Configuring BIG-IP LTM Local Traffic Manager v.17.5

This 3-day course gives network professionals a functional understanding of BIG-IP Local Traffic Manager, introducing students to both commonly used and advanced BIG-IP LTM features and functionality. Incorporating lecture, extensive hands-on labs, and classroom discussion, the course helps students build the well-rounded skill set needed to manage BIG-IP LTM systems as part of a flexible and high performance application delivery network.

Course objectives

At the end of this course, the student will be able to: 

  • Back up the BIG-IP system configuration for safekeeping
  • Configure virtual servers, pools, monitors, profiles, and persistence objects
  • Test and verify application delivery through the BIG-IP system using local traffic statistics
  • Configure priority group activation on a load balancing pool to allow servers to be activated only as needed to process traffic
  • Compare and contrast member-based and node-based dynamic load balancing methods
  • Configure connection limits to place a threshold on traffic volume to particular pool members and nodes
  • Differentiate between cookie, SSL, SIP, universal, and destination address affinity persistence, and describe use cases for each
  • Describe the three Match Across Services persistence options and use cases for each
  • Configure health monitors to appropriately monitor application delivery through a BIG-IP system
  • Configure different types of virtual services to support different types of traffic processing through a BIG-IP system
  • Configure different types of SNATs to support routing of traffic through a BIG-IP system
  • Configure VLAN tagging and trunking
  • Restrict administrative and application traffic through the BIG-IP system using packet filters, port lockdown, and virtual server settings
  • Configure SNMP alerts and traps in support of remote monitoring of the BIG-IP system
  • Use iRules and local traffic policies appropriately to customize application delivery through the BIG-IP system
  • Configure the BIG-IP to detect and mitigate some common attacks at the network and application layers using LTM features such as SYN check, eviction policies, iRules and Local Traffic Policies

Target Audience

This course is intended for system and network administrators responsible for installation, setup, configuration, and administration of the BIG-IP LTM system.

Prerequisites

The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course: 

  • OSI model encapsulation 
  • Routing and switching 
  • Ethernet and ARP 
  • TCP/IP concepts 
  • IP addressing and subnetting 
  • NAT and private IP addressing 
  • Default gateway 
  • Network firewalls 
  • LAN vs. WAN 

The following course-specific knowledge and experience is suggested before attending this course: 

  • Web application delivery 
  • HTTP, HTTPS, FTP and SSH protocols 
  • TLS/SSL

Chapter 1: Setting Up the BIG-IP System

  • Introducing the BIG-IP System
  • Initially Setting Up the BIG-IP System
  • Archiving the BIG-IP Configuration
  • Leveraging F5 Support Resources and Tools

Chapter 2: Reviewing Local Traffic Configuration

  • Reviewing Nodes, Pools, and Virtual Servers
  • Reviewing Address Translation
  • Reviewing Routing Assumptions
  • Reviewing Application Health Monitoring
  • Reviewing Traffic Behavior Modification with Profiles
  • Reviewing the TMOS Shell (TMSH)
  • Reviewing Managing BIG-IP Configuration Data

Chapter 3: Load Balancing Traffic with LTM

  • Exploring Load Balancing Options
  • Using Priority Group Activation and Fallback Host
  • Comparing Member and Node Load Balancing

Chapter 4: Modifying Traffic Behavior with Persistence

  • Reviewing Persistence
  • Introducing Cookie Persistence
  • Specifying Default and Fallback Persistence
  • Introducing SSL Persistence
  • Introducing SIP Persistence
  • Introducing Universal Persistence
  • Introducing Destination Address Affinity Persistence
  • Using Match Across Options for Persistence

Chapter 5: Monitoring Application Health

  • Differentiating Monitor Types
  • Customizing the HTTP Monitor
  • Monitoring an Alias Address and Port
  • Monitoring a Path vs. Monitoring a Device
  • Managing Multiple Monitors
  • Using Application Check Monitors
  • Using Manual Resume and Advanced Monitor Timer Settings

Chapter 6: Processing Traffic with Virtual Servers

  • Understanding the Need for Other Virtual Server Types
  • Forwarding Traffic with a Virtual Server
  • Understanding Virtual Server Order of Precedence
  • Path Load Balancing

Chapter 7: Processing Traffic with SNATs

  • Overview of SNATs
  • Using SNAT Pools
  • SNATs as Listeners
  • SNAT Specificity
  • VIP Bounceback
  • Additional SNAT Options
  • Network Packet Processing Review

Chapter 8: Modifying Traffic Behavior with Profiles

  • Profiles Overview
  • TCP Express Optimization
  • TCP Profiles Overview
  • HTTP Profile Options
  • HTTP/2 Profile Options
  • OneConnect
  • Offloading HTTP Compression to BIG-IP
  • Web Acceleration Profile and HTTP Caching
  • Stream Profiles
  • F5 Acceleration Technologies

Chapter 9: Selected Topics

  • VLAN, VLAN Tagging, and Trunking
  • Restricting Network Access
  • SNMP Features
  • Segmenting Network Traffic with Route Domains

Chapter 10: Customizing Application Delivery with iRules

  • Getting Started with iRules
  • Understanding When iRules are Triggered
  • Deploying iRules
  • Constructing an iRule
  • Testing and Debugging iRules
  • Exploring iRules Documentation

Chapter 11: Customizing Application Delivery with Local Traffic Policies

  • Getting Started with Local Traffic Policies
  • Configuring and Managing Policy Rules

Chapter 12: Securing Application Delivery with LTM

  • Understanding Today’s Threat Landscape
  • Integrating LTM Into Your Security Strategy
  • Defending Your Environment Against SYN Flood Attacks
  • Defending Your Environment Against Other Volumetric Attacks
  • Addressing Application Vulnerabilities with iRules and Local Traffic Policies
  • Detecting and Mitigating Other Common HTTP Threats

Chapter 13: Final Lab Project

  • About the Final Lab Project

Chapter 14: Additional Training and Certification

  • Getting Started Series Web-Based Training
  • F5 Instructor Led Training Curriculum
  • F5 Professional Certification Program

Course Changes since v15

Updates for the v16.1 release include changes to TCP Profiles and Securing Application Delivery chapters. All remaining content was reviewed and updated for relevance to the BIG-IP v16.1 release.

Exam 301a - BIG-IP LTM Specialist: Architect, Set-up, Deploy

Prerequisites: Valid F5-CA, BIG-IP Certification

This is the first of two exams in the F5 Certified Technology Specialist, BIG-IP LTM certification and serves as a prerequisite to exam 301b. Candidates who pass this exam possess an understanding of underlying principles – from SSL-based VPN implementation to symmetric and asymmetric acceleration – and can draw on that insight to integrate BIG-IP LTM into existing networks as well as new implementations. Receiving the F5-CTS, BIG-IP LTM certification is a prerequisite for both the Cloud and Security Solutions Expert certification tracks.

View Exam 301a study materials on AskF5

Exam 301b - BIG-IP LTM Specialist: Maintain and Troubleshoot

Prerequisites: Valid F5-CA, BIG-IP Certification, valid passing score on Exam 301a

This is the second exam candidates are required to pass in order to receive the F5 Certified Technology Specialist, BIGIP LTM certification. Passing this exam validates their ability to design, implement, maintain, and troubleshoot advanced F5 product features to enhance the effectiveness of an Application Delivery Network. In addition, it shows that a candidate understands underlying principles – from SSL-based VPN implementation to symmetric and asymmetric acceleration – and can draw on that insight to integrate BIG-IP LTM into existing networks as well as new implementations. Receiving the F5-CTS, BIG-IP LTM certification is a prerequisite for both the Cloud and Security Solutions Expert certification tracks.

View Exam 301b study materials on AskF5

Exam vouchers can be purchased at an additional charge. Vouchers can be used at www.vue.com/f5 to schedule exams at a time and location convenient to the attendee.

Practical information

Duration: 3 days
Price: 34 000 NOK
Language: English
Format: Open course or company-specific training, available as classroom or virtual delivery

FAQ

Hvordan gjennomføres kurset?
Kurset kan gjennomføres som et åpent kurs eller som bedriftsinternt kurs. Du kan delta enten fysisk i klasserom eller virtuelt.

Hvem passer kurset for?
Kurset passer for nettverksadministratorer, NetOps-ressurser, DevOps-ressurser og tekniske fagpersoner som jobber med applikasjonsleveranse, lastbalansering og F5 BIG-IP-miljøer.

Hva lærer jeg i løpet av kurset?
Du lærer hvordan du konfigurerer og administrerer BIG-IP Local Traffic Manager, inkludert intelligent lastbalansering, persistence, health monitoring, trafikkoptimalisering, SNAT, virtuelle servere, iRules og sikkerhet for applikasjonsleveranse.

Er kurset praktisk rettet?
Ja. Kurset inkluderer omfattende hands-on lab-øvelser hvor deltakerne jobber med realistiske F5 BIG-IP LTM-scenarioer.

Hvilke temaer dekkes i kurset?
Kurset dekker blant annet load balancing, persistence-profiler, health monitoring, virtual servers, SNAT, trafikkoptimalisering, VLAN, trunking, iRules, local traffic policies og grunnleggende applikasjonssikkerhet.

Hvilke forkunnskaper anbefales?
Det anbefales at du har fullført et grunnleggende BIG-IP-administrasjonskurs eller har tilsvarende erfaring. Generell nettverksforståelse, inkludert TCP/IP, routing, switching, subnetting, NAT og grunnleggende HTTP/TLS-kunnskap anbefales.

Hva gjør dette kurset unikt?
Kurset går betydelig dypere enn grunnleggende BIG-IP-administrasjon og gir praktisk erfaring med avansert trafikkstyring, optimalisering og sikker applikasjonsleveranse.

Andre relevante kurs

15. september
1 dager
Classroom Virtual
16. september
3 dager
Classroom Virtual