Configuring BIG-IP Local Traffic Manager v11 Table of Contents Preface: F5 Product Suite Overviews... P-1 BIG-IP Product Family... P-1 ARX Series... P-3 F5 Hardware... P-5 Virtual Editions... P-8 F5 Resources and Tools... P-11 Module 1: Installation and Initial Access... 1-1 BIG-IP Local Traffic Manager Overview... 1-1 Licensing, Provisioning & the Setup Utility... 1-2 Installation and Setup Labs.. 1-10 Lab Changing Initial IP Address... 1-10 Lab Licensing the System and Provisioning... 1-12 Lab User Accounts and Network Config... 1-15 Lab Configuration Utility... 1-18 Lab Configuration Backup... 1-20 BIG-IP Hardware Platforms... 1-21 Switch Card Control Processor (SCCP) and Always On Management (AOM)... 1-23 Ask F5: F5 Support Resources and Tools... 1-24 Lab SCCP / AOM IP Address Configuration... 1-26 Lab AskF5 Resource... 1-27 Module 2: Load Balancing... 2-1 Virtual Servers and Pools... 2-1 Configuring Virtual Servers and Pools... 2-3 Lab Virtual Servers and Pools... 2-6 Network Map... 2-11 Load Balancing Modes... 2-13 Configuring Load Balancing... 2-17 Labs Load Balancing... 2-18 Module 3: Monitors... 3-1 Monitor Concepts... 3-1 Monitor Configuration... 3-3 Monitor Assignment... 3-5 Monitor Status Reporting... 3-8
Lab Monitors for Nodes... 3-10 Labs Monitors for Pools and Members... 3-12 BIG-IP Dashboard..3-16 Module 4: Profiles... 4-1 Profiles... 4-1 Profile Types and Dependencies... 4-2 Common Protocol Profile Types and Settings... 4-5 Configuring and Using Profiles... 4-7 Module 5: Persistence... 5-1 Persistence Concepts... 5-1 Source Address Persistence... 5-2 Lab Source Address Persistence... 5-4 Cookie Persistence... 5-7 Lab Cookie Persistence... 5-12 Object Management... 5-15 Lab Disabled Members... 5-17 Module 6 Processing SSL Traffic... 6-1 SSL Termination/Initiation... 6-1 SSL Profile Configuration... 6-4 Lab Client SSL... 6-6 Lab Client and Server SSL (Optional)... 6-8 Module 7: Lab Project #1... 7-1 Configuration Project and Review... 7-1 Lab Archive and Restoration 7-1 Lab Configuration Project... 7-2 Review Questions Modules 1 to 6... 7-4 Module 8: NATs and SNATs... 8-1 Network Address Translation (NAT)... 8-1 Lab Configuring a NAT... 8-3 Secure Network Address Translation (SNAT)... 8-4 Labs SNAT Labs... 8-6 Module 9: irules... 9-1 irules Concepts... 9-1 irules Events... 9-3 Configuring irules... 9-5
Labs irules Lab #1... 9-6 Labs irules Lab #2... 9-9 Module 10: High Availability... 10-1 Sync-Failover Group Concepts... 10-1 Synchronization State and Failover... 10-2 Lab Device Group Setup... 10-4 Device Group Communication... 10-7 Upgrading the BIG-IP System... 10-7 Fail-over Triggers & Detection... 10-10 Lab VLAN Failsafe... 10-14 Stateful Failover... 10-16 Labs Connection & Persistence Mirroring... 10-17 Module 11: High Availability Part 2... 11-1 Traffic Group Concepts... 11-1 Lab Traffic Groups... 11-3 N+1 Concepts.11-4 Lab N + 1 High Availability... 11-6 Module 12: tmsh Command Line Configuration... 12-1 Command Line using tmsh... 12-1 BIG-IP Configuration files... 12-10 Labs tmsh Configuration... 12-13 Optional Labs SNATs and Monitors... 12-16 Module 13: BIG-IP Administration... 13-1 BIG-IP ihealth... 13-1 Documentation for Support... 13-6 tcpdump... 13-8 The bigtop and bigstart Commands... 13-13 Connection Management 13-18 VLAN Network Configuration... 13-20 Restricting Network Access... 13-24 Logging and Notification... 13-28 SNMP Features... 13-30 Lab Remote Syslog... 13-31 Lab SNMP Trap... 13-32 Lab AskF5 Resource... 13-33
Lab ihealth and qkview... 13-34 Optional Lab Packet Filters... 13-35 Optional Lab Command Line Tools... 13-38 Module 14: BIG-IP Administration part 2... 14-1 Administration Domains... 14-1 Lab Admin Partitions and Users... 14-6 Clustered Multi-Processing (CMP)... 14-9 Virtualized CMP (vcmp)... 14-10 Sync-Only Device Groups.14-15 Lab Sync-Only Group...14-16 Module 15: Profiles part 2... 15-1 TCP Express Optimization... 15-1 HTTP Profile Options... 15-7 OneConnect... 15-9 HTTP Compression... 15-11 Lab HTTP Compression... 15-12 HTTP Caching... 15-14 Streaming profile... 15-14 F5 Acceleration Technologies... 15-17 Optional Labs Caching, Streaming & Authentication... 15-18 Module 16: iapps... 16-1 iapps Concepts... 16-1 iapps Application Services... 16-2 iappstemplates... 16-3 Analytics... 16-5 iapps Ecosystem on DevCentral 16-9 Lab Deploying an Application Service... 16-10 Lab Modifying an Application Service... 16-14 Lab Analytics... 16-19 Module 17: Virtual Servers part 2... 17-1 Virtual Servers Concepts... 17-1 Lab Forwarding Virtual Servers... 17-3 Path Load Balancing... 17-4 Auto Last Hop... 17-6 Firewall Sandwiches An Example... 17-6
Module 18: SNATs part 2... 18-1 SNATs Re-visited... 18-1 SNAT Automap... 18-3 SNAT Pools... 18-6 SNAT as Listeners... 18-7 SNAT Configuration... 18-8 Labs SNAT Lab... 18-10 VIP Bounceback... 18-13 Lab VIP Bounceback... 18-14 Network Packet Processing... 18-17 Module 19: Monitors part 2... 19-1 Monitors Re-visited... 19-1 Configuring Monitors... 19-9 Other Monitor Options... 19-11 Passive or Inband Monitors... 19-12 Lab Monitors... 19-13 Module 20: Persistence part 2... 20-1 Persistence Re-visited... 20-1 Persistence Options... 20-2 Other types of Persistence... 20-3 Lab Universal Persistence... 20-6 Module 21: irules part 2... 21-1 irules Re-visited... 21-1 irule Events... 21-3 irule Commands... 21-7 Context... 21-11 String Manipulation Commands... 21-11 Other irule Concerns... 21-13 Module 22: Lab Project 2... 22-1 Configuration Project Options... 22-1 Labs irules Labs 1 to 6... 22-2 Lab Path Load Balancing Project... 22-9
Appendix A - Installation... A-1 Pre-Installation Information... A-1 Installation Worksheet... A-4 Installing BIG-IP LTM software... A-5 Optional Lab Provisioning... A-10 Optional Lab Reload Steps..A-11 Appendix B New Features... B-1 New Feature summary for Version 11.0.0... B-1 New Feature summary for Version 10.2.0... B-3 New Feature summary for Version 10.1.0... B-5 New Feature summary for Version 10.0.0... B-6 Appendix C Additional Topics... C-1 Setup Utility labs for v10... C-1 bigpipe command line labs for v9... C-4 Redundant Pair labs for v10... C-9 Appendix D HTTP Basics... D-1 Web Page Components..D-1 Requests and Responses... D-3 HTTP Headers... D-6 Using Fiddler..D-8 Printout of Powerpoints...