licensing
22 Topics[Sharing My Journey: Automating F5 Licensing]
editors note: Moved to Codeshare - Automating F5 Licensing - without direct internet access | DevCentral ---Hello DevCentral Community! I'm excited to share a project I've been working on recently: **Automating F5 BIG-IP VE Licensing** without needing direct internet access! The project covers: - Retrieving a Dossier automatically via iControl REST API. - Interacting with F5 licensing servers through proxies or offline. - Re-activating licenses post-upgrade using custom scripts. - Full Python 3 support (moving away from BigSuds/Python 2 limitations). ✅ The idea is to help users who need to automate the licensing process, especially for secure or offline environments. I'll be sharing: - Scripts - Use cases - Lessons learned - Tips for real-world deployments If you're interested in automating your BIG-IP licensing process, feel free to follow along! Feedback, ideas, or collaboration is most welcome! 🚀 #F5 #BIGIP #Automation #DevCentral #Python3 #Licensing --- 🔗 Upcoming posts: Detailed code examples, error handling tips, and best practices. Thanks to the amazing DevCentral community for inspiring me to contribute and share! ........................................................................................................................................................................................................................................... import requests import json import urllib3 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) class BigIPLicenseManager: def __init__(self, host, username, password, registration_key): self.host = host self.username = username self.password = password self.registration_key = registration_key self.base_url = f"https://{self.host}/mgmt/tm/sys/license" self.headers = {'Content-Type': 'application/json'} def get_dossier(self): payload = { "command": "install", "registrationKey": self.registration_key } response = requests.post( self.base_url, auth=(self.username, self.password), headers=self.headers, json=payload, verify=False ) if response.status_code == 200: data = response.json() dossier = data.get('dossier') if dossier: print("[+] Dossier retrieved successfully.") return dossier else: print("[-] No dossier found in response.") return None else: print(f"[-] Failed to retrieve dossier: {response.text}") return None def install_license(self, license_text): payload = { "command": "install", "licenseText": license_text } response = requests.post( self.base_url, auth=(self.username, self.password), headers=self.headers, json=payload, verify=False ) if response.status_code == 200: print("[+] License installed successfully.") else: print(f"[-] Failed to install license: {response.text}") if __name__ == "__main__": # Define your BIG-IP credentials and registration key here bigip_host = "192.168.1.245" bigip_username = "admin" bigip_password = "admin" registration_key = "AAAAA-BBBBB-CCCCC-DDDDD-EEEEE" manager = BigIPLicenseManager( bigip_host, bigip_username, bigip_password, registration_key ) dossier = manager.get_dossier() if dossier: # Print the dossier to manually activate it via activate.f5.com print("\n[!] Submit the following dossier to F5 activation server:") print(dossier) # After getting the license text (offline or from a licensing server) license_text = input("\nPaste the license text here:\n") manager.install_license(license_text.strip())98Views0likes3CommentsIP Intelligence Service
Hello Team, Kindly i have a case which i took over managing our f5 appliances which was managed by one of vendors before and also i found that we have ASM and LTM module installed on our bigip. As i was checking the licensed i found that we have threat camping addons license and IP intelligence license as well and as i was going through the implementation steps of the IP intelligence i found out it will be implemented through iRule and as i were looking our big-ip we don't have any iRule configured for this so there is a high chance that we have paid for the addons license that we didn't use at all. So i need your support to solve and clarify the below concerns: 1-is there anyway to implement this without using iRules? if so please let me know? 2-How to check if we are using the threat camping license in a correct way and i want to know if we are facing same issue with this license also. 3-What are the list of other available addons license also in order to look at it and to know if we need any more license , Can you provide me a list of them? Sorry if my questions looks stupid since iam new to this role. Regards,Solved81Views0likes1CommentCan APM Licenses on Two Separate Boxes Be Combined?
Hello all, Looks like people that used another VPN solution before F5 APM a bit confused about licenses. Couple of times they asked below question to me. Apperantly, they don't seem to believe my answer and asked an article that proof/explain this is not possible. Is there any way to combine and increase the number of concurrent connection limit with using two APM licenses which registered to two standalone boxes when they become a member of a HA cluster? I mean, two standalone APM boxes have licenses that supports up to 500 (CCU) on each. When we gather them in a HA cluster (Active/Stand-By), in license perspective what will we have in total?Solved945Views0likes3CommentsLicense Revocation Limits?
I am planning to use some permanent lab licensed in a dynamic deployment environment. This means when the current session is finished I will tear down the infra and use revoke /sys license for the license key. So it can be used on next deployment. This plan heavily depends on the fact there is no limits to license revocation. Is anyone aware of restrictions on revocation and reuse of lab licenses?761Views1like1CommentWindows 10 Always On VPN...and licensing?
A request regarding using Windows 10 Always On VPN to connect via the F5 VPN has come up. One configuration I've seen is fairly basic, with a couple of vservers and pools for UDP ports 500 and 4500 for load balancing RRAS servers. I'm assuming this would require no licensing, unlike a VPN config using APM. Is that the case? As I'm just now looking at this, some of my information may be incorrect.Solved911Views0likes1CommentVersion Plus, Upgrades and Support Contract?
Hi, I'm trying to figure out the Version Plus licensing scheme, but I'm getting mixed information from F5 partners. Say I buy now a -V18 Version Plus P/N, but also assign a support contract to it. When version 19 is releases, will I be able to upgrade if I have active contract, or do I need to re-buy everything? Thanks586Views0likes4CommentsaWAF DOS Protection Licensing
Hi everybody! I have a question most probably related to aWAF VE licensing (I am not completely sure whether the root cause is related to licensing but looks like this is the most probable reason for my issue). I am trying to configure DoS protection for applications according to the guide below and I am not able to find "Application Security" tab in protection profile: https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/preventing-dos-attacks-on-applications.html#GUID-FEA647E5-53C1-45B5-A6A2-28D5F57D85D2 My TMOS version is 14.1.2.3, build 0.0.5, point release 3. Initially, the license was provided for VE v 15.0.0 but I downgraded SW to the version mentioned. I attached information related to activated modules, available licenses and protection profile output. My questions are: 1) is this a licensing issue and I need to request license update/renewal or so? 2) if this is not related to the licensing, what can be the problem? Thank you!Solved729Views0likes1Comment