F5 ARX administration and configuration

Networking

• Arx2500 don't supporty layer 2 switch; switch forwarding is disable; behaves as an end station in the local spanning tree.
• Arx2500 has only the default VLAN, that is, VLAN 1, configured by default. Do not have either private VLAN (VLAN 1002) or a metalog VLAN (VLAN 1003) configured in their factory default configuration.
• ARX redundant pairs communicate over private or metalog VLANs.
• Port 1/1 is configured by default as the management interface.
• A port can be member of more than one VLAN fi the port has VLAN tagging enabled.
• Any changes to private vlan cause reboot  (vlan 1002, 1003)
• Each gigabit interface with following default: speed=auto(speed=ten-gigabit, full-deplex (non-configurable)); flow control disable; shut down

Redundant-Pair

ARX 2500 uses layer-3 (IP) networking software for exchanging heartbeats and important metalog between the peers. No use "redundancy protocol" command, it's for lay-2, such as arx2000.

1. Establish a new VLAN for the link.

2. User "interface vlan" to create a management-IP interface on the VLAN, this puts you into cfg-if-vlan mode. Use "ip address (cfg-if-vlan) to establish an in-band (VLAN) ip. You later use this ip to identify this ARX to its peer. From the same mode, use "redundancy (cfg-if-vlan) to designate the interface for exchanging metalog and heartbeats. From the same mode, use "no shutdown" to enable the management interface.

Client subnet - clients use to access services on the ARX. These are the subnet for virtual-IP address, the specific addresses for accessing front-end services.

Proxy-IP - ARX uses to connect to back-end filers and servers.

Private subnet - internal to the ARX. It must run over its own VLAN, by default is VLAN 1002.

ASM processors - use metalog VLAN 1003 to send important database logs to a NVRAM on SCM.

RON - Resilient-Overlay Network. Join one or more ARX together to exchange files replicas over RON.

In-Band VLAN management Interface