F5 BIGIP LOCAL TRAFFIC MANAGER – LTM
About This Course
F5 ADMINISTERING & CONFIGURING BIG-IP LOCAL TRAFFIC MANAGER (LTM)
Course Description:
This course introduces students to the BIG-IP system, its configuration objects, how it processes traffic, and how typical administrative and operational activities are performed. It also provides an in-depth understanding of advanced features and covers installation, configuration, and management of BIG-IP LTM systems.
The course includes lecture, hands-on labs, and interactive demonstrations with emphasis on real work applications
Prerequisites:
- OSI Model
- LAN vs. WAN
- Routing and switching
- Ethernet and ARP
- TCP/IP Concepts
- IP Addressing and Subnetting
- Network Address Translation
- SSL/TLS
Table of Contents
Module 1: Local Traffic Manager [LTM] Basics
- What is Load Balancer
- Local Traffic Management
- Packet Based Design Vs Full Proxy Architecture
- LTM Features & Benefits
Module 2: Setting up the BIG IP System
- What’s Inside a BIG IP SYSTEM
- BIG-IP Platforms
- What’s outside a Hardware BIG IP SYSTEM
- Initial BIG-IP setup
- Licensing, Provisioning and Network Configuration
Module 3: Traffic processing Building Blocks
- Local Traffic Objects – Node,Members,Pool and Virtual Server
- Virtual server Type and Default Settings
- Traffic Flow and Network address Translation
Module 4: Load Balancing Methods
- Static Vs Dynamic Load Balancing Methods
- Load Balancing Methods : Member Vs Node
- Least connections ,Fastest, static and Dynamic Ratio,
- Weighted Least connections, Observed ,Predictive etc.
- Priority Group Activation
- Fall Back Host
Module 5: Using NATs and SNATs
- Network Address Translation Overview
- Address Translation on the BIG-IP system
- Auto Map Vs SNAT Pool
- Secure/Source Address Translation
- Bi-Directional NAT
Module 6: Monitoring Application Health
- Overview of Monitors
- Types of Monitors
- Default Vs Custom Monitors
Module 7: Modifying Traffic Behavior with profiles
- Why Use profiles
- Default Vs. Custom Profiles
- Profile types –TCP, DNS,HTTP,One Connect, HTTP Compression etc.
- Profile Dependencies and co-existence
Module 8: Modifying Traffic Behavior with Persistence
- Understanding the need for persistence
- Persistence Concepts
- Persistence Types
- Source address affinity and cookie persistence
Module 9: Processing SSL traffic
- What are SSL/TLS and HTTPS
- SSL Certificates
- Certificate Signing Request (CSR)
- SSL Handshake
- SSL Offload and Termination
- SSL Profile Types – Client SSL Profile Vs Server SSL Profile
Module 10: iRules and Policies
- What is an iRule
- Basic iRule Elements
- iRule Examples
- Local Traffic Policy
Module 11: High Availability (HA)
- High Availability concepts
- BIG-IP Device Service Clustering (DSC)
- Traffic Group Concepts
- HA Deployment Modes
- Failover Options
- Connection Mirroring, Persistence Mirroring and SNAT Mirroring
- MAC Masquerading Concepts
- VLAN Failsafe
Module 12: Administration & Troubleshooting
- The BIG-IP system Log
- iHealth and Qkview
- Traffic Management Shell(TMSH) and Commands
- TCPDUMP
- BIG-IP configuration data
- UCS and SCF
- Loading & Saving system configuration
- Administrative partition
BONUS TOPICS:
- Routing Domain
- Dynamic Routing – Configuring OSPF and BGP
- Packet Filters and Policies
- iApps
Your Instructors
nettech
Manoj Verma (CCIE#43923) - Instructor & Consultant
Manoj Verma (CCIE#43923) is a highly experienced senior technical instructor and Network/ security consultant. He has been in the networking industry for more than 20 years, with a focus on networking and security for the past 15 years. He has assisted thousands of engineers in obtaining their various certifications starting from CCNA to CCIE, CCSA, CCSE, PCNSE, F5, etc. and learning the latest and cutting-edge technologies. He started his career as a system administrator and then switched to the networking and security domain. During the job, he realized that he is gifted with a passion for teaching and sharing his knowledge, as he used to teach his colleagues and friends. In his classroom training, he always starts with explaining the theory on a certain topic and then gives away a short note of key points and finally end with lab implementation. Now a day, driving down to the training institute to attend classroom training sessions is not feasible for everyone owing to the workflow, odd working hours and rotational shifts, especially for working professionals and those who are living in different cities and countries. He started getting multiple requests from lots of students to launch an online training module in the same way as he teaches in his classrooms. Keeping all this in mind, he designed this self-paced training module which replicates classroom training. He has brought his years of classroom teaching experience, and years of real-world enterprise and service provider experience in designing training modules. For a better understanding of technologies and in-depth knowledge, reading books or short notes is necessary and to witness the theoretical information in live, practical knowledge is required so he has included both which is very unique in the IT training sector.
F5 BIGIP DNS (GLOBAL TRAFFIC MANAGER)
F5 BIG-IP ADVANCED WAF (WEB APPLICATION FIREWALL)
