F5 Configuring BIG-IP LTM: Local Traffic Manager

Home
Courses
F5
F5 Configuring BIG-IP LTM: Local Traffic Manager

This course gives network professionals a functional understanding of BIG-IP Local Traffic Manager, introducing students to both commonly used and advanced BIG-IP LTM features and functionality. Incorporating lecture, extensive hands-on labs, and classroom discussion, the course helps students build the well-rounded skill set needed to manage BIG-IP LTM systems as part of a flexible and high performance application delivery network.

Course Topics

BIG-IP initial setup (licensing, provisioning, and network configuration)
A review of BIG-IP local traffic configuration objects
Using dynamic load balancing methods
Modifying traffic behavior with persistence (including SSL, SIP, universal, and destination address affinity persistence)
Monitoring application health with Layer 3, Layer 4, and Layer 7 monitors (including transparent, scripted, and external monitors)
Processing traffic with virtual servers (including network, forwarding, and reject virtual servers)
Processing traffic with SNATs (including SNAT pools and SNATs as listeners)
Modifying traffic behavior with profiles (including TCP profiles, advanced HTTP profile options, caching, compression, and OneConnect profiles)
Advanced BIG-IP LTM configuration options (including VLAN tagging and trunking, SNMP features, packet filters, and route domains)
Deploying application services with iApps
Customizing application delivery with iRules and local traffic policies
Securing application delivery using BIG-IP LTM

Course Outline

Chapter 1: Setting Up the BIG-IP System

Introducing the BIG-IP System
Initially Setting Up the BIG-IP System
Archiving the BIG-IP Configuration
Leveraging F5 Support Resources and Tools

Chapter 2: Reviewing Local Traffic Configuration

Reviewing Nodes, Pools, and Virtual Servers
Reviewing Address Translation
Reviewing Routing Assumptions
Reviewing Application Health Monitoring
Reviewing Traffic Behavior Modification with Profiles
Reviewing the TMOS Shell (TMSH)
Reviewing Managing BIG-IP Configuration Data

Chapter 3: Load Balancing Traffic with LTM

Exploring Load Balancing Options
Using Priority Group Activation and Fallback Host
Comparing Member and Node Load Balancing

Chapter 4: Modifying Traffic Behavior with Persistence

Reviewing Persistence
Introducing Cookie Persistence
Introducing SSL Persistence
Introducing SIP Persistence
Introducing Universal Persistence
Introducing Destination Address Affinity Persistence
Using Match Across Options for Persistence

Chapter 5: Monitoring Application Health

Differentiating Monitor Types
Customizing the HTTP Monitor
Monitoring an Alias Address and Port
Monitoring a Path vs. Monitoring a Device
Managing Multiple Monitors
Using Application Check Monitors
Using Manual Resume and Advanced Monitor Timer Settings

Chapter 6: Processing Traffic with Virtual Servers

Understanding the Need for Other Virtual Server Types
Forwarding Traffic with a Virtual Server
Understanding Virtual Server Order of Precedence
Path Load Balancing

Chapter 7: Processing Traffic with SNATs

Chapter 8: Modifying Traffic Behavior with Profiles

Chapter 9: Selected Topics

VLAN, VLAN Tagging, and Trunking
Restricting Network Access
SNMP Features
Segmenting Network Traffic with Route Domains

Chapter 10: Deploying Application Services with iApps

Simplifying Application Deployment with iApps
Using iApps Templates
Deploying an Application Service
Leveraging the iApps Ecosystem on DevCentral

Chapter 11: Customizing Application Delivery with iRules and Local Traffic Policies

Getting Started with iRules
Triggering an iRule
Introducing iRule Constructs
Leveraging the DevCentral Ecosystem
Deploying and Testing iRules
Getting Started with Local Traffic Policies
What Can You Do with a Local Traffic Policy?
How Does a Local Traffic Policy Work?
Understanding Local Traffic Policy Workflow
Introducing the Elements of a Local Traffic Policy
Specifying the Matching Strategy
What Are Rules?
Understanding Requires and Controls
Configuring and Managing Policy Rules
Configuring a New Rule
Including Tcl in Certain Rule Settings

Chapter 12: Securing Application Delivery with LTM

Understanding Today’s Threat Landscape
Integrating LTM Into Your Security Strategy
Defending Your Environment Against SYN Flood Attacks
Defending Your Environment Against Other Volumetric Attacks
Addressing Application Vulnerabilities with iRules and Local Traffic Policies

Chapter 13: Final Lab Project

About the Final Lab Project
Possible Solution to Lab 13.1

What you will learn

Course Objectives

Back up the BIG-IP system configuration for safekeeping
Configure virtual servers, pools, monitors, profiles, and persistence objects
Test and verify application delivery through the BIG-IP system using local traffic statistics
Configure priority group activation on a load balancing pool to allow servers to be activated only as needed to process traffic
Compare and contrast member-based and node-based dynamic load balancing methods
Configure connection limits to place a threshold on traffic volume to particular pool members and nodes
Differentiate between cookie, SSL, SIP, universal, and destination address affinity persistence, and describe use cases for each
Describe the three Match Across Services persistence options and use cases for each
Configure health monitors to appropriately monitor application delivery through a BIG-IP system
Configure different types of virtual services to support different types of traffic processing through a BIG-IP system
Configure different types of SNATs to support routing of traffic through a BIG-IP system
Configure VLAN tagging and trunking
Restrict administrative and application traffic through the BIG-IP system using packet filters, port lockdown, and virtual server settings
Configure SNMP alerts and traps in support of remote monitoring of the BIG-IP system
Use an F5-supplied iApp template to deploy and manage a website application service
Use iRules and local traffic policies appropriately to customize application delivery through the BIG-IP system
Configure the BIG-IP to detect and mitigate some common attacks at the network and application layers using LTM features such as SYN check, eviction policies, iRules and Local Traffic Policies

Audience profile

This course is intended for system and network administrators responsible for installation, setup, configuration, and administration of the BIG-IP LTM system.