Manual :
BIG-IP Controller Administrator Guide, version 3.1
Applies To:
Show Versions
BIG-IP versions 1.x - 4.x
- 3.1.1 PTF-01, 3.1.1, 3.1.0
Original Publication Date: 09/27/2007
Introduction to the BIG/ip Controller Administrator Guide
Welcome to the BIG/ip Controller Administrator Guide
BIG/ip Controller specifications
- Internet protocol and network management support
- Security features
- Configuration scalability
- Configuration and monitoring tools
- Load balancing options
- IP packet filtering, rate classes, and rate filters
- Configurable persistence for e-commerce and dynamic content sites
- BIG/ip Controller platform options
Finding help and technical support resources
What's new in version 3.1
Working with Special Features
Introducing special features
Using specialized load balancing modes
Controlling network access and traffic flow with filters
Working with more than two interface cards
- Configuring additional interfaces with the First-Time Boot utility
- Specifying an interface for a virtual address
- Specifying an interface for a NAT address
- Specifying an interface for a SNAT address
- Routing with multiple NICs
Optimizing large configurations
- Reducing ARP traffic on the external network
- Reducing the number of node pings and service checks issued by the BIG/ip Controller
Using the versatile interface configuration options
Using advanced virtual server options
- Using per-connection routing
- Configuring forwarding virtual servers
- Configuring transparent virtual servers
- Using virtual server port translation
- Resetting connections on service down
Working with Intelligent Traffic Control
Introducing Intelligent Traffic Control (ITC)
More flexible load balancing using pools and members
Selecting a load balancing pool using a rule
- Pool selection based on HTTP request data
- Pool selection based on client IP address
- Statements
- Questions (expressions)
- HTTP request string variables
Configuring rules
Configuring virtual servers that reference rules
Comparing load balancing configurations
Configuring an SSL Accelerator
Introducing the SSL Accelerator
Hardware acceleration options
Configuring the SSL Accelerator
- Generating a key and obtaining a certificate
- Installing certificates from the certification authority (CA)
- Create an HTTP virtual server
- Create an SSL gateway
- Enabling, disabling, or deleting an SSL gateway
- Displaying the configuration for an SSL gateway from the command line
Optional SSL Accelerator configuration
- Create a last hop pool that includes additional network devices
- Modify the SSL gateway so that it references the last hop pool
Working with Advanced Service Check Options
Introducing advanced service check options
Setting up ECV service checks for transparent nodes
- Configuring ECV for transparent nodes
- Setting up ECV through transparent nodes with the F5 Configuration utility
Introducing EAV service checks
Setting up custom EAV service checks
- Verifying external service checker requirements
- Installing the external service checker on the BIG/ip Controller
- Allowing EAV service checks
- Command line arguments for EAV service checks
Using the EAV pingers bundled with the BIG/ip Controller
- EAV service check for FTP
- EAV service check for POP3
- EAV service check for SMTP
- EAV service check for NNTP
- EAV service check for SQL-based services
- Troubleshooting SQL-based service checks
- Creating a test account for Microsoft SQL Server
Working with Advanced Persistence Options
Introducing advanced persistence options
Using HTTP cookie persistence
Using destination address affinity (sticky persistence)
Using a simple timeout and a persist mask on a pool
Maintaining persistence across virtual servers that use the same virtual addresses
Maintaining persistence across all virtual servers
Backward compatible persistence for node list virtual servers
Working with Advanced Redundant System Features
Introducing advanced redundant system options
Mirroring connection and persistence information
Using gateway fail-safe
Using network-based fail-over
Setting a specific BIG/ip Controller to be the preferred active unit
Setting up active-active redundant controllers
- Configuring an active-active system
- Active-active system fail-over
- Additional active-active BIG/db configuration parameters
- New active-active bigpipe commands
- Running mixed versions of BIG/ip Controller software in active-active mode
- Returning an active-active installation to active/standby mode
Using Advanced Network Configurations
Introducing advanced network configurations
nPath routing
- Defining a virtual server with address translation disabled
- Setting the route through the BIG/ip Controller
- Setting the idle connection time-out
Per-connection routing
ISP load balancing
- Configuring interfaces for the additional internet connection
- Configuring virtual servers for an additional internet connection
Firewall load balancing
- Configuring interfaces for the firewall sandwich
- Configuring virtual servers for a firewall sandwich
VPN load balancing
VPN and router load balancing
- Configuring interfaces for VPN load balancing
- Configuring virtual servers for VPN and router load balancing
SNAT and virtual servers combined
One IP network topology with one interface
One IP network topology with two interfaces
Setting up 802.1q VLAN trunk mode
- Adding VLAN tag definitions to /etc/netstart
- Adding VLAN tag definitions to BIG/db
- Configuring multiple VLANs on one interface
- To enable or disable VLAN tags on the command line
- Using ifconfig to add another VLAN
- Using netstat to view VLAN tags
- Disabling and enabling VLAN tags using the F5 Configuration utility
Monitoring and Administration
Monitoring and administration utilities provided on the BIG/ip Controller
Using the BIG/pipe command utility as a monitoring tool
- Monitoring the BIG/ip Controller
- Monitoring virtual servers, virtual addresses, and services
- Monitoring nodes and node addresses
- Monitoring NATs
- Monitoring SNATs
Working with the BIG/stat utility
Working with the BIG/top utility
Working with the Syslog utility
Removing and returning items to service
- Removing the BIG/ip Controller from service
- Removing individual virtual servers, virtual addresses, and ports from service
- Removing individual nodes and node addresses from service
- Viewing the currently defined virtual servers and nodes
Viewing system statistics and log files
Printing the connection table
Changing passwords for the BIG/ip Controller
- Changing the BIG/ip Controller password
- Changing passwords and adding new user IDs for the BIG/ip web server
Working with the BIG/db database
Configuring SNMP
Working with SNMP on the BIG/ip Controller
Configuring SNMP on the BIG/ip Controller
- Downloading the MIBs
- Understanding configuration file requirements
- Configuring options for the checktrap script
Glossary
