Clustered Multiprocessing, WA, WAN Optimization Manager, WANJet, WebAccelerator, WOM, and ZoneRunner, are trademarks or service marks of F5 Networks, Inc., in the U.S. and other countries, and may not be used without F5's express written consent. All other product and company names herein may be trademarks of their respective owners.
Page 4
Export Regulation Notice This product may include cryptographic software. Under the Export Administration Act, the United States government may consider it a criminal offense to export this product from the United States. RF Interference Warning This is a Class A product. In a domestic environment this product may cause radio interference, in which case the user may be required to take adequate measures.
Page 5
No association with any real company, organization, product, domain name, email address, logo, person, place, or event is intended or should be inferred. Revision History, MAN-0417-00 September 2012 — Rev. A. Hardware release. ARX-2500 Hardware Installation Guide...
Installing a Redundant Peer or Cluster Peer ..............3-10 Replacing a Redundant Peer ..................... 3-11 Connecting the Out-of-Band Management Port ..............3-18 Maintenance POST Diagnostics ...........................4-3 Replacing Optical Transceivers or Chassis Before You Begin ...........................A-3 Replacing Optical Transceivers ....................A-3 Replacing the Chassis ........................A-4 Index ARX-2500 Hardware Installation Guide...
Warnings are instructions for avoiding damage to the equipment. DANGER Danger notices help you to avoid personal injury. Related Documents In addition to this guide, the following F5 Data Solutions documentation is available: ® • ARX -2500 Quick Installation card ®...
Chapter 1 Introduction Safety and Regulatory Notices Important The ambient room temperature range that the unit can operate in is 5 – 35° Important Do not block power supply vents or otherwise restrict airflow when installing unit in rack. WARNING Mechanical loading of rack should be considered so that the rack remains stable and unlikely to tip over.
Only trained and qualified personnel should be allowed to install, replace, or service this equipment. ATTENTION Il est vivement recommandé de confier l'installation, le remplacement et la maintenance de ces équipements à des personnels qualifiés et expérimentés. Battery Warning ARX-2500 Hardware Installation Guide 1 - 5...
Chapter 1 Introduction Environmental High Temperature Warning WARNING To prevent the switch from overheating, do not operate it in an area that exceeds the maximum recommended ambient temperature of 35° C. To prevent airflow restriction, allow at least 3 inches (7.6 cm) of clearance around the ventilation openings.
WARNING The power supply cords were designed to be connected and used for F5 devices, and the safety for this purpose has been confirmed. Please do not use them for other devices or usages. There may be danger of causing a fire or an electric shock.
Page 20
Chapter 1 Introduction Electric Shock Warning DANGER An ARX-2500 configured with two power supplies has two power cords. If you must remove AC power from the system, disconnect both power cords before servicing the system. DANGER Cette l'unité ARX-2500 peut être munie de deux cordons d'alimentation.
Contacting Customer Service Contacting Customer Service You can use the following methods to contact F5 Networks Customer Service: F5 Networks Online http://support.f5.com Knowledge Base Online repository of answers to frequently-asked questions. F5 Networks Services https://websupport.f5.com Support Online Online customer support...
Unpacking and Installing the Switch • Safety Instructions • Tools and Equipment • Unpacking and Verifying Shipment • Determining Which Rail Kit to Use • About the Rack-Mounting Ear Bracket Kit • About the Slide-Rail Mounting Kit • Inserting the Optical Transceivers (Optional) •...
• Laptop or PC to use as a serial console connected to the serial console interface • Customer-supplied standard 19-inch EIA rack Unpacking and Verifying Shipment The ARX-2500 is shipped in a single box with all components installed, except the (optional) optical transceivers. It weighs approximately 22.5 lb (10.2 kg)—not including packing materials. Note After installation, retain all packing materials.
4 10-32 screws (5/8” to 7/8” long). Determining Which Rail Kit to Use The ARX-2500 platform comes with two types of rack mounting kits: a stationary rack-mounting type and a slide-rail-mounting type. An advantage of installing the slide-rail-mounting type is that you can then slide the component in and out of the rack as needed.
This product is sensitive to electrostatic discharge (ESD). Proper ESD grounding procedures and equipment are recommended when you install or maintain the unit. Important Do not power on until the management serial console or the management network is connected to the unit. ARX-2500 Hardware Installation Guide 2 - 5...
The rack-mounting ear bracket kit is located in the Accessory Kit. 1. Align the bracket’s keyhole slots with the PEM fasteners on the side of the component. The following figure shows the PEM fasteners on the side of the ARX-2500. 2 - 6...
3. Slide the bracket toward the back of the component to lock the bracket into place. 4. Repeat steps 1 through 3 on the other side of the ARX-2500. 5. Lift the component into the rack. 6. Secure the ARX-2500 to the rack using customer-supplied hardware.
Chapter 2 Unpacking and Installing the Switch Slide-Rail Mounting Hardware The slide-rail mounting hardware includes the following: • Slide rails for the left side (1 pair) • Slide rails for the right side (1 pair) • Front-mounting bracket (1) • Rear-mounting bracket (1) •...
Page 31
Before tightening the wing nuts, ensure the end-to-end measurement of the slide rails of the mounting brackets matches the rail-to-rail measurement of the equipment rack. ARX-2500 Hardware Installation Guide 2 - 9...
Page 32
Chapter 2 Unpacking and Installing the Switch Ensure the three-hole side of the bracket is facing out (as shown in both of the following figures.) 7. Install the slide rails on the inside rail of the equipment rack. Insert the thumb screws provided in the top and bottom holes by screwing them through the cabinet rails and into the slide-bracket threaded inserts.
If you ordered optical tranceivers, you can locate them in the Accessory Kit, packaged in thier own box. Insert them in the optical ports as identified in the following figure. Figure 2.3 ARX-2500 Optical Ports ARX-2500 Hardware Installation Guide 2 - 11...
Chapter 2 Unpacking and Installing the Switch Attaching Cables and Powering On This section contains the procedure for attaching cables and powering on. Important Before powering on, make sure all AC outlets to the switch are properly grounded. Never assume that power is disconnected from a circuit; always check.
You can attach cables to the client/server ports before or after the switch is connected to the network. F5 Networks does not supply Ethernet cables. For cable specifications and requirements, consult the ARX Hardware Reference Guide. ARX-2500 Hardware Installation Guide...
Page 36
Chapter 2 Unpacking and Installing the Switch 2 - 14...
Connecting the Switch to the Network • Identifying the Management Ports • Connecting the Console Port • Booting the Switch • Connecting the Out-of-Band Management Port...
Identifying the Management Ports Identifying the Management Ports The ARX-2500 provides the following management ports: • Console. Serial console interface for connecting a console terminal. Labeled CONSOLE on the front of the switch. • Management. 10/100/1000 Ethernet port for connecting an out-of-band (OOB) management station.
DNS name server IP address (needed to access the license activation server). Note The alarm LEDs on the ARX-1500 and the ARX-2500 will remain red until the Switch Configuration process is complete. This is normal. For more information on the alarms and statuses for the ARX-1500 and ARX-2500, see the hardware installation guides for each platform (sections ARX-1500 Alarm and Status LEDs and ARX-2500 Alarm and Status LEDs).
Page 41
1. Enter the management port IP address in the format nnn.nnn.nnn.nnn or 'none'. # 10.1.14.76 2. Enter the management port subnet mask in the format nnn.nnn.nnn.nnn.(default=255.0.0.0) # 255.255.255.0 The switch's management port requires a gateway IP address. 3. Enter the gateway IP address for the management interface in the format nnn.nnn.nnn.nnn or 'none'.(default=10.1.14.1) # 10.1.14.1 A name server address must be assigned so that the software license can be activated. 4. Enter the DNS name server IP address to access the license server in the format nnn.nnn.nnn.nnn. # 192.168.90.54 A switch replacement requires additional configuration questions. 5. Are you doing a switch replacement? in the format 'yes' or 'no'.(default=no) # no The base registration key is used to activate the software license for this system. 6. Enter the switch's base registration key in the format xxxxxxx‐xxxxxx‐xxxxx‐xxxx‐xxxxxxx. (default=G061353‐397137‐82789‐5523‐0883750) # <Enter> The crypto‐officer is the most privileged user in the system. 7. Enter the crypto‐officer username in the format text (1‐28 characters). # admin 8. Enter the crypto‐officer password in the format text (6‐28 characters). # mypassword Confirm the crypto‐officer password # mypassword A system password is required for access to the master key. 9. Enter a system password in the format text (12‐28 characters). # ************* Confirm the system password # ************* The master key is used to encrypt critical security parameters. 10. Enter the master key in the format base64‐encoded key or keyword 'generate'.(default=generate) # <Enter> The wrapping password is used to encrypt and decrypt the master key. ARX-2500 Hardware Installation Guide 3 - 5...
Chapter 3 Connecting the Switch to the Network 14. Enter the wrapping password in the format text (6‐28 characters). # ************* Confirm the wrapping password # ************* The system displays a configuration summary. See the following example. Configuration Summary Management IP Address 10.1.14.76 Management IP Mask 255.255.0.0 Management Gateway 10.1.14.1 DNS IP Address 192.168.90.54 Chassis GUID 05d5a0fa‐f2fb‐11df‐8daf‐af50d57e388e Chassis Base Reg Key G061353‐397137‐82789‐5523‐0883750 Switch Password ####### Switch Master Key generate Crypto‐officer Username admin Crypto‐officer Password ####### Enter 'yes' to load the configuration or 'r' to redo the interview # You have completed the switch startup configuration. The switch will now initialize the local database. The boot-up process continues to the Username prompt. Confirm that an administrator can log in by logging in with the Crypto-Officer username and password that you entered in the initial-boot script, as in the following example.
Page 43
ARX devices in the same RON and/or the switch’s redundant peer. All private subnets in the RON and/or pair are carried by the same VLAN. This private VLAN, and the separate metalog VLAN, must be reserved for ARX traffic only. ARX-2500 Hardware Installation Guide 3 - 7...
Page 44
UUID or it will reject all shares imported by its predecessor. Also, you must set the UUID if the switch is brought back to its factory defaults. A Manufacturing Installation by F5 personnel resets the switch and its UUID.
Page 45
Enter the UUID of the replaced switch when prompted by the initial-boot script. See the following example. If this is a replacement switch, the UUID MUST be entered and it MUST match the UUID of the failed ARX. The UUID can be found using CLI command "show ron" on the peer switch. 8. Enter the switch's UUID in the format xxxxxxxx‐xxxx‐xxxx‐xxxx‐xxxxxxxxxxxx.(default=71305bb8‐cc3d‐11df‐825c ‐85aba8436d1c) # 05d5a0fa‐f2fb‐11df‐8daf‐af50d57e388e Important No two running chassis should ever share the same UUID. Enter the UUID only in a switch-replacement scenario. ARX-2500 Hardware Installation Guide 3 - 9...
Chapter 3 Connecting the Switch to the Network Installing a Redundant Peer or Cluster Peer If you are installing the second switch in a redundant pair (also called an ARX cluster) or if you are configuring a second ARX cluster in a Disaster Recovery (DR) configuration, you need to provide additional information to the initial-boot script because all members of the cluster share a common master key.
If the replacement switch is running an outdated release of software, this example may not exactly match the text on your screen. F5 ARX Startup This F5 ARX switch does not currently have critical system information programmed. The following wizard prompts you for this information. You can connect to the switch through the out‐of‐band management interface when you finish. To restart the configuration program, enter 'r' at any prompt. The switch's management port requires an IP address and mask. 1. Enter the management port IP address in the format nnn.nnn.nnn.nnn or 'none'. # 10.1.14.76 2. Enter the management port subnet mask in the format nnn.nnn.nnn.nnn.(default=255.0.0.0) # 255.255.255.0 The switch's management port requires a gateway IP address. 3. Enter the gateway IP address for the management interface in the format nnn.nnn.nnn.nnn or 'none'.(default=10.1.14.1) # <Enter> A name server address must be assigned so that the software license can be activated. ARX-2500 Hardware Installation Guide 3 - 11...
Page 48
Chapter 3 Connecting the Switch to the Network 4. Enter the DNS name server IP address to access the license server in the format nnn.nnn.nnn.nnn. # 192.168.90.54 Note the questions regarding switch replacement in the following: A switch replacement requires additional configuration questions. 5. Are you doing a switch replacement? in the format 'yes' or 'no'.(default=no) # yes The switch's internal subnet requires an IP address and mask. 6. Enter the switch's private IP address in the format nnn.nnn.nnn.nnn.(default=169.254.52.0) # 169.254.94.0 7. Enter the switch's private subnet mask in the format nnn.nnn.nnn.nnn.(default=255.255.255.0) # <Enter> 8. Enter the switch's UUID in the format xxxxxxxx‐xxxx‐xxxx‐xxxx‐xxxxxxxxxxxx.(default=6df0854c‐6af4‐11d8‐954a‐f844c83bc5f3) # 05d5a0fa‐f2fb‐11df‐8daf‐af50d57e388e The base registration key is used to activate the software license for this system. 9. Enter the switch's base registration key in the format xxxxxxx‐xxxxxx‐xxxxx‐xxxx‐xxxxxxx.(default=G061353‐397137‐82789‐5523‐0883750) # <Enter> The crypto‐officer is the most privileged user in the system. 10. Enter the crypto‐officer username in the format text (1‐28 characters). # admin 11. Enter the crypto‐officer password in the format text (6‐28 characters). # mypassword Confirm the crypto‐officer password # mypassword A system password is required for access to the master key.
Page 49
For example, the following CLI session shows the running software on an ARX named stoweA. The version number is highlighted in bold. stoweA# show version Copyright (c) 2002‐2012 by F5 Networks, Inc. All rights reserved. Running Release test3.rel : Version 6.02.000.14353 (Apr 6 2012 20:12:43) [nbuilds] Armed Release test3.rel : Version 6.02.000.14353 (Apr 6 2012 20:12:43) [nbuilds] Backup Release test2.rel : Version 6.01.001.14115 (Apr 9 2012 17:52:54) [bmeifert] System Configuration: Version 602000.33 Slot Admin ModuleType ModuleState FW Upgrade ‐‐‐‐ ‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ 1 Enabled ACM Online Disabled ARX-2500 Hardware Installation Guide 3 - 13...
Page 50
Chapter 3 Connecting the Switch to the Network Resource State Forwarding ‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ Switch Up Disabled Check the version at the replacement ARX. In this example, the software version (6.02.00) is not outdated: SWITCH> show version Copyright (c) 2002‐2009 by F5 Networks, Inc. All rights reserved. Running Release test1.rel : Version 6.02.000.11927 (Nov 23 2009 21:57:26) [nbuilds] Armed Release test1.rel : Version 6.02.000.11927 (Nov 23 2009 21:57:26) [nbuilds] Backup Release test3.rel : Version 6.02.000.11927 (Nov 23 2009 21:57:26) [nbuilds] System Configuration: Version 501000.36 Connecting to the Client/Server Network...
Page 51
Arm the system with the new release and then reload the ARX to activate. SWITCH# boot system test5.rel % INFO: The boot system command may take up to 5 minutes to complete. SWITCH# show releases releases R test1.rel Dec 8 00:14 800 MB test2.rel Dec 7 00:06 800 MB A B test5.rel Sep 10 00:09 1.0 GB SWITCH# reload Reload the entire chassis? [yes/no/diags] yes System is resetting. After the reboot, log in and confirm that you are running the new release. User Access Authentication Username: admin Password: mypassword stoweA# show version ARX-2500 Hardware Installation Guide 3 - 15...
‐‐‐‐ ‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ 1 Enabled ACM Online Disabled Activating the License To successfully join a redundant pair, activate the ARX license. To prepare for licensing, identify a DNS server that can resolve the name of the F5 license server (activate.f5.com). For example: SWITCH> enable SWITCH# config SWITCH(cfg)# ip name‐server 192.168.90.18 SWITCH(cfg)# end...
Page 53
SWITCH> enable SWITCH# copy ftp://juser:jpasswd@ftp.wwmed.com/a2kconfig scripts running SWITCH# show scripts scripts running Apr 12 17:45 2.1k SWITCH# run scripts running The running‐config script set up all local parameters, such as the hostname and the network settings: SWITCH#; ARX‐2000 SWITCH#; Version 6.02.000.14293 (Dec 2 2011 20:04:01) [nbuilds] SWITCH#; Database version: 602000.21 SWITCH#; Generated running‐config Thu Dec 8 03:10:49 2011 SWITCH#; System UUID 876616f6‐79ac‐11d8‐946f‐958fcb4e6e35 SWITCH#; ip private vlan internal 1008 metalog 1009 subnet 169.254.100.0 255.255.255.0 SWITCH#; SWITCH#terminal character‐set unicode‐utf‐8 SWITCH#;================================= vlan ================================== SWITCH#config SWITCH# vlan 74 SWITCH# description "personnel dept." SWITCH# members 1/5 to 1/6 SWITCH#... SWITCH#;================================ system ================================= SWITCH#config SWITCH(cfg)# clock timezone America New_York SWITCH(cfg)# hostname stoweA stoweA(cfg)# ip domain‐list wwmed.com stoweA(cfg)# ... ARX-2500 Hardware Installation Guide 3 - 17...
Restoring to an ARX-2500 Pair There is a special consideration you must take into account when restoring a configuration to an ARX-2500 pair, if the configuration changes the setting of the resource-profile command. After you replay the running-config, you must reboot the switch in order for the resource-profile legacy setting to take effect.
System Configuration: Version 602000.33 See the following example output for the show chassis command. stoweA> show chassis Identification: Hostname UUID ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ stowe 05d5a0fa‐f2fb‐11df‐8daf‐af50d57e388e Chassis: Chassis Type Model Number Serial Number ‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐ ARX‐2500 ARX2500HE‐F5 XX‐ABCD‐0495 Private Subnet: Subnet Subnet Mask ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ 169.254.88.0 255.255.255.0 Chassis Environment: Base MAC Address Power Fan(setting) Temperature ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐ 00:0a:49:75:39:00 Online Partial Online (high) Normal 28 C Power Details: Supply State ‐‐‐‐‐‐ ‐‐‐‐‐ A Online B Absent ARX-2500 Hardware Installation Guide 4 - 3...
Page 58
Chapter 4 Maintenance Logical Disk Details: Disk Status Verification Mode Verification Rate ‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ 1 Optimal Automatic 10 % Disk Details: Disk Size State Transfer Rate Model ‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ Bay 1 136.91G Online 3.0Gb/sec HUC103014CSS600 Bay 2 136.91G Online 3.0Gb/sec HUC103014CSS600 RAID Controller Details: Rebuild Rate Max Transfer Rate Firmware RAID Alarm ‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐ 90 % 3.0Gb/sec 5.2‐0[17899] Enabled Module: Slot Ports Procs Card Xeon ECC State ‐‐‐‐ ‐‐‐‐‐ ‐‐‐‐‐ ‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ 1 6 1 ACM 2.6 GHz 16128 MB Good Slot MAC Address BIOS Version ‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ 1 000A49753900 to 000A497539FF 8.15:1.3:2.0 Port Media Details: Slot/Port Type Vendor Status ‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ 2/1 N/A N/A Unknown 2/2 N/A N/A Unknown Disk Usage: Name Total MB Used MB Free MB Used% ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐ System 3173 1691 1320 57% Releases 6345 3327 2695 56% Logs 52838 152 50001 1% Cores; DiagInfo; Lists 21133 60 19999 1% Scripts 3172 48 2962 2% Reports 8458 33 7994 1% Temperature Details: Slot Module Sensor 1 (C) Fan Status ‐‐‐‐ ‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐ 1 ACM 28 Online (high) 2 ACM 28 Online (high) Metalog Usage:...
Note When returning chassis to F5 Networks, you must include the chassis serial number. In some cases, you also need to include the base MAC address. From the CLI, enter the show chassis command to obtain the serial number.
The ARX-2500 contains two optical ports (located on the front of the chassis). You are notified of the failure of an optical transceiver through an SNMP trap.
Page 63
17. Reboot the switch. 18. Replace the running configuration. 19. Unless the switch is running standalone, ensure that it pairs with the active peer. To confirm, issue the show redundancy command. ARX-2500 Hardware Installation Guide A - 5...
Page 64
Appendix A Replacing Optical Transceivers or Chassis A - 6...