F5负载均衡器配置指导书 内部公开
C O N F I G U R E D E F A U L T G A T E W A Y The default gateway route determines where the BIG-IP should send network traffic for which there is no more specific route. To set up a single default route, type one default gateway IP address. If you type more than one address, the BIG-IP creates a default gateway pool. The first address in the list is entered as a traditional default route. Each IP address in the list must be on the same IP network as the BIG-IP. NOTE: Only a default route, no default gateway pool, will be set up on unlicensed systems. Enter default route addresses separated by a space. If you do not want a default route, leave this option blank. IPs: 172.16.96.30
3.5.11 配置WEB访问
为了启用指定VLAN的WEB访问，必须在VLAN中指定域名。
C O N F I G U R E W E B U T I L I T Y I N T E R F A C E S You will now configure the BIG-IP webserver for use with the Configuration Utility. The webserver may listen on any or all of the VLANS below. For each VLAN, you will be asked for the name by which the server will be known on the network associated with that VLAN. It is valid to assign the same name to more than one entry. Use the arrow keys to navigate. Press
2004-12-28
内部资料，请勿扩散
第26页, 共62页
F5负载均衡器配置指导书 内部公开
口令为admin。
C O N F I G U R E W E B S E R V E R A C C E S S Password: The \ account, allowing webserver access, remote login (ssh), and local login. If this is a redundant BIG-IP system, and the \ the configsync user, the password MUST be the same on the two systems. 配置完admin用户帐号口令后，系统提示输入允许WEB接口连接的IP地址。本处采用系统默认允许所有IP地址。
S E T A D M I N I P A D D R E S S F O R H T T P D Administrative IP Address for httpd: *.*.*.* The Administrative IP Address is the IP address from which all remote administration, configuration and monitoring of your BIG-IP will be conducted using httpd. You may enter a '*' to specify a range of IP addresses - for instance, 192.168.2.* would allow all hosts on the 192.168.2 network. 随后系统提示输入国家（country）、省（state）、市（city）、公司（company）和部门（division），用于生成SSL证书。BIG-IP双机这部分配置信息要一致。
2004-12-28
内部资料，请勿扩散 第27页, 共62页
F5负载均衡器配置指导书 内部公开
E N T E R W E B S E R V E R C E R T I F I C A T I O N Country: CN State/Province: Guangdong City: Shenzhen Company: Huawei Company Division: Services and Software Enter the information to generate a self-signed SSL certificate. This will enable SSL on your webserver and should be sufficient for internal use. You will be asked for your country, state, city, company, and company division. The entered data is not validated, but keep in mind that it will be displayed with the certificate. It is valid to leave the 'Division' field blank. 最后保存WEB服务配置文件。
W R I T I N G W E B S E R V E R C O N F I G U R A T I O N F I L E S Generating key for f5-2.fzaip.net Added Administrative Host Address Added Self Address Added Failover Address Built Webserver Configuration File. Logging Directory Already Exists. Secure Logging Directory Already Exists. bigstart: restart httpd 警告：如果更改BIG-IP系统接口或主机名，必须重新配置BIG-IP Web服务以反映新的配置。只能通过Configuration工具添加用户或更改密码，否则某些配置信息（如httpd.conf和openssl.conf）将会丢失。
3.5.12 配置SSH访问
本例中允许SSH访问。由于SSH访问具有更高的安全性，建议对BIG-IP系统启用SSH访问，关闭Telnet访问。
2004-12-28
内部资料，请勿扩散 第28页, 共62页
F5负载均衡器配置指导书 内部公开
C O N F I G U R E S S H SSH access configuration utility SSH provides remote access and file transfer capabilities to the BIG-IP system from a remote administrative workstation. If you plan to use command-line utilities such as bigpipe and bigtop for configuration and monitoring, you need to set up an administrative workstation with the SSH client Allow SSH access to BIG-IP unit? Configure SSH access Do not allow SSH access 本例采用默认配置，允许所有IP地址通过SSH访问：
S E T A D M I N I P A D D R E S S F O R S S H Administrative IP Address for SSH: *.*.*.* The Administrative IP Address is the IP address from which all remote administration, configuration and monitoring of your BIG-IP will be conducted using SSH. You may enter a '*' to specify a range of IP addresses - for instance, 192.168.2.* would allow all hosts on the 192.168.2 network. 回车后，系统保存配置。
3.5.13 配置F5支持访问
本例不启用F5支持访问，回车继续。
2004-12-28
内部资料，请勿扩散 第29页, 共62页
F5负载均衡器配置指导书 内部公开
E N A B L E S U P P O R T A C C E S S If you would like F5 Networks to have access to your BIG-IP for support, you should supply and retain a support password here. If you do not want support, leave this field empty. Support Password [
F5采用BSD Unix时区设置，其中没有北京时区信息，可以就近选择如下时区：Asia/Chungking（重庆）、Asia/Harbin（哈尔滨）、Asia/Hong_Kong（香港）、Asia/Macao（澳门）、Asia/Shanghai（上海）和Asia/Urumqi（乌鲁木齐）。
S E T T I M E Z O N E Choose your timezone from the list below. Many timezones have multiple listings. Choose the one that most clearly represents your zone. Asia/Gaza Asia/Harbin Asia/Hong_Kong Asia/Irkutsk Asia/Istanbul Asia/Jakarta Asia/Jayapura Asia/Jerusalem Asia/Kabul Asia/Kamchatka Asia/Karachi Asia/Kashgar Asia/Katmandu Asia/Krasnoyarsk
2004-12-28
内部资料，请勿扩散 第30页, 共62页