f5模拟器ltm基本配置

1、F5 NetworksLTM 基本配置一 安装 License新安装的BigIP 默认管理IP 是192.168.245 , 将工作站网卡IP 改为 : 192.168.x 网段：然后：用浏览器 登录InternetLicense Process Automated Run Setup utility Enter Registration KeyPCBIG-IPLicense the box Get License from F5 Select parametersF5 License Server License Process Manual PCBIG-IPF5 License Serve

2、r InternetCopy Product Dossier to PCPaste Product Dossier to F5Move PC to InternetDownload License to PCUpload & Install License fileRun Setup utilityManually License the boxPC Move PC back二 config UtilityInitial IP Address is 45三 Setup Utility IP AddressSetup Utility Network Web Configuration utili

3、tySetup / Configuration AccessTwo methodsWeb Interface https (remote)Command Linessh (remote)Serial Terminal四 Configuring Pools五 Configuring Load Balancing六 Ratio & Priority Group Activation七 Configuring Virtual ServersScroll down八 Configuring MonitorsSystem Supplied Monitors (Templates)Address Chec

4、ks (icmp)Service Checks (tcp)Content Checks (http)Interactive Checks (ftp)Availability:All templates can be customizedSome can be Assigned “as-is” Some can only be used as Templates for Custom MonitorsCreating Custom MonitorsAdditional Monitor ParametersReceive RuleIf content found, Node marked UpRe

5、verse Receive Rule If content found, Node marked DownTransparent If Path Available, Node marked UpUsed for monitoring LinksMonitor TimersFrequency (Interval)Timeout mended 3n + 1Assigning MonitorsDefault for all NodesSingle Node OptionsNode DefaultNode SpecificNoneDefault all Members of a PoolSingle

6、 Pool Member OptionsInherit from PoolMember SpecificNoneAssigning Monitors to NodesFor one NodeAssigning Monitors to PoolsFor one Member九 Profiles Virtual Server Default ProfilesAll Virtual Servers have at least one ProfileTCP: for virtual servers processing TCP dataUDP: for virtual servers processi

7、ng UDP dataFastL4: for virtual servers that use acceleration (PVA)Configuring ProfilesConfiguring ProfilesSpecify PropertiesThen Map to Virtual Server十 PersistenceSource Address PersistenceSource Address Persist LabCookie PersistenceInsert, Rewrite, Passive & HashCookie Persist LabConfiguring Source

8、 Address PersistPoint Virtual Server to ProfileConfigure ProfileConfiguring Cookie PersistenceThen set Cookie Persist profileCookie Persist requires http profile 十一 NAT Internet03One-to-one mappingBi-directional trafficDedicated IP addressConfiguration:01十二 SNATs Internet02Many-to-one mappingTraffic

9、 to SNAT Address is refusedCan share IP with Virtual ServerSNAT Configuration Internet02Who can be changedChanged to whatWhere packet arrived from十三 Configuring iRulesCreate RuleiRules Examplewhen RULE_INIT array set :active_clients when CLIENT_ACCEPTED set client_ip IP:remote_addr if info exists :active_clients($client_ip) if $:active_clients($client_ip) 5 reject return else incr :active_clients($client_ip) else set :active_clients($client_ip) 1 when CLIENT_CLOSE