Manage USB Devices Using Fleet

Objective

This guide provides instructions on how to manage USB devices for your sites using fleet configuration in the F5® Distributed Cloud Console (Console). See Fleet for conceptual details of the fleet.

You can enable or disable access to USB devices for your sites via the fleet configuration. By default, all USB devices are denied in the fleet, and you can allow all or attach USB device policies to manage specific devices. You can also create a USB device policy from within the fleet configuration.

Using the instructions in this guide, you can update fleet configuration to enable or disable access to all or specific USB devices for your sites that are part of the fleet.


Prerequisites


Configuration

The following video shows creating a fleet with the required network configuration and applying to your gateways:

Apply USB Device Policy Using Fleet

Log into Console and perform the following:

Step 1: Navigate to fleets and start editing fleet configuration.
  • In Console, click Cloud and Edge Sites.

Figure: Console Homepage
Figure: Console Homepage

  • Click Manage > Site Management > Fleets.

Figure: Fleets
Figure: Fleets

  • Click ... > Manage Configuration for the fleet you want to manage the USB devices.

Figure: Manage Configuration
Figure: Manage Configuration

  • Click Edit Configuration.
Step 2: Start configuring the USB device policy.
  • In the Advanced Configuration section, enable the Show Advanced Fields option.

Figure: Enable Show Advanced Fields
Figure: Enable Show Advanced Fields

  • Select an option from the USB Device Policy menu and perform configuration per the following guidelines:

    • Select Deny All USB Devices to deny all USB devices for your sites. This option is selected by default.

    • Select Allow All USB Devices to allow all USB devices for your sites.

    • Select USB Device Policy to apply an existing USB device policy or create a new one.

This example creates a new USB device policy from within fleet configuration and applies it to a fleet.

Figure: Fleet USB Policy
Figure: Fleet USB Policy

  • Click USB Device Policy.

  • From the USB Device Policy menu, click Create new usb policy. This opens the USB device policy creation form.

Step 3: Create a USB device policy.
  • In the Metadata section, enter a name for the USB device policy.

  • Optionally, add a description and labels.

  • In the Allowed USB devices section, click Configure.

  • Click Add Item.

  • Configure the fields per the following guidelines:

    • In the iSerialNumber field, enter an index for the serial number for your device.

    • In the Vendor ID field, enter the device vendor identifier.

    • In the Product ID field, enter the device product identifier assigned by the manufacturer.

    • In the Class field, enter the device class.

    • In the Subclass field, enter the device subclass.

    • In the Protocol field, enter the protocol for this device.

    • After you finish, click Add Item.

  • Click Apply. You can add more than one device using the Add Item option.

  • Click Continue.

  • Click Save and Exit.

  • To obtain the USB device properties using the site dashboard:

    • Navigate to Sites > Site List.

    • Click on your site to open its dashboard.

    • Click on the Tools tab.

    • Select Show USB devices option from the Select tool field.

    • Select a node from the list under the Node name field.

Step 4: Complete updating the fleet configuration.
  • In the Enable Default Fleet Config Download section, enable the Show Advanced Fields option.

  • Click on the Enable Default Fleet Config Download checkbox.

  • Click Save and Exit to apply the USB device policy to the sites that are part of the fleet.


Concepts


API References