Manual Chapter :
Common Elements for Policies Tasks
Applies To:
Show Versions
BIG-IP Analytics
- 15.0.1, 15.0.0
BIG-IP LTM
- 15.0.1, 15.0.0
BIG-IP AFM
- 15.0.1, 15.0.0
BIG-IP PEM
- 15.0.1, 15.0.0
BIG-IP DNS
- 15.0.1, 15.0.0
BIG-IP ASM
- 15.0.1, 15.0.0
Common Elements for Policies Tasks
- On the Main tab, click.The Policy List Page screen opens.
- On the Main tab, click.The Strategy List screen opens.
- ClickAdd.The New Rule screen opens.
- ClickCreate.The New Policy screen opens.
- ClickClone.ThePolicy Namefield becomes cleared.
- ClickCreate Policy.The Draft Policy screen opens.
- ClickSave Draft.The Policy List Page screen opens.
- ClickCreate.The New Strategy screen opens.
- ClickDelete.The Confirm delete? popup screen opens.
- ClickDelete.
- ClickCreate Policy.The policy is created and the Rules area appears.
- ClickSave.
- ClickFinished.
- ClickUpdate Rule.
- ClickUpdate.
- ClickPublish.The draft policy is removed from the Draft Policies list, and the modified published policy appears in the Published Policies list.
- Click the name of a policy.
- Click the name of a draft policy.
- Click the name of the draft policy.
- Click the name of a published policy.
- ClickCreate Draft.A draft policy of the same name appears in the Draft Policies list.When you publish a policy, the draft policy is removed from the Draft Policies list.
- Do one of the following steps.StepDescriptionClickCreate Draft. A draft policy of the same name appears in the Draft Policies list.If a draft policy of the same name as the published policy does not exist, you can clickCreate Draftto create a draft version with the same name as the published policy.When you publish a policy, the draft policy is removed from the Draft Policies list.ClickClone, type a unique name for the policy in thePolicy Namefield, and clickCreate Policy. A draft policy is created.You can clickCloneto create a different draft policy that uses the same settings as the published policy.
- Modify the applicable settings.
- Select the check box of the draft policy to publish.
- Click and drag the rule or rules that you want to reorder into the preferred sequence.
- Select the check box for the draft policy that you modified.
- Click the name of a policy.In this example, clickCacheExpire.
- From the Draft Policies list of policies, select theCacheExpirecheck box.
- In theNamefield, type a unique name for the policy.
- In thePolicy Namefield, type a unique name for the policy.
- In thePolicy Namefield, type a unique name for the policy.For this example, typeCacheExpire.
- In theDescriptionfield, type a description for the policy.
- From theStrategylist, select a matching strategy.
- From theStrategylist, selectFirstfor the matching strategy.
- For theRequiressetting, select a protocol entry from theAvailablelist, and move the entry to theSelectedlist using the Move button.
- For theRequiressetting, selecthttpfrom theAvailablelist, and move the entry to theSelectedlist using the Move button.
- For theRequiressetting, perform the following steps, as necessary.
- Select a protocol entry from theAvailablelist, and move the entry to theSelectedlist using the Move button.
- Select a protocol entry from theSelectedlist, and move the entry to theAvailablelist using the Move button.
- For theControlssetting, select a functional area or module from theAvailablelist, and move the entry to theSelectedlist using the Move button.
- For theControlssetting, selectaccelerationfrom theAvailablelist, and move the entry to theSelectedlist using the Move button.
- For theControlssetting, perform the following steps, as necessary.
- Select a functional area or module in theAvailablelist, and move the entry to theSelectedlist using the Move button.
- Select a functional area or module from theSelectedlist, and move the entry to theAvailablelist using the Move button.
- Using theConditionssetting, configure the applicable options.
- From theOperandlist, select an operand.
- From theEventlist, select an event.
- From theSelectorlist, select the applicable setting.
- Select theNegatecheck box to reverse the policy conditions.
- From theConditionlist, select a condition.
- Select thecase sensitivecheck box to apply case sensitivity to the condition.
- In theValuesfield, type the text that applies to the condition and clickAdd.The condition text value appears in theValueslist box.
- To the left, near theMissingsetting, clickAdd.The configured condition appears in theConditionslist.
- Using theConditionssettings, select a listed condition, and modify the applicable options.
- From theConditionslist, select a condition, and clickEdit Condition.
- From theOperandlist, select an operand.
- From theEventlist, select an event.
- From theSelectorlist, select the applicable setting.
- Select or clear theNegatecheck box to apply or remove negating.
- From theConditionlist, select a condition.
- Select or clear thecase sensitivecheck box to apply or remove case sensitivity to the condition.
- In theValuefield, type the text that applies to the condition, and clickAdd.The condition text value appears in theValueslist box.
- Below, and to the left of theValueslist box, clickAdd.The modified condition appears in theConditionslist.
- Using the Rules controls, configure a Content-Type rule.
- In the Rules area, clickCreate.
- In theNamefield, typeContent-Typefor the rule.
- In theDescriptionfield, type a description for the rule.
- In the Match all of the following conditions area, click+.A list of types of conditions and associated controls appears.
- From the types of conditions list, selectHTTP Header.
- In theNamedfield, typeexpire_content_timeout.
- From the matching option list, selectbegins with.
- In theany offield, type$Expires_cinameand clickAdd.
- In the Do the following when the traffic is matched area, click+.A list of types of actions and associated controls appears.
- From the types of actions list, selectSet variable.
- In thenamedfield, typeexpire_content_timeout.
- In theequal tofield, typeclass match -value [string tolower [HTTP::header Content-Type]]and clickDone.
- From therequestlist, selectresponse.
- ClickSave.The Rules list appears with the new rule.
- Using the Rules controls, configure a Cache-Control rule.
- In the Rules area, clickCreate.
- In theNamefield, typeContent-Typefor the rule.
- In theDescriptionfield, type a description for the rule.
- In the Match all of the following conditions area, click+.A list of types of conditions and associated controls appears.
- From the types of conditions list, selectCache-Control.
- In theNamedfield, typeexpire_content_timeout.
- From the matching option list, selectis.
- In theany offield, typemax-ageand clickAdd.
- In the Do the following when the traffic is matched area, click+.A list of types of actions and associated controls appears.
- From the types of actions list, selectReplace.Thehttp headerlist appears.
- In thenamedfield, typeCache-Control.
- In thewith valuefield, typemax-age=$expire_content_timeout, publicand clickDone.
- From therequestlist, selectresponse.
- ClickSave.The Rules list appears with the new rule.
- Using theActionssetting, configure the applicable options.
- From theTargetlist, select a target.
- From theEventlist, select an event.
- From theActionlist, select an action.
- From theParameterslist, select a type of parameter to apply.
- In theParametersfield, type the text that applies to the type of parameter and clickAdd.The configured parameter appears in theParameterslist box.
- At the lower left, clickAdd.The configured settings for the action appear in theActionslist.
- Using theActionssettings, select a listed action, and modify the applicable options.
- From theActionslist, select an action and clickEdit.
- From theTargetlist, select a target.
- From theEventlist, select an event.
- From theActionlist, select an action.
- From theParameterslist, select a type of parameter to apply.
- In theParametersfield, type the text that applies to the type of parameter and clickAdd.The modified parameter appears in theParameterslist box.
- Below, and to the left of theParameterslist box, clickAdd.The modified settings for the action appear in theActionslist.
- Select the check box for each policy that you want to delete.
- In the Rules area, clickCreate.
- In theRulefield, type a unique name for the rule.
- Click the name of a rule.
- In the Match all of the following conditions area, click+.
- From theClient SSLlist, select a condition type, and configure the applicable settings and available options.
- In the Match all of the following conditions area, click+to add an additional condition, as necessary, and configure the applicable settings and available options.
- In the Do the following when the traffic is matched area, click+.
- From theEnablelist, select an action type, and configure the applicable settings and available options.
- In the Do the following when the traffic is matched area, click+to add an additional action, as necessary, and configure the applicable settings and available options.
- From theOperandlist, select an operand.
- From theOperandslist, select an operand, configure the applicable settings, and clickAdd.
- From theOperandlist, selecthttp-basic-auth.
- From theOperandlist, selecthttp-cookie.
- From theOperandlist, select thehttp-cookieoperand, configure the applicable settings, and clickAdd.
- From theOperandlist, selecthttp-header.
- From theOperandlist, select thehttp-headeroperand for the rule, configure the applicable settings, and clickAdd.
- From theOperandlist, selecthttp-host.
- From theOperandlist, select thehttp-hostoperand for the rule, configure the applicable settings, and clickAdd.
- From theOperandlist, selecthttp-method.
- From theOperandlist, selecthttp-referer.
- From theOperandlist, selecthttp-status.
- From theOperandlist, selecthttp-uri.
- From theOperandlist, select thehttp-urioperand for the rule, configure the applicable settings, and clickAdd.
- From theOperandlist, selecthttp-version.
- From theSelectorlist, select an entry and configure the applicable settings.
- From theSelectorlist, selectall.
- From theSelectorlist, selectdomain.
- From theSelectorlist, selectexpiry.
- From theSelectorlist, selecthost.
- From theSelectorlist, selectpassword.
- From theSelectorlist, selectpath.
- From theSelectorlist, selectpath-segment.
- From theSelectorlist, selectport.
- From theSelectorlist, selectquery-parameter.
- From theSelectorlist, selectquery-string.
- From theSelectorlist, selectscheme.
- From theSelectorlist, selectunnamed-query-parameter.
- From theSelectorlist, selectusername.
- From theSelectorlist, selectvalue.
- From theSelectorlist, selectversion.
- In theNamefield, type a unique name for the strategy.
- Click the name of a strategy.
- From theTypelist, select a strategy type.Strategy typeDescriptionConfiguration stepsbest-matchSelects and executes the actions of the rule in the Rules list with the best match, as determined by the following factors.
- The number of conditions and operands that match the rule.
- The length of the matched value for the rule.
- The priority of the operands for the rule.
In a best-match strategy, when multiple rules match and specify an action, conflicting or otherwise, only the action of the best-match rule is executed. A best-match rule can be the lowest ordinal, the highest priority, or the first rule that matches in the Rules list.- From theOperandlist, select an operand.
- From theEventlist, select an event type.
- From theSelectorlist, select a type of selector.
- ClickAdd.
- Select the check box for each policy matching strategy that you want to delete.
- For theRequiressetting, selecthttpfrom theAvailablelist, and move the entry to theSelectedlist using the Move button.
- For theControlssetting, selectforwardingfrom theAvailablelist, and move the entry to theSelectedlist using the Move button.
- Using the options for theConditionssetting, configure a rule where the condition equals the criteria specified:
- From theConditionlist, selectequals.
- Select thecase sensitivecheck box to apply case sensitivity to the condition.
- In theValuesfield, type the text for the applicable value and clickAdd.An example of a value issiterequest.com.The specified condition appears in theValueslist box.
- At the lower left, clickAdd.The configured condition appears in theConditionslist.
- Using the options for theConditionssetting, configure a rule where the condition starts with the criteria specified:
- From theConditionlist, selectstarts with.
- Select thecase sensitivecheck box to apply case sensitivity to the condition.
- In theValuesfield, type the text for the applicable value and clickAdd.An example of a value is/app1/.The specified condition appears in theValueslist box.
- At the lower left clickAdd.The configured condition appears in theConditionlist.
- Using theActionssetting, configure the applicable options:
- From theTargetlist, selectforward.
- From theEventlist, select an event.
- From theActionlist, selectpool.
- From theParameterslist, select the pool name to which you want the BIG-IP system to forward the traffic.
- To the right of the input field, clickAdd.The configured parameter appears in theParameterslist box.
- At the lower left clickAdd.The configured settings for the action appear in theActionslist.