F5 Big-IP LoadBalancer. Supports Management Module SM-F5N1000

(1)

F5 Big-IP LoadBalancer

SPECTRUM Enterprise Manager

Device Management

Supports Management Module SM-F5N1000

Titlepae Titlepae Titlepae Titlepae

(2)

Notice

Aprisma Management Technologies, Inc. (Aprisma), reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Aprisma to determine whether any such changes have been made.

The hardware, firmware, or software described in this manual is subject to change without notice.

IN NO EVENT SHALL APRISMA, ITS EMPLOYEES, OFFICERS, DIRECTORS, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF APRISMA HAS BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.

Printed in the United States of America. Order Number: 9035004

Aprisma Management Technologies, Inc. 121 Technology Drive

Durham NH 03824

SPECTRUM, the SPECTRUM IMT/VNM logo, DCM, IMT, and VNM are registered trademarks, and SpectroGRAPH, SpectroSERVER, Inductive Modeling Technology, Device Communications Manager, and Virtual Network Machine are trademarks of Aprisma or its affiliates.

Ethernet is a trademark of Xerox Corporation.

Big-IP LoadBalancer is a trademark of F5 Networks, Inc.

Virus Disclaimer

Aprisma makes no representations or warranties to the effect that the Licensed Software is virus-free.

Aprisma has tested its software with current virus checking technologies. However, because no anti-virus system is 100% reliable, we strongly caution you to write

Restricted Rights Notice

(Applicable to licenses to the United States Government only.)

1. Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.

Aprisma Management Technologies, Inc., 121 Technology Drive NH 03824 2. (a) This computer software is submitted with restricted rights. It may not be

used, reproduced, or disclosed by the Government except as provided in paragraph (b) of this Notice or as otherwise expressly stated in the contract. (b) This computer software may be:

(1) Used or copied for use in or with the computer or computers for which it was acquired, including use at any Government installation to which such computer or computers may be transferred;

(2) Used or copied for use in a backup computer if any computer for which it was acquired is inoperative;

(3) Reproduced for archival or backup purposes;

(4) Modified, adapted, or combined with other computer software, provided that the modified, combined, or adapted portions of the derivative software incorporating restricted computer software are made subject to the same restricted rights;

(5) Disclosed to and reproduced for use by support service contractors in accordance with subparagraphs (b) (1) through (4) of this clause, provided the Government makes such disclosure or reproduction subject to these restricted rights; and

(6) Used or copied for use in or transferred to a replacement computer. (c) Notwithstanding the foregoing, if this computer software is published

copyrighted computer software, it is licensed to the Government, without disclosure prohibitions, with the minimum rights set forth in paragraph (b) of this clause.

(d) Any other rights or limitations regarding the use, duplication, or disclosure of this computer software are to be expressly stated in, or incorporated in, the contract.

(3)

Introduction

This section introduces the SPECTRUM Device Management documentation for F5 Big-IP LoadBalancer devices.

This introduction to the F5 LoadBalancer documentation contains the following information:

• Purpose and Scope

• Required Reading

• Supported Devices (Page 6)

• The SPECTRUM Model (Page 6)

Purpose and Scope

Use this documentation as a guide for managing F5 Big-IP LoadBalancer devices with the

SPECTRUM management module SM-F5N1000. This documentation describes the icons, menus, and views that enable you to remotely monitor, configure, and troubleshoot Load Balancer devices through software models in your SPECTRUM database.

Only information specific to the supported

management module is included under this topic. For general information about device

management using SPECTRUM and for

explanation of basic SPECTRUM functionality, and navigation techniques, refer to the

documentation listed under Required Reading.

Required Reading

To use this documentation effectively, you must be familiar with the information covered by the other SPECTRUM online documentation topics listed below.

• Getting Started with SPECTRUM for Operators • Getting Started with SPECTRUM for

Administrators

• How To Manage Your Network with SPECTRUM • SPECTRUM Views

(6)

I n t r o d u c t i o n S u p p o r t e d D e v i c e s

• SPECTRUM Icons

Supported Devices

The SPECTRUM management module

SM-F5N1000 currently allows you to model different types of F5 Load Balancer devices as described below.

The F5 Big-IP Load Balancer is a device which provides the means to load balance servers, caches, firewalls, and VPN gateways. It contains four load balancing modes, and three modes for maintaining connections to servers. This device supports Intelligent traffic control, Secure Network Address Translation (SNAT),

performance monitoring, full TCP/IP protocol support, VLAN trunking, and GB Ethernet interface.

The SPECTRUM Model

SPECTRUM uses a single device model type,

BigIPLoadBlncr, for modeling any of the

supported F5 devices. Load balancer models are represented in SpectroGRAPH views by Device icons. As Figure 1 shows, the appearance of the Device icon varies slightly depending on the kind of view it appears in.

Figure 1: Figure 1: Figure 1:

Figure 1: Small and Large Device Icons

Large Device icon Model Name

Model Name Small Device icon appears in

Topology, Device Topology,

appears in Device Topology, Location, and

Interface Device views.

(7)

I n t r o d u c t i o n T h e S P E C T R U M M o d e l

Figure 2 shows a portion of a Topology view in

which the Device icon representing the Load Balancer model appears surrounded by icons representing the network entities which the device connects—in this case two Ethernet LANs and an Off-Page Reference icon representing a Wide Area Link to a corporate network.

Figure 2: Device Icon in Topology View

Through its double-click zones and its Icon

Subviews menu, the Device icon is your starting

point for accessing the views and other displays that let you perform device management activities such as those listed in the Tasks section

immediately following this introduction. The rest of the documentation for this

management module is organized according to view type, as follows.

• Device Views (Page 9)

• Device Topology Views (Page 13)

• Application Views (Page 15)

• Configuration Views (Page 34)

• Model Information Views (Page 39)

Admin_Nashua LAN 802.3 Sales_Nashua LAN 802.3 Device Icon _JK2 LoadBalncr WA_Link

(8)

Tasks

This section lists device management tasks alphabetically and provides links to descriptions of the views and/or table used to perform the task.

Application Information (examine)

• Application Views (Page 15)

Device View (monitor)

• Device Views (Page 9)

Device (configure)

• Device Configuration View (Page 34)

Device Topology (examine)

• Device Topology Views (Page 13)

Fault Isolation (configure)

• Device Fault Isolation Configuration Options

View (Page 36)

Interface Mask and Address (examine)

• Secondary Address Panel (Page 12)

Model Information (examine)

Model Redundancy (configure)

• Redundancy and Model Reconfiguration

Options (Page 35)

Performance Views (examine)

• Performance View (Page 37)

• Port Performance View on Page 38

Port Statistics (monitor)

(9)

Device Views

This section describes the Device views and subviews available for models F5 Big-IP LoadBalancer devices in SPECTRUM.

Device views use icons and labels to represent the modeled device and its components, such as modules, ports, and applications. There is one type of Device view:

• Interface Device View

Interface Device View

Access: From the Icon Subviews menu for the Device

icon, select Device > Interface.

This view provides dynamic configuration and performance information for each of the device’s serial/network/I/O ports, which are represented by Interface icons in the bottom panel of the view, as shown in the figure. The middle panel of the view also displays a Device icon, which allows you to monitor the device operation and access other device-specific views.

Figure 3: Interface Device View

JK2 of Landscape X Primary

File View Tools Helpÿ

Name Contact Description Location System Up Time Manufacturer Device Type Serial Number Network Address Primary Application Interface Description

Find Phy Addr

Model Name ISO88025 TokenRing0 0 1 ON 0:0:30:68:6F:1B 0:0:0:0 Ethernet Ethernet0 0 2 ÿþ 0:0:30:68:6F:9B 0:0:0:0 i Bookmarks SpectroGRAPH:

(10)

D e v i c e V i e w s I n t e r f a c e D e v i c e V i e w

Interface Icons

Figure 4 shows a close-up of an Interface icon

from an Interface Device view. Most of the informational labels on the icon also provide double-click access to other views, as explained in the following label descriptions.

Figure 4: Interface Icon

Interface Number Label

This label displays the interface number. IF Status Label

This label displays the current Operational Status of the interface (see Table 1). Note that the

background color of the label also depends on the interface’s current Administrative Status, which is set by the user (see Interface Status View

(Page 12)). This view can be accessed by double-clicking the label.

Interface Type Label

This label identifies the type of interface—e.g., Ethernet, FDDI, Other, etc. Double-click this label to access the Secondary Address Panel (Page 12).

ISO88023

0

1 ON

0:0:30:68:6F:1B 0:0:0:0

a Interface Number Label

b IF Status Label

c Interface Type Label

d Physical Address Label

e IP Address Label

f Gauge Label

g Network Type Label

(a) (b) (c) (d) (e) (f) (g)

Table 1: Interface Status Label Colors Color Operational Status Administrative Status Label Text Green ON ON ON

Blue OFF OFF OFF

Yellow OFF ON OFF

(11)

D e v i c e V i e w s I n t e r f a c e D e v i c e V i e w Physical Address Label

This label displays the physical (MAC) address of the interface. Double-click the label to open the Interface Address Translation table, which cross-references network addresses (IP addresses) to physical (MAC) addresses for selected nodes between networks. Double-clicking on any

column entry opens an address-specific Address Translation Table Information view. This view provides the same information as the

corresponding row for the IF Address Translation table, but allows you to modify field values.

IP Address Label

This label displays the IP address for the interface. Double-click the label to open the

Secondary Address Panel (Page 12), which allows

you to change the address and mask for this interface.

Gauge Label

This label displays whichever performance statistic has been selected in the Gauge Control panel for this device’s interfaces (see the

SPECTRUM Views documentation for more

information). Double-click this label to open the

Port Performance View (Page 38).

Network Type Label

This label identifies the type of network the

interface is connected to. Double-click the label to open the Model Information view for the interface.

Interface Icon Subviews Menu Options

Table 2 lists the Icon Subviews menu options

available for the Interface icon.

Table 2: Interface Icon Subviews Menu

Option Opens the . . .

Detail Interface Detail view, which displays

Packet, Error, and Discard Breakdown pie charts.

IF Status Interface Status View (Page 12).

IF Configuration Interface Configuration View

(Page 36).

Model Information Model Information view for the selected interface (see Model

Information Views on Page 39).

IF Address Translation Table

Interface Address Translation Table view, which shows the Physical and Network address for each interface. Secondary Address

Panel

(12)

D e v i c e V i e w s I n t e r f a c e D e v i c e V i e w

Interface Status View

Access: From the Icon Subviews menu for the Interface

icon in the Interface Device view, select IF Status.

This view provides information on the operational status of the interface and allows you to enable or disable the port.

Operational Status

The current state of the interface (ON, OFF, or Testing).

Administrative Status

This button allows you to select the desired operational state of the interface (ON, OFF, or Testing).

Secondary Address Panel

Access: From the Icon Subviews menu for the Interface

icon in the Interface Device view, select Secondary

Address Panel.

This panel provides a table of IP addresses and masks obtained from the Address Translation table within the device’s firmware. You can change the current address displayed in the IP

Address field by selecting an entry from the table

in this panel and clicking the Update button.

Thresholds Interface Threshold view, which

allows you to set the on/off alarm thresholds for load, packet rate, error rate, and % discarded.

Table 2: Interface Icon Subviews Menu

(13)

Device Topology Views

This section provides brief descriptions of the Device Topology views available for models of F5 Big-IP LoadBalancer devices in SPECTRUM.

Device Topology views show the connections between a modeled device and other network entities. There are two kinds of Device Topology views available for F5 Load Balancer models:

• Interface Device Topology View

Interface Device Topology

View

icon, select DevTop > Interface.

The lower panel of the Interface Device Topology view (Figure 5) uses interface icons to represent the device’s serial/network I/O ports. These icons provide the same information and menu options as those in the Interface Device View (Page 9). If there is a device connected to a particular

interface, a device icon appears on the vertical bar above the interface icon along with an icon

representing the network group that contains the device.

Figure 5: Interface Device Topology

JK2 of type Big-IPof Landscape X Primary

Model Name

LoadBalancer

Fileÿ View Tools Help

ethernet INSIDE 0 1 ON 0:0:30:68:6F:1B 0:0:0:0 ethernet OUTSIDE 0 2 ON 0:0:30:68:6F:1B 0:0:0:0

Model Name Model Name

APVntg ASM 50 Bookmarks

i

SpectroGRAPH: Device Topology: IP Address

(14)

Cablewalk and Cablewalk List

Views

Access: From the Icon Subviews of the device icon in the

Device Topology view.

This view is described in detail in the SPECTRUM

(15)

Application Views

This section describes the main Application view and the associated application-specific subviews available for models of F5 Big-IP LoadBalancer devices in SPECTRUM.

icon, select Application.

When a device model is created, SPECTRUM automatically creates models for each of the major and minor applications supported by the device. The Application view identifies all of these application models, shows their current condition status, and provides access to application-specific subviews.

Figure 6 shows an Application view in its default

mode (Icon) where each of the application models is represented by an Application icon (see

Figure 7 for a close-up). The Application icons are

arranged hierarchically under a Device icon, with major applications in the top row and their

respective minor applications stacked directly below.

If you prefer to see applications displayed by name only, in a single vertical list, select View >

Mode > List.

Figure 6: Main Application View

JK2 of type LoadBlncr of Landscape node: Primary

Model Name Contact Description

Location Primary Application

System Up Time Manufacturer Device Type Serial Number Network Address 02_Routing GenRtrApp

File View Tools Help

JK2 MotMPRouter IP Routing IP2RtrApp JK 2_MIB-II MP2-Agent JK2_ICMP ICMP_App JK2_T FT P M otTFT PApp Mo tTFTPAp p ConfigA pps ConfigApps M otCo nf ig Ap ps Bridge App JK2_CSIS M otCSISApp M o tCSI SAp p BWMgmtA BWM gm tApp BW Mg m tAp p s JK2_DC_Ap MotDCApp MotDCApp ce Routing JK2 S tatic T ransparen GenRtrApp ce_Rtr_A pp Static _App arent_App SNMP2_Agent ICMPApp System2_App UDP2_App JK2_System JK2_UDP2 System2_App UDP 2_App Bookmarks i SpectroGRAPH:

(16)

A p p l i c a t i o n V i e w s A p p l i c a t i o n I c o n s

Application Icons

When the Application view is in Icon mode, each of the application models is represented by an Application icon (Figure 7). Double-clicking the Model Name label (a) at the top of the icon opens the associated Model Information view—see Model

Information Views (Page 39). For some

applications, the Model Type label (c) at the bottom of the icon is also a double-click zone, which opens an application-specific view. Any views accessible through these double-click zones are also accessible from the Application icon’s

Icon Subviews menu.

Figure 7: Application Icon

Supported Applications

F5 Big-IP Load Balancer devices support both common and device-specific applications. Applications that are common to many of the different kinds and makes of devices managed by SPECTRUM are listed in Table 3 along with the corresponding documentation topics.

The views and subviews available for Load

a Model Name Label / Model Information View

b Condition Status Label

c Model Type Label / Application-Specific View (a)

(b)

(c)

(17)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n described in the rest of this section, grouped by

major application as listed below:

Big-IP Application

This application contains the following application-specific subviews:

• Interfaces View (Page 17)

• Pool Members (Page 19)

• Virtual Servers (Page 21)

• Virtual Address (VADDRESS) Information

(Page 26)

• NAT (Network Address Translation)

Information (Page 27)

• Member Information (Page 29)

• General Big IP Scalars (Page 24)

Interfaces View

Access: From the Icon Subviews menu for the BigIPApp

Application icon, select Interface Config.

This view contains the following information: Interface Number

The number of interfaces on this Big-IP.

Interface Table

This table contains the following entries: Interface Name

The name of the interface. IP Addresses

The list of IP address on this interface. Destination

This is a destination interface. Source

This is a source interface.

Table 3: Common Applications Application For more info, see...

Routing (GenRtrApp) Miscellaneous

Applications

Ethernet (EthernetApp) Miscellaneous

Applications

Bridging (GenBridgingApp) Bridging Applications

FDDI Application (RFC 1512App)

Miscellaneous Applications

(18)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Timeout

The seconds before a failout is triggered in failsafe mode.

Armed

The interface will be armed if the interface failsafe mode is activated.

VLANS enabled

The VLANs enabled for this device. Masquerade Address

The MAC masquerade address for this interface. Last Time Changed

The last time the interface attributes were modified.

Speed

The speed of this interface. Full Duplex

Is this interface operating in full duplex mode.

Interface IP addresses

Address number

The number of interface IP addresses on this Big-IP.

IF Address Table

This table contains information about the BIg/IP interface IP addresses. It contains the following values:

IP Address

The IP address for this interface IP address. Interface Name

The name of the interface for this IP address. Net Mask

The netmask for this interface IP address. Broadcast

The broadcast address for this interface IP address.

Type

The type for this interface IP address. Unit Id

The unit identifier for this interface IP address. VLAN Tag

The VLAN tag for this interface IP address.

Pools

Pool number

(19)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n

Pool Table

This table contains information about the Big-IP pools, and displays the following:

Name

The name of this pool.

The load balance mode of this pool. Possible values are:

Dependent

Whether or not the pool is dependent. Member Quantity

The number of members in this pool. Bits In

The number of bits in this pool. Bits Out

The number of bits out for this pool. Packets In

The total of packets in this pool. Packets Out

The total of packets out of this pool. Maximum Connections

The maximum number of connections the members of this pool have had open at any one time.

Current Connections

The current number of connections the members of this pool have open.

Total Connections

The total number of connections the members of this pool have served since the pool started.

Pool Members

Application icon, select Pool Members.

This view contains the following information: Member Number

The number of pool members on this Big-IP.

Member Table

This table displays the following: Pool name

The name of the pool. IP Address

The IP address of this pool member. Port

The port of this pool member. Maintenance

(20)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Ratio

The Load Balancing ratio of the member within the pool.

Priority

The priority level of the member within the pool. Used by the priority member load balancing mode.

Weight

The weight of the member within the pool. Ripeness

The current load balancing state in the member load balancing mode.

Member Bits In

The total bits in for this pool member. Member Bits Out

The total bits out for this pool member. Packets In

The total packets in for this pool member. Packets Out

The total packets out for this pool member. Maximum Connections

The maximum number of connections this pool member can have open at any one time.

The current number of connections this pool member has open.

The total number of connections that this pool number has served since starting a pool.

Virtual Addresses

Application icon, select Virtual Address Config. Number

The number of virtual addresses on this device.

Virtual Address Table

This table contains the following information: IP Address

The IP address for this virtual server. Status

The status of the server, whether it is in maintenance mode.

Connection Limit

The total number of connections this virtual address can support at one time.

Net Mask

(21)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Broadcast

The broadcast address for this virtual address. Interface

The name of the network interface that this address is attached to.

Failover Flags

The failover flags for this virtual address. Octets In

The number of octets received from the network from this virtual server.

Octets Out

The number of octets sent to the network from this virtual server.

Packets In

The number of packets received from the network from this virtual server.

Packets Out

The number of packets sent to the network from this virtual server.

The number of connections currently open on this virtual server.

Maximum Connections

The maximum number of connections this virtual server has had open at any one time.

The total number of connections this virtual server has had since it started.

Octets In

Octets Out

Unit Id

The unique identifier of this virtual server.

Virtual Servers

Application icon, select Virtual Server Config. Number

The number of virtual servers on this device.

Virtual Server Table

This table contains the following information: IP Address

The IP address of this virtual server. Port

(22)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Status

The status of the virtual server. App Protocol

The application tunnelling protocol this virtual server uses.

App Protocol Timeout

The persistence timeout for this application protocol session.

App Protocol Reaper

The amount of idle time before we reap an application protocol session.

Persist Timeout

The timeout for persistence on this connection. Persist Mask

The IP addresses matching this mask will have persistent connection. Those not covered by this mask will not.

Sticky

Is the Destination Address Affinity turned on for this connection?

Sticky Mask

The addresses matching this mask will have Destination Address Affinity if the virtual server sticky is true.

Failover Flag

The failover flag for this virtual server. Octets In

Octets Out

Packets In

The number of packets received by the network from this virtual server.

Packets Out

The number of packets sent to the network from this virtual server.

Current Connection

The number of connections currently open on this virtual server.

Maximum Connections

The total number of connections this virtual server has served since the server started.

(23)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n New

The number of new SSL sessions on this virtual server.

Hits

The number of lookup successes in the SSL session id cache for valid sessions ids.

Timeouts

The number of lookup successes in the SSL session id that have already been reaped. Misses

The number of lookup failures in the SSL session id cache.

Cookie Method

The cookie persistence method for this virtual server.

Rule

The load balancing rule used by this virtual server.

Pool

The load balancing pool used by this virtual server.

Snat Original Conf

A table which contains all of the secure NATS entries. It contains the following information:

TransEnabled

Indicates whether this Translation Address is enabled or disabled.

Address

The IP address to the outside world for this SNAT. TransIface

The name of the interface that this translation address exists on.

Netmask

The network mask for the SNAT Translation address.

TransBroadcast

The broadcast address for the SNAT Translation Address.

Secs Collecting Stats

The number of seconds we have been collecting statistics for this port.

Bits In

The total bits in for this SNAT. Bits Out

The total bits out for this SNAT. Packets In

The total packets in for this SNAT. Packets Out

(24)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Last Transport

Last translated port accessed using the SNAT. Unit Id

The unit number of the load balancer to which the SNAT translation address is assigned.

SNAT Original Conf

A table of all secure SNAT entries that contains the following information:

OrigEnabled

Is this enabled for SNAT? OrigAddr

The IP address to the outside world for this SNAT. OrigConnLimit

The maximum number of connections through this SNAT.

OrigTransAddr

The translation address corresponding to this original address.

OrigTcpTimeout

The idle timeout for TCP connections through this SNAT.

OrigUdpIdleTimeout The idle timeout.

OrigStatsZeroTime

The time statistics started being collected. SecsCollectingStats

The number of seconds we have been collecting statistics for this port.

General Big IP Scalars

Application icon, select Configuration. Uptime

The uptime of this device; not the uptime of the SNMP agent

The total number of connections this balancer has serviced.

The number of current connections. Maximum Connections

The maximum number of connections that this balancer has serviced at one time.

Packets In

The total count of all packets read off of the network.

(25)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Packets Out

The total count of all packets written to the network.

Bits in

The total number of bits read off the network. Bits Out

The total count of all bits written to the network. Port Deny

The number of port denies that have occurred. Dropped In

The count of inbound packets that have been dropped.

Active

Indicates whether the balancer is active or in standby mode.

Mirror Enabled

Is mirroring enabled on this load balancer? Reset Counters

Is mirroring enabled on this load balancer? Packets In

The total count of all packets read off the network.

Packets Out

The total count of all packets written to the network.

Bits In

The total number of bits read off the network. Bits out

The total count of all bits written to the network. Node Ping

The node ping interval in seconds. NodeTimeout

The node timeout interval in seconds. Loadbal Mode

The global load balance mode. Watch Dog Armed

The watch dog card state. snat Connection Limit

The number of simultaneous connections allowed through a SNAT.

snatTCP IdleTimeout

Default connection timeout for SNAT TCP connections.

snatUDP IdleTimeout

Default timeout for SNAT UDP connections. gatewayFailsafe

Indicates whether gateway failsafe pinging is enabled.

(26)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Unit Id

Unit id(s) for this load balancer. Memory Used

Memory used by the load balancer kernel. MemoryTotal

Total memory available to the load balancer kernel.

Virtual Address (VADDRESS)

Information

Access: Select Virtual Address from the Old Groups

submenu within the Icon Subviews menu.

This view contains the following information: Number

The number of virtual addresses present on this system.

Index

A unique value for each virtual address defined. Descr

A description of the virtual address. IpAddr

The IP address for the virtual address. vaddressPktsin

vaddressPktsout

The total packets out of this virtual address. Bitsin

The total bits in for this virtual address. Bitsout

The total bits out of this virtual address. Concur

The current number of connections on this virtual address.

Connnection Maximum

The total number of connections this virtual address can support at one time.

Connection Total

The total number of connections this virtual server has served since the server started. Status

The status of this virtual address.

Network Address (NADDR)

Information

(27)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Number

The number of network addresses present on this system.

Index

A unique value for each ndaddr defined. Description

A textual string describing the node address. Address

The node address. Pktsin

The total packets in for this node address. Pktsout

The total packets out for this node address. ndaddrBitsin

The total bits in for this node address. ndaddrBitsout

The total bits out for this node address. Concur

The number of current connections for this node address.

Conmax

The maximum number of connections this node address has had opened at one time.

The maximum number of connections this node address is allowed to have open at one time. Total Connections

The total connections that this node address has had.

Status

The status of this node address. Maintenance

Indicates whether the node is in maintenance mode.

NAT (Network Address Translation)

Information

Access: Select NAT from the Old Groups submenu within

the Icon Subviews menu.

This view contains the following information: Number

The number of NATS present on this system. Index

A unique value for each NAT defined. Descr

A textual string describing the NAT. IpAddrFR

(28)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n IpAddrTO

The NAT’s TO IP Address. Pktsin

The total packets in for this NAT. Pktsout

The total packets out for this NAT. Bitsin

The total bits for this NAT. OutsideNetmask

The outside Netmask for this NAT. Interface

The interface name for this NAT. natUnitId

The unit id associated with this NAT.

Virtual Port (VPORT) Information

Access: Select VPORT from the Old Groups submenu

within the Icon Subviews menu. Number

The number of virtual ports present on this system.

Table

A list of virtual port entries. The number of entries is given by the value of the virtual port

Index

A unique value for each virtual port defined. Port

The virtual port’s port number. Description

A description of the virtual port. Pktskin

The total packets in for this virtual port. Pktsout

The total packets out for this virtual port. Bitsin

The total bits in for this virtual port. Bitsout

The total bits out for this virtual port. Concur

The number of current connections for this virtual port.

Conmax

The maximum number of connections this virtual port has had open at any one time.

Comlimit

(29)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Connection Total

The total number of connections this virtual port has had open since the server started.

Reaped

The total connections reaped on this virtual port. Allowed

Indicates whether this port is allowed (1), or disallowed (2).

TCP persistence

The number of seconds before the TCP persistence expires for this virtual port. UDP persistence

The number of seconds before UDP persistence expires for this virtual port.

Member Information

Access: Select Member from the Old Groups submenu

within the Icon Subviews menu. Member Table

This table contains balancer member information. Virtual Address

The virtual IP address. Virtual Address Port

The virtual IP address port.

Ordinal

The virtual IP address ordinal number. Address

The node IP address for this member. Port

The node port for this member. Status

The status of this member. Packets In

The number of packets read off the network for this member.

Packets Out

The number of packets written to the network for this member.

Bits In

The number of bits read off the network for this member.

Bits Out

The number of bits written to the network for this member.

The number of connections currently open for this member.

(30)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n Connection Maximum

The maximum number of connections this member has had open at any one time. Connection Limit

The total number of connections this member can support at one time.

Connection Total

The total number of connections this member has served since the server started.

UCD SNMP Application

procTable

Access: From Icon Subviews menu select System

Information.

This table contains information on running programs/daemons configured for monitoring in the snmpd. conf file of the agent. Processes which violate the number of running processes required by the agent’s configuration file are flagged with errors. Double-click on a row within the table to write to the Err Fix item.

Entry

An entry containing a process and its statistics. Index

A reference index for each observed process.

Names

The process name being counted/checked on. Minimum

The minimum number of processes that should be running. An error flag is generated if the number of running processes is less than the minimum.

Maximum

The maximum number of processes that should be running. An error flag is generated if the number of running processes is more than the maximum.

Count

The number of current processes running with the name in question.

ErrorFlag

An error flag to indicate trouble with a process. If there is an error, it goes to 1. A value of 0

indicates no errors. ErrMessage

An error message describing the problem (if one exists).

ErrFix

Setting this to 1 will try to fix the problem if the agent has been configured with a script to

(31)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n attempt to fix problems automatically using

remote snmp operations.

Extensible View

Access: From the Icon Subviews menu for the Application

icon, select Extensible. Index

A reference index for extensible scripts. Names

A one name description of the extensible command.

Command

The command line to be executed. Result

The result code from the executed command. Output

The first line of output of the executed command. ErrFix

Setting this to 1 will try to fix the problem if the agent has been configured with a script to call to attempt to fix problems automatically using remote snmp operations.

Memory Information View

Access: From the System Information submenu, select

Memory Information. Index

Bogus index. This should always return 0. ErrorName

Bogus Name. This should always return the string “swap.”

TotalSwap

Total swap size configured for the host. AvailSwap

The available Swap Space on the host. TotalReal

The total real/physical memory space on the host.

TotalSwapTXT

The total virtual memory used by text. AvailRealTXT

The active real/physical memory space used by text.

TotalRealTXT

(32)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n AvailRealTXT

The active real/physical memory space used by text.

TotalFree

The total available memory on the host. MinimumSwap

The minimum amount of free swap required to be free or else memory “ErrorSwap” is set to 1 and an error string is returned from

memSwapErrorMsg. Shared

The total Shared Memory Buffer

The total buffered memory. Cached

The total cached memory. SwapError

The error flag. A value of 1 indicates very little swap space left.

SwapErrorMsg

The error message describing the Error Flag condition.

Disk Information View

Access: From the System Information submenu, select

Disk Table. diskTable

This table contains disk watching information. Partitions to be watched are configured by the snmpd. conf file of the agent.

Entry

An entry containing a disk and its statistics. Index

The integer reference number (row number) for the disk mib.

Path

The path where the disk is mounted. Device

The path of the device for the partition. Minimum

The minimum space required on the disk (kbytes) before the errors are triggered. Either this or dskMinPercent is configured via the agent’s snmpd.conf file.

MinPercent

The percentage of minimum space required on the disk before the errors are triggered. Either

(33)

A p p l i c a t i o n V i e w s B i g - I P A p p l i c a t i o n this or dskMinimum is configured via the agent’s

snmpd. conf file. Total

The total size of the disk (kbytes). Avail

The available space on the disk. Used

The used space on the disk. Percent

The percentage of space used on the disk. ErrorFlag

Error flag signaling that the disk or partition is under the minimum required space configured for it.

ErrorMsg

A description providing a warning and the amount of space left on the disk.

Load Average Information View

Access: From the Icon Subviews menu for the Application

icon, select Performance. Load Table

This table contains the following load average information:

Entry

An entry containing a load average and its values. Index

A reference index/row number for each observed load average.

Names

The list of load average names being watched. Load

The one, five, and ten minute load averages. Config

The watch point for load-averages to signal an error. If the load averages rise above this value, the laErrorFlag below is set.

ErrorFlag

An error flag to indicate the load-average has crossed its threshold value defined in the

snmpd.conf file. It is set to 1 if the threshold is crossed, and set to 0 if it is not.

ErrMessage

An error message describing the load-average and its surpassed watch-point value.

(34)

Configuration Views

This section describes configuration views available for F5 Big-IP LoadBalancer devices in SPECTRUM.

Configuration views allow you to view and modify current settings for the modeled device and its interfaces, ports, and applications. The following Configuration view is available for models of F5 Big-IP LoadBalancer devices.

• Device Configuration View

• Interface Configuration View (Page 36)

• Device Fault Isolation Configuration Options

View (Page 36)

Device Configuration View

icon, select Configuration.

This view (Figure 8) provides status and

configuration information about the device as a whole as well as on a port-by-port basis. It also provides button access to an Interface Address Translation table and a subview that lets you establish redundancy for the model. Fields and

view and its subviews are explained in detail in the SPECTRUM Views documentation.

Figure 8: Figure 8:Figure 8:

Figure 8: Configuration View

Primary Application System Up Time Interface Type Interface Index Serial Number IP Address Modelÿ Contact Description Location

* Fileÿ View Options Helpÿ

Contact Status Primary Address

Number of Interfaces

Device Configuration View

Interface Configuration Table Sort Find Update

Redundancy and Model Reconfiguration Options Interface Address Translation

Index Description Type Bandwidth Physical Address Operation Status i

(35)

Redundancy and Model

Reconfiguration Options

Access: Click this button in the Device Configuration

view.

This view allows you to enable redundant addresses, have SPECTRUM notify you of a redundancy update, and reconfigure aspects of your network connections. Figure 9 is an example of this view.

Figure 9: Figure 9:Figure 9:

Figure 9: Redundancy/ Reconfiguration

Interface Address Translation

Table

Access: Click this button in the Device Configuration

view.

This view cross-references device IP addresses to device MAC addresses for selected nodes between networks. Double-clicking on any column entry

SpectroGRAPH: IP Address

Redundancy and Model Reconfiguration Options

Model Name Preferred Addresses

Network Address Primary Address

Redundancy Administrative Status

Automatically Reconfigure Interfaces True

Reconfigure Due to Link Up/Down Events True

Device Recovery after Reconfiguration

Generate Redundancy Alarms Create Sub-Interface Topologically Relocate Model

Reconfigure Model

Discover LANs Button Explanations

(36)

C o n f i g u r a t i o n V i e w s I n t e r f a c e C o n f i g u r a t i o n V i e w opens an address-specific Address Translation

Table Information view allowing you to modify each of the three fields for that entry.

Interface Configuration View

icon, select IF Configuration.

This view provides the following information for the selected interface:

Operation Status

The current operational state of the interface (On, Off, or Testing).

Admin. Status

The desired operational state of the interface (On, Off, or Testing).

Last Change

The System UpTime value when the interface entered its current operational state.

IP Address/Network Mask

This window provides a list of the user-defined names and IP addresses for the interface.

Physical Address

The Ethernet (MAC) address of the interface.

Bandwidth

The estimated bandwidth of the interface,

measured in bits per second. For interfaces that do not vary in bandwidth, or no accurate estimate can be made, a nominal bandwidth is provided. Queue Length

The length of the outbound packet queue, in packets.

Packet Size

The largest packet that can be transmitted or received by the port, displayed in octets.

Device Fault Isolation

Configuration Options View

Access: From the Icon Subviews select Fault Isolation.

This view explains how to customize SPECTRUM’s fault isolation algorithm to prevent the assertion of multiple red alarms for the same fault.

(37)

Performance View

This section provides brief descriptions of the Performance views and subviews available for models of F5 Big-IP LoadBalancer devices in SPECTRUM.

Performance views for the F5 Load Balancer provide statistical information about the

operation of the device and packet information for the device and its ports. The following

performance views are described in this section:

• Performance View

• Port Performance View (Page 38)

Performance View

Access: From the Icon Subviews menu for the F5 Big-IP

LoadBalancer Device icon, select Performance. This view provides performance information about the packets being passed through the device. The following packet statistics for the entire device are displayed in this view.

• %Delivered • %Forwarded • %Transmitted • %Error • %Discarded Figure 10: Figure 10: Figure 10:

Figure 10: Performance View

File View Help

Device Performance View

Detail Model Name Contact Description Location Network Address Primary Application System Up Time Manufacturer Device Type Serial Number Log 100.0 10.00 1.00 0.10 0.01 0 0:40:00:30:0 0:20:0 0:10:0 0

Value Average Peak Value

*Frame Rate %Error % Delivered % Discarded % Forwarded SpectroGRAPH: Tools Bookmarks i %Transmit

Graph Properties Scroll to Date-Time

(38)

IP Routing Detail View

Access: From the Performance view, click the Detail button.

This view displays three pie charts depicting packet, error, and discard breakdown.

Port Performance View

This view provides performance information about the packets being passed through a particular interface. The following packet

statistics for the selected interface are displayed in this view:

• Load

• Packet Rate • % Error • % Discarded

Performance View Buttons (Page 38) lists the Port

Performance view buttons and the views they open.

Table 4: Performance View Buttons

Button Opens the....

Transmit Detailed Port Performance view for

packets transmitted.

Receive Detailed Port Performance view for

packets received.

Detail Interface Detail view, which displays

packet, error, and discarded breakdown statistics.

Config Interface Configuration View (Page 36).

Threshold Interface Threshold view, which allows

you to set the thresholds for load, packet rate, error rate, and % discarded.

Alarms Enterprise Alarm Manager.

(39)

Model Information Views

This section provides a brief description of the Model Information views available for models of F5 Big-IP LoadBalancer devices in SPECTRUM.

Access: From the Icon Subviews menu for the F5 Load

Balancer Device icon, select Model Information.

Model Information views provide descriptive and configuration information about SPECTRUM models of individual devices, interfaces, and applications. Figure 11 shows an example of the Model Information view for a F5 Load Balancer. Model information views are also available for each of the Interface icons in the Interface Device and Interface Device Topology views, and for each of the Application icons in the Application view. Although these views may vary slightly depending on the particular entity being modeled, their basic layout and content are similar for most

SPECTRUM management modules. Therefore these views are described in more detail in the

SPECTRUM Views documentation.

Figure 11: Model Information View

Primary Landscape 0x00080000 - VNM lipton - MIS2 of type Fanout

Help General Information MM Name MM Park Number MM Version Number Model Type Model Creation Time Model Created By Model State Security String Condition Condition Value Contact Status Lost Child Count Value When Yellow Value When Orange Value When Red Data Relay Class Configuration Interval Communication Information Poll/Log Information DCM Timeout DCM Retry Community Name Mgmnt Protocol Poll Interval Polling Status Last Successful Poll Log Ratio

LOGGED POLLED

Configure Model

Router Redundancy Information

Pulled Board List Information

Maximum # of Boards Current # of Boards Model Information View

Model Name Contact Description Location Network Address Primary Application System Up Time Manufacturer Device Type Serial Number

File View Tools BookmarksSpectroGRAPH:132.127.118.24

(40)

41

Index

A

Address Translation table 12

Administrative Status 12 Application Common Bridging (GenBridgingApp) 17 Ethernet (EthernetApp) 17 MIB-II (SNMP2_Agent) 17 Routing (GenRtrApp) 17 Device-specific 16 Icons 15

C

Colors

Interface Status Label 10

Condition Status Label 16

D

Device Configuration View 34

Device icon 6,15

I

Icon mode 15

Icon Subviews Menus for Interface icon 11

Icons

Device 6,15

Interface 10,13

Interface Device Topology View 13

Interface icon 10

Interface Icon Subviews Menu

Options 11

Interface Status View 12

Administrative Status 12 Operational Status 12

L

Labels Application Icon Condition Status 16 Model Name 16 Model Type 16 Interface IF Status Label 10

Physical Address Label 11

List mode 15

M

Mode (Icon or List) 15

Model type 6

Model Type Label 16

MotMPRouter 6

N

Network I/O ports 13

O

Operational Status 12

R

(41)

I n d e x I n d e x

S

Secondary Address Panel 12

Serial ports 13 Supported devices 6

T

Topology view 7 Trademarks 2

V

Views Application 15 Configuration 34 Device Configuration 34 Interface Status 12 Topology 7

F5 Big-IP LoadBalancer. Supports Management Module SM-F5N1000