Adding F5 BIG-IP Devices

TOS Aurora monitors F5 BIG-IP devices for policy revision changes. You can add these devices as TOP plugins for change management of textual revisions, but you can add F5 BIG-IP Local Traffic Manager (LTM) devices without the plugin to see the graphical display of revisions and to include the devices in Topology calculations. To help you organize the information for your devices, you can use the device information worksheet.

To see which TOS features are supported for your device, review the feature support table.

Prerequisites

TOS Aurora and the monitored devices must be synchronized with the correct date and time, either manually or automatically. We recommend that you also configure the devices to resolve DNS queries.

Before you begin, make sure that you have an F5 user that has a policy that has all the permissions you require for the TOS features you will be using. The user must have Terminal Access set to tmsh. If the user is not logged into TMSH directly, run the command tmsh before running the commands below.

Feature	Permissions
Visibility and Change Tracking	list auth partition list ltm node list ltm node recursive list ltm pool list ltm pool recursive list ltm snat-translation recursive list ltm snatpool recursive list ltm virtual recursive list net route-domain partition id strict vlans list net route list net self show running-config show running-config recursive show sys clock show sys version show running-config sys global-settings
Dynamic Topology	list auth partition list ltm node list ltm pool list net route-domain partition id strict vlans list net self show net route static dynamic field-fmt

Monitor a F5 BIG-IP Device

1. In TOS Aurora, go to Monitoring > Manage Devices.

2. Select the appropriate device type:

   

3. Configure the device settings:

   

   • Name for Display

   • Domain: Available only if you have configured your system for managing multi-domains and All Domains is currently selected. Select the domain to which to add the device. The Domain can only be entered when adding a device; to change the Domain, you must migrate the device.

   • Use TOP plugin: To get expanded support for a F5 BIG-IP LTM device, do not select this option. To get basic support of any F5 BIG-IP device, select this option to add the device with the TOP plugin.

   • Get revisions from: One of the following:

     • IP Address: Revisions are retrieved automatically
     • Offline File: (If available) Revisions are manually uploaded to TOS Aurora for Offline Analysis

   • This device has Partitions configured: If your device has administrative partitions, select this option so that you can import the partitions to the device monitoring after you complete the device monitoring wizard.

     • Enable sharing between partitions: Always select this option when partitions share objects from the Common partition, unless you are managing partitions on different MSSP domains. 

   • ST server: In a distributed deployment, select which TOS Aurora cluster monitors this device (not shown in image)

   • Enable Topology: Collects routing information for building the network Interactive Map.
     Topology options for Advanced management mode are configured when you import managed devices.

   • If the device uses dynamic addressing (such as DHCP) or dynamic routing protocols (such as OSPF), also select Collect dynamic topology information.

     Topology is supported only for devices not added with the TOP plugin.

4. Click Next.

5. Configure the TOS Aurora connection to the F5 BIG-IP device, according to the parameters required by the device:

   

   • Enter the authentication details needed to connect to the F5 BIG-IP device. The user must have permissions for the commands listed in the prerequisites above.

   • Connection configuration: Select whether to use SSH (preferred) or Telnet. To use default settings (recommended in most cases), leave the Port number blank.
     The device must be configured to use SSH version 2.
6. Click Next.

7. In Monitoring Settings, do one of the following:

   

   • To use timing settings from the Timing page, select Default.

   Otherwise, select Custom and configure the monitoring mode and settings.

   • Periodic Polling, select Custom settings and configure the Polling frequency: How often TOS Aurora fetches the configuration from each device.

     If you select 1 day, you can then select the exact time (hour and minute) for the daily polling.

8. Click Next. 

9. Save the configuration.

   The F5 BIG-IP device now appears in the Monitored Devices tree.

10. If the device has administrative partitions, wait for a revision to be received from the device (you can see the revision in Compare view). This may take several minutes. Then, add the partitions:

    1. In the Monitored Devices tree, select the device.
    2. Click Import partitions:

       

    3. Select all the partitions to be added.
    4. Click Save.

    After you import an F5 device with partitions, the parent device receives a single empty revision. You can safely ignore this revision.

How Do I Get Here?

In TOS Aurora, go to Monitoring > Manage Devices.