Table of Contents Table of Contents Preface. Course Overview, : Additional Documentation and Resources Chapter 1: Setting Up the BIG-IP System. Introducing the BIG-IP System. Initially Setting Up the BIG-IP System... ‘Configuring the Management Interface... Activating the Software License nm Provisioning Modules and Resources ... Importing a Device Certificate... Specifying BIG-IP Platform Properties. Configuring the Network. Configuring Network Time Protocol (NTP) Servers... ‘Configuring Domain Name System (DNS) Settings Configuring High Availability Options, Creating an Archive of the BIG-IP System. F5 Support Resources and Tools... Chapter Resources. BIG-IP System Setup Labs. Lab 1.1 - Configure the Management Port Lab 1.1: Configure the management port via a Serial Console Lab 1.1B: Configure the management port via the LCD Panel... Lab 1.2 - Activate the BIG-IP System and Configure the Network Lab 1.3 — Test Administrative Access Lab 1.4 - Archive the Configuration Administering BIG-IP v11ii Table of Contents Chapter 2: Traffic Processing Building Blocks. Identifying BIG-AP Traffic Processing Objects. 24 mal ‘Network Packet Flow ... 26 Configuring Virtual Servers and Poo! 28 Load Balancing Concepss... DAL Viewing Statistics and Logs. soe D4 Chapter Resources ce 2.22 Lab 2.1 — Virtual Servers and Pools Lab. Chapter 3: Using NATs and SNAT: ‘Address Translation on the BIG-IP System... NAT Concepts. 32 Lab 3.1 — Using NAT on the BIG-IP System. 3-6 Solving Routing Issues with SNATs 38 Configuring SNAT Auto Map on a Virtual Server... ‘Monitoring for and Mitigating Port Exhaustion (Chapter Resources Lab 3.2-SNAT Lab Chapter 4: Using the Traffic Management Shell (tmsh) ‘Traffic Management Shel (tmsh). Introduction to tmsh... 2 ‘Accessing the Command Line and tmsh ‘Understanding the tmsh Hierarchical Structure. ‘Navigating the tmsh Hierarchy ‘Command Completion tmsh Command History Feature. ‘msh on DevCentral BIG-IP Configuration State and Files BIG-IP System Configuration State... : Loading and Saving the System Configuration... Shutting Down and Restarting the BIG-IP System... Saving and Replicating Configuration Data (UCS and SCF). ‘Viewing the BIG-IP Connection Table ‘Chapter Resources. Lab 4.1 — Configuring BIG-IP using TMSH. ii Administering BIG-IP v11Table of Contents Chapter 5: Monitoring Application Health Introducing Monitors... ‘Types of Monitors. Monitor Interval and Timeout Settings. $7 Configuring Monitor 59 Assigning Monitors to Resources. 513 ‘Managing Pool, Pool Member, and Node Status... Using the Network Map (Chapter Resources... Lab 5.1 Monitoring Application Health... Chapter 6: Modifying Traffic Behavior with Profiles. Introducing Profiles... Understanding Profile Types and Dependencies Configuring and Assigning Profiles. Introducing SSL Termination. Chapter Resources nun Lab 6.1 — Implementing SSL Offload Chapter 7: Modifying Traffic Behavior with Persistence... ‘Understanding the Need for Persistence... Introducing Source Address Affinity Persistence, Introducing Cookie Persistence. Lab 7.1 ~ Source Address Affinity Persistence... Lab 7.2 ~ Cookie Persistence. Lab 7.3 — Enable Cookie Encryption (Optional) ‘Managing Object State... Lab 7.4— Managing Object State Administering BIG-IP v11iv Table of Contents Chapter 8: Troubleshooting the BIG-IP System.. ‘Configuring Logging. Local Syslog Logging Legacy Remote Logging ... Introducing High Speed Logging (HSL). HSL Filters HSL Configuration Objects Configuring High Speed Logging 3 ‘Monitoring the BIG-IP System Remotely with SNMP... ‘Using tepdump on the BIG-IP System. Lab 8.1 — High Speed Logging.. Lab 8.2 ~ SNMP Trop... Lab 8.3 ~ Legacy Remote Syslog Leveraging the BIG-IP iHealth System. Working with FS Technical Support... Information Required when Opening a Support Case Providing Files to F5 Technical Suppor. Running End User Diagnostics. Chapter Resources... Lab 8.4 iHealth Diagnostics Chapter 9: Administering the BIG-IP System. Monitoring Network Health. Always-On Management (AOM)...01.ne0 Lab 9.1— AOM IP Address Lab... License Dates and Upgrade Considerations BIG-IP Disk and Software Management. Expanding Availability with Device Service Clustering... User Roles and Administrative Partitions, (CMP and vCMP iApps Overview. (Chapter Resources co Lab 9.2 — Administrative Partitions and Users iv Administering BIG-IP v11Table of Contents Chapter 10: Customizing Application Delivery with iRules ‘Rules Concepts... iRules Events. iRules Resources nn oo - Lab 10.1 HTTP to HTTPS Redirect via iRule.. Lab 10.2 —Pool Selection via iRule Chapter 11: Additional Training and Certification Getting Started Series Web-Based Training... FS Instructor Led Training Curriculum F5 Professional Certification Program... Administering BIG-IP v11Table of Contents Administering BIG-IP v11Preface PA Preface Course Overview Description This two-day course gives network administrators, network operators, and network engineers a functional understanding of the BIG-IP system as it is commonly deployed in an application delivery network. The course introduces students to the BIG-IP system, its configuration objects, how it processes traffic, and how typical administrative and operational activities are performed. The course includes lecture, hands-on labs, interactive demonstrations, and discussions. Topics covered in this course include: Getting started with the BIG-IP system Traffic processing with BIG-IP Local Traffic Manager (LTM) Using NATs and SNATs Using the Traffic Management Shell (tmsh) ‘Monitoring application health and managing object status ‘Modifying traffic behavior with profiles, including SSL offload (client SSL termination) Modifying traffic behavior with persistence, including source address affinity and cookie persistence ‘Troubleshooting the BIG-IP system, including logging (local, high-speed, and legacy remote logging), monitoring the BIG-IP system remotely with SNMP, and using tepdump ‘Always-On Management (AOM) License, disk, boot location, and software management User roles and administrative partitions CMP and vCMP concepts Customizing application delivery with Rules Audience ‘This course is intended for network administrators, operators, and engineers responsible for managing the normal day-to-day operation and administration of a BIG-IP application delivery network. This course presents the prerequisite knowledge for many other of F's BIG-IP instructor-led training courses. Preface PiPail Preface Prereq' les Audience Prerequisites Experience AER [7 Network operators [J Acministering 811° (LT course) [] TMOS administration [Z) Network acrministrators [Fs certnes sicsP aamnistrator [7] Network concepts and configuration [Z] Network engineers [Programming concepts Network architects [CT secunty concepts and terminology 7 Apotcation aevetopers [7] oss conriguration and resolution (1 securty administrators [7] Wee appieation tivery D1 seeunty arentects C1 communications service provider Course Objectives At the end of this course, the student should be able to: Describe the role of the BIG-IP system as a full proxy device in an application delivery network; Set up, startestart/stop, license, and provision the BIG-IP system out-of-the-box; Create a basic network configuration on the BIG-IP system including VLANs and self IPs; Use the Configuration utility and TMOS Shell (tmsh) to manage BIG-IP resources such as virtual servers, pools, poo! members, nodes, profiles, and monitors; Create, restore from, and manage BIG-IP archives; ‘© View resource status, availability, and statistical information and use this information to determine how the BIG-IP system is currently processing traffic; Use profiles to manipulate the way the BIG-IP system processes traffic through a virtual server; Perform basic troubleshooting and problem determination activities including using the iHealth diagnostic tool, researching known issues and solutions on AskFS, submitting a problem ticket to FS Technical; Support, and view traffic flow using tepdump; ‘Understand and manage user roles and partitions; Describe the role of iRules in affecting traffic behavior. Pai PrefacePreface Pail Additional Documentation and Resources Additional documentation and resources related to the F5 products and solutions described in this course can be found online at www.FS.com and at AskF5.com. Some relevant resource types and titles are shown in the table below, and throughout the course material: Resource Type Manual Manual Manual Manual Manual Manual Manual Release Notes Preface Title BIG-IP Local Traffic Manager: Implementations BIG-IP Local Traffic Manager: Monitors Reference BIG-IP Local Traffic Manager: Concepts BIG-IP TMOS: Concepts BIG-IP TMOS: Implementations BIG-IP Device Service Clustering: Administration Traffic Management Shell (tmsh) Reference Guide BIG-IP LTM and TMOS 11.6.0