX-2000 Hardware Installation Manual page 40

Chapter 3
Connecting the Switch to the Network
in the format 'yes' or 'no'.(default=no) # yes
The switch's internal subnet requires an IP address and mask.
6. Enter the switch's private IP address
in the format nnn.nnn.nnn.nnn.(default=169.254.52.0) # 169.254.100.0
7. Enter the switch's private subnet mask
in the format nnn.nnn.nnn.nnn.(default=255.255.255.0) # <Enter>
The private subnet VLAN is used externally for redundancy traffic.
Be sure this value does not conflict with existing VLAN IDs.
8. Enter the switch's private subnet VLAN
in the format integer [1‐4095].(default=1002) # 1008 <Enter>
The private subnet metalog VLAN is used for storing file‐change
logs on battery‐backed NVRAM, possibly on a redundant peer.
Be sure this value does not conflict with existing VLAN IDs.
9. Enter the switch's private subnet metalog VLAN
in the format integer [1‐4095].(default=1003) # 1009 <Enter>
The UUID should only be entered if this chassis is replacing a failed chassis
and the entered UUID should match the UUID of the failed chassis.
10. Enter the switch's UUID in the format
xxxxxxxx‐xxxx‐xxxx‐xxxx‐xxxxxxxxxxxx.(default=6df0854c‐6af4‐11d8‐954a‐f844c83bc5f3) #
876616f6‐79ac‐11d8‐946f‐958fcb4e6e35
The base registration key is used to activate the software license for this system
11. Enter the switch's base registration key
in the format xxxxxxx‐xxxxxx‐xxxxx‐xxxx‐xxxxxxx. (default=A362247‐945361‐27183‐5068‐9388182) #
<Enter>
The crypto‐officer is the most privileged user in the system.
12. Enter the crypto‐officer username
in the format text (1‐28 characters). # admin
13. Enter the crypto‐officer password
in the format text (6‐28 characters). # mypassword
Confirm the crypto‐officer password # mypassword
A system password is required for access to the master key.
14. Enter a system password
in the format text (12‐28 characters). # d0uble$ecRET
Confirm the system password # d0uble$ecRET
The master key is used to encrypt critical security parameters.
15. Enter the master key
in the format base64‐encoded key or keyword 'generate'.(default=generate) #
2oftVCwAAAAgAAAApwazSRFd2ww/H1pi7R7JMDZ9SoIg4WGA/XsZP+HcXjsIAAAADDRbMCxE/bc=
The wrapping password is used to encrypt and decrypt the master key.
16. Enter the wrapping password
in the format text (6‐28 characters). # an0ther$ecretpw
Confirm the wrapping password # an0ther$ecretpw
Configuration Summary
Management IP Address 10.1.23.11
Management IP Mask 255.255.255.0
3 - 12
The following shows the use of the encrypted master key and the wrapping
password from the redundant peer to answer the master-key question.