I would like to start by saying Merry Christmas and Happy Holidays season to all. In between spending time with my family, decorating the Christmas three and opening presents, I did find some time to play around with my hobby and testing something in the lab.
Lately I wanted to get a feeling how F5 BIG-IP works, you know, just to get familiar with its interfaces, rules and being capable of setting up a basic LTM or APM. Far from me the idea of becoming an expert on the first touch, but it’s nice to discover new technologies.
Beside getting the F5 BIG-IP VE (Virtual Edition), running up VMware (ESXi, Player, Fusion or Workstation) and starting the virtual machine I also wanted to emulate some kind of real environment to test. So, I did build the below topology in GNS3:
Some explanation:
- Client WIN7 is a VM in VirtualBox and integrated in GNS3
- WWW Servers are VMs in VirtualBox and integrated in GNS3
- WIN2008 AD DC is a VM in VirtualBox and integrated in GNS3
- Routers are emulated in GNS3
- F5 BIG-IP VE is a VM in VMware Workstation and integrated as a Cloud in GNS3
GNS3 is version 1.2.1 which works perfect. Why VirtualBox and VMware Workstation? Usually I have no problem to have my VMs in VirtualBox, but I could not successfully import the F5 BIG-IP VE OVA image in VirtualBox. I had to download a trial version of VMware Workstation to install the OVA image.
If you want to know more about this F5 product, Ethan Banks has a great article about the BIG-IP VE. Please note that Ethan’s article is about getting a lab license for BIG-IP VE. I just went for the trial version. You can download the OVA image and get the license here:
https://www.f5.com/trial/secure/big-ip-ltm-virtual-edition.php
Download the BIG-IP VE OVA image, get a trial license (valid for 90 days) and install it in VMware Workstation. It may work with other VMware products, but in this article I’m using only VMware Workstation.
The part that gave me some headache was the how to have a successfully network communication between VMware Workstation and GNS3.
Before GNS3 1.2.1, when I had to use a “cloud” to integrate VirtualBox VMs in GNS3, I was configuring a TAP interface and use Bridge mode for the VM NIC to the TAP interface. Then on the GNS3 Cloud, I was adding the TAP as a Generic Ethernet NIO on the NIO Ethernet. If you want to refresh more deeply the above information please read my article about How to integrate GNS3 with VirtualBox.
Unfortunately, in VMware Workstation, I cannot just bridge a VMnet interface to a TAP and use that specific VMnet in a VM. I just could not make it work.
To cut it short, here are the steps that I had to follow to have this working. I assume that you have VMware Workstation installed already. Another detail is that I’m using Ubuntu 14.04 to test the entire scenario.
1. Add two VMnet interfaces in VMware Workstation Virtual Network Editor
Use the image below to have an idea what I mean.
2. Configure the BIG-IP VE NIC as follow in VMware Workstation
I assume that you have the BIG-IP VE OVA imported in VMware Workstation
I had 4 NICs originally, but I only need three:
- VMnet0 is bridge to my real LAN interface so I can manage the F5 BIG-IP VE over Web / CLI interfaces
- VMnet11 – one “internal” interface facing LAN (server side)
- VMnet22 – one “external” interface facing WAN (client side)
3. Configure two tap interfaces for F5 BIG-IP VE to be used in GNS3
11 – internal, 22 – external
sudo tunctl -u user -t tap11 sudo tunctl -u user -t tap22
*user = the non-root user which you use on Ubuntu host.
If you are having problems to find tunctl command please do the following:
sudo apt-get install uml-utilities bridge-utils
Bring the interfaces up
sudo ifconfig tap11 up sudo ifconfig tap22 up
4. Remove the IP addresses on both TAP and VMnet interfaces
sudo ifconfig tap11 0.0.0.0 promisc up sudo ifconfig tap22 0.0.0.0 promisc up sudo ifconfig vmnet11 0.0.0.0 promisc up sudo ifconfig vmnet22 0.0.0.0 promisc up
5. Bridge the TAP and the VMnet interfaces
sudo brctl addbr br11 sudo brctl addif br11 tap11 sudo brctl addif br11 vmnet11 sudo brctl addbr br22 sudo brctl addif br22 tap22 sudo brctl addif br22 vmnet22
Bring the bridge interfaces up
sudo ifconfig br11 up sudo ifconfig br22 up
5. Add the F5 BIG-IP VE to GNS3
If with GNS3 1.2.1 you can add the VirtualBox VMs directly, for the VMware Workstation (Player, Fusion, etc…) VMs you still need to you the Cloud part.
My GNS3 for F5 topology looks like this:
And the GNS3 Cloud (representing the F5 BIG-IP VE) settings are the following:
6. Connect the GNS3 Cloud interfaces to R1 and R2
Like shown in the image above, connect the TAP interface of the Cloud to the peer routers.
I’m running all applications (GNS3, VMware Workstation, VirtualBox) as non-root user. If you’re doing the same an error may occur in GNS3. Something like:
Server error [-3200] from x.x.x.x:8000: R1: unable to create TAP NIO
If this is the case, please run the following command on Ubuntu host:
sudo setcap cap_net_admin,cap_net_raw=ep /usr/local/bin/dynamips
This will help you setup the environment to test F5 BIG-IP VE in a lab environment totally virtualized. I’m not going to cover here how to configure the F5 BIG-IP VE. Maybe in one of my next articles.
If you encounter problems, please let me know in Comments.
Hi and thanks for the great post , am trying to do the same
My host is windows 7 64-bit , I faced some issues running the bridge interfaces (cannot create more than one bridge interface) , my question is can i directly connect the cloud (the F5) to gns3 and connect the vmnet interfaces ? I am using gns3 1.1.0
Thanks
Hi,
I tried this approach under Ubuntu 14.04…did not work :(
If you can try it under Windows and let me know, I would really appreciate it.
Good luck!
I’m able to do everything but what do you do after that? Configure the ip on eth0 and eth1 on th eF5? I’m doing that but it is not pinging the neighbor router.
Not really…you need to configure everything from the web interface. I don’t know your level of experience with F5, but this is a great place to start https://support.f5.com/kb/en-us/products/em/manuals/product/em-gettingstarted-2-3-0/2.html
In general the KB articled of F5 are very descriptive and you can find there all the information you need: https://support.f5.com/kb/en-us.html
Good luck!
Calin
What version F5 LTM and of Workstation did you get this to work on? I tried using F5 v11 on Workstation10 but kept failing –
thanks
SC
Install F5 BIG-IP LTM VE 12.0
https://itmug.wordpress.com/network/install-f5-big-ip-ltm/
Configure two tap interfaces for F5 BIG-IP VE to be used in GNS3.
In which interface write This command
Sorry, which command?
I found this post regarding Install F5 BIG-IP LTM VE 12.0
https://itmug.wordpress.com/network/install-f5-big-ip-ltm/