Manual : BIG-IP Controller Reference Guide, version 4.2

Applies To:

Show Versions Show Versions

BIG-IP versions 1.x - 4.x

  • 4.2 PTF-10, 4.2 PTF-09, 4.2 PTF-08, 4.2 PTF-07, 4.2 PTF-06, 4.2 PTF-05, 4.2 PTF-04, 4.2 PTF-03, 4.2 PTF-02, 4.2 PTF-01, 4.2.0
Manual
Original Publication Date: 01/24/2011


 

Table of Contents



 

 

Introduction

Introduction

 

Introduction

 

Introduction

Getting started

 

Choosing a configuration tool

Using the Administrator Kit

Using the Administrator Kit

 

Using the Administrator Kit

 

Using the Administrator Kit

 

Stylistic conventions
Finding additional help and technical support resources

What's new in version 4.2

What's new in version 4.2

 

What's new in version 4.2

 

What's new in version 4.2

 

Support for the Controller and IP Application Switch platforms
The Setup utility
Enhanced pools support
New filter for rewriting HTTP redirections
New global variables
Enhanced rules support
Enhanced support for virtual servers
SSL Accelerator proxy enhancements
Support for the nCipher FIPS 140-1 level 3 certified
SSL cryptographic module
Enhanced support for Secure Network Address Translations (SNATs)
Enhanced interface statistics
Health monitor enhancements
Support for LDAP and RADIUS logins
Enhanced system logging
Web-based Configuration utility enhancements

Learning more about the BIG-IP product family

Learning more about the BIG-IP product family

 

Learning more about the BIG-IP product family

 

Learning more about the BIG-IP product family

 

 

BIG-IP Overview

BIG-IP Overview

 

BIG-IP Overview

 

BIG-IP Overview

Introduction

What is a BIG-IP?

Configuration

 

Configuration

Hardware configuration
Base network configuration
High-level network configuration
Global settings and filters

Monitoring and administration

Monitoring and administration

 

Monitoring and administration

 

Monitoring and administration

The BIG-IP user interface

 

The Configuration utility
The bigpipe command line interface
The bigip.conf file

 

Using the Setup Utility

Using the Setup Utility

 

Using the Setup Utility

 

Using the Setup Utility

Creating the initial software configuration with the Setup utility

Connecting to the BIG-IP for the first time

 

Running the utility from the console or serial terminal
Running the Setup utility remotely

Using the Setup utility for the first time

Using the Setup utility for the first time

 

Using the Setup utility for the first time

 

Using the Setup utility for the first time

 

Keyboard type
Product selection
Root password
Host name
Configuring a default gateway pool
Redundant system settings
Setting the interface media type
Configuring VLANs and IP addresses
Configuring remote web server access
Setting the time zone
Configuring the DNS proxy forwarding settings
Configuring remote administrative access
Configuring remote access for noncrypto-enabled versions of the system
Configuring NTP support
Configuring NameSurfer for zone file management

Running the Setup utility after creating the initial software configuration

Running the Setup utility after creating the initial software configuration

 

Running the Setup utility after creating the initial software configuration

 

Running the Setup utility after creating the initial software configuration

 

Options available only through the Setup utility menu

 

Additional Base Network Configuration

Additional Base Network Configuration

 

Additional Base Network Configuration

 

Additional Base Network Configuration

Introduction

Interfaces

 

Interface naming conventions
Displaying status and settings for interfaces
Media type and duplex mode

VLANs

VLANs

 

VLANs

 

VLANs

 

Default VLAN configuration
Creating, renaming, and deleting VLANs
Configuring packet access to VLANs
Managing the Layer 2 forwarding table
Creating VLAN groups
Setting up security for VLANs
Setting fail-safe timeouts for VLANs
Setting the MAC masquerade address

Self IP addresses

Self IP addresses

 

Self IP addresses

 

Self IP addresses

 

Enabling or disabling SNAT automap

Trunks

Trunks

 

Trunks

 

Trunks

Spanning Tree Protocol (STP)

 

Creating and deleting STP domains
Setting time intervals for an STP domain
Adding or deleting interfaces in an STP domain
Disabling and re-enabling an STP domain
Disabling and re-enabling interfaces in an STP domain
Restarting stpd

Port Mirroring

Port Mirroring

 

Port Mirroring

 

Port Mirroring

 

Setting up a port mirror
Deleting interfaces from a port mirror or deleting a port mirror

 

Configuring the High-Level Network

Configuring the High-Level Network

 

Configuring the High-Level Network

 

Configuring the High-Level Network

 

Introduction

Introduction

 

Introduction

 

Introduction

 

Introduction

 

Pools

Pools

 

Pools

 

Pools

 

Pools

 

Working with pools
Pool Name
Member specification
Load balancing method
Persistence
HTTP redirection
HTTP header insertion
Quality of Service (QoS) level
Type of Service (ToS) level
Disabling SNAT and NAT connections
Forwarding pools

Rules

Rules

 

Rules

 

Rules

 

Rules

 

Rule-based pool selection
Rule-based HTTP redirection
Rule statements
Configuring rules
Additional rule examples

Virtual servers

Virtual servers

 

Virtual servers

 

Virtual servers

 

Virtual servers

 

Virtual server types
Virtual server options
Additional virtual server tasks
Using other BIG-IP features with virtual servers

Proxies

Proxies

 

Proxies

 

Proxies

 

Proxies

 

The SSL Accelerator proxy
The content converter proxy
Additional proxy tasks

Nodes

Nodes

 

Nodes

 

Nodes

 

Nodes

 

Services

Services

 

Services

 

Services

 

Services

 

Address translation: SNATs, NATs, and IP forwarding

Address translation: SNATs, NATs, and IP forwarding

 

Address translation: SNATs, NATs, and IP forwarding

 

Address translation: SNATs, NATs, and IP forwarding

 

Address translation: SNATs, NATs, and IP forwarding

 

SNATs
NATs
IP forwarding

Health monitors

Health monitors

 

Health monitors

 

Health monitors

 

Health monitors

 

Selecting the monitor template
Configuring a monitor
Monitor attributes
Associating the monitor with a node or nodes

Configuring Filters

Configuring Filters

 

Configuring Filters

 

Configuring Filters

 

Configuring Filters

 

Introduction

Introduction

 

Introduction

 

Introduction

 

Introduction

 

IP filters

IP filters

 

IP filters

 

IP filters

 

IP filters

 

Configuring IP filters

Rate filters and rate classes

Rate filters and rate classes

 

Rate filters and rate classes

 

Rate filters and rate classes

 

Rate filters and rate classes

 

Configuring rate filters and rate classes

 

 

Configuring a Redundant System

Introduction

Introduction

 

Introduction

 

Introduction

Synchronizing configurations between units

Configuring fail-safe settings

 

Arming or disarming fail-safe on a VLAN

Mirroring connection information

Mirroring connection information

 

Mirroring connection information

 

Mirroring connection information

 

Commands for mirroring
Mirroring virtual server state
Mirroring SNAT connections

Using gateway fail-safe

Using gateway fail-safe

 

Using gateway fail-safe

 

Using gateway fail-safe

 

Adding a gateway fail-safe check

Using network-based fail-over

Using network-based fail-over

 

Using network-based fail-over

 

Using network-based fail-over

Setting a specific BIG-IP to be the preferred active unit

Setting up active-active redundant BIG-IP units

 

Configuring an active-active system
Understanding active-active system fail-over
Introducing additional active-active BIG/db configuration parameters
Reviewing specific active-active bigpipe commands
Returning an active-active installation to active/standby mode

 

bigpipe Command Reference

bigpipe Command Reference

 

bigpipe Command Reference

 

bigpipe Command Reference

 

bigpipe commands

bigpipe commands

 

bigpipe commands

 

bigpipe commands

 

bigpipe commands

 

-?

-?

 

-?

 

-?

 

-?

 

class

class

 

class

 

class

 

class

 

config

config

 

config

 

config

 

config

 

Synchronizing configuration files
Saving configuration files to an archive
Installing an archived configuration file

 

conn

conn

 

conn

 

conn

 

 

default_gateway

default_gateway

 

default_gateway

 

default_gateway

 

default_gateway

 

failover

failover

 

failover

 

failover

 

failover

 

global

global

 

global

 

global

 

global

 

-h and -help

-h and -help

 

-h and -help

 

-h and -help

 

-h and -help

 

interface

interface

 

interface

 

interface

 

interface

 

Setting the media type

Setting the media type

 

Setting the media type

 

Setting the media type
Setting the duplex mode

 

load

load

 

load

 

load

 

load

 

maint

maint

 

maint

 

maint

 

maint

 

makecookie

makecookie

 

makecookie

 

makecookie

 

makecookie

 

merge

merge

 

merge

 

merge

 

merge

 

mirror

mirror

 

mirror

 

mirror

 

mirror

 

Creating a port mirror

Creating a port mirror

 

Creating a port mirror

 

Creating a port mirror
Deleting interfaces from a port mirror or deleting a port mirror

 

monitor

monitor

 

monitor

 

monitor

 

monitor

 

-n

-n

 

-n

 

-n

 

-n

 

nat

nat

 

nat

 

nat

 

nat

 

node

node

 

node

 

node

 

node

 

pool

pool

 

pool

 

pool

 

pool

 

proxy

proxy

 

proxy

 

proxy

 

proxy

 

ratio

ratio

 

ratio

 

ratio

 

ratio

 

reset

reset

 

reset

 

reset

 

reset

 

rule

rule

 

rule

 

rule

 

rule

 

save

save

 

save

 

save

 

save

 

self

self

 

self

 

self

 

self

 

service

service

 

service

 

service

 

service

 

snat

snat

 

snat

 

snat

 

snat

 

stp

stp

 

stp

 

stp

 

stp

 

summary

summary

 

summary

 

summary

 

summary

 

trunk

trunk

 

trunk

 

trunk

 

trunk

 

unit

unit

 

unit

 

unit

 

unit

 

verbose

verbose

 

verbose

 

verbose

 

verbose

 

verify

verify

 

verify

 

verify

 

verify

 

version

version

 

version

 

version

 

version

 

virtual

virtual

 

virtual

 

virtual

 

virtual

 

vlan

vlan

 

vlan

 

vlan

 

vlan

 

vlangroup

vlangroup

 

vlangroup

 

vlangroup

 

vlangroup

 

Configuring SNMP

Configuring SNMP

 

Configuring SNMP

 

Configuring SNMP

Introduction

Downloading the MIBs

Configuring SNMP using the Configuration utility

 

Configuring SNMP using the Configuration utility

Setting up client access
Configuring system information
Configuring traps

SNMP configuration files

SNMP configuration files

 

SNMP configuration files

 

SNMP configuration files

 

/etc/hosts.deny
/etc/hosts.allow
/etc/snmpd.conf
/etc/snmptrap.conf
Syslog

Configuring snmpd to send responses out of different ports or addresses

Configuring snmpd to send responses out of different ports or addresses

 

Configuring snmpd to send responses out of different ports or addresses

 

Configuring snmpd to send responses out of different ports or addresses

 

 

BIG/db Configuration Keys

BIG/db Configuration Keys

 

BIG/db Configuration Keys

 

BIG/db Configuration Keys

Supported BIG/db configuration keys

 

Failover and cluster keys
StateMirror keys
Using Gateway Pinger keys
Bigd keys
Other keys

 

Configuration Files

Configuration Files

 

Configuration Files

 

Configuration Files

 

BIG-IP configuration files

BIG-IP configuration files

 

BIG-IP configuration files

 

BIG-IP configuration files

 

BIG-IP configuration files

 

 

Monitoring and Administration

Monitoring and Administration

 

Monitoring and Administration

 

Monitoring and Administration

Monitoring and administration utilities

Using the bigpipe utility as a monitoring tool

 

Monitoring the BIG-IP
Monitoring virtual servers, virtual addresses and services
Monitoring nodes and node addresses
Monitoring NATs
Monitoring SNATs
Viewing the status of the interface cards

Using the Configuration utility for administration and monitoring

Adding a user
Customizing the Configuration utility
Configuring SNMP

Working with the BIG/top utility

Working with the BIG/top utility

 

Working with the BIG/top utility

 

Working with the BIG/top utility

 

Using BIG/top command options
Using runtime commands in BIG/top

Working with the Syslog utility

Working with the Syslog utility

 

Working with the Syslog utility

 

Working with the Syslog utility

 

Sample log messages

Powering down the BIG-IP

Powering down the BIG-IP

 

Powering down the BIG-IP

 

Powering down the BIG-IP

Removing and returning items to service

 

Removing the BIG-IP from service
Removing individual virtual servers, virtual addresses, and ports from service
Removing individual nodes and node addresses from service
Viewing the currently defined virtual servers and nodes

Viewing system statistics and log files

Viewing system statistics and log files

 

Viewing system statistics and log files

 

Viewing system statistics and log files

 

Viewing system statistics
Viewing log files

Printing the connection table

Printing the connection table

 

Printing the connection table

 

Printing the connection table

Changing passwords

 

Changing passwords and adding new user IDs for the web-based Configuration utility

Working with the BIG/db database

Working with the BIG/db database

 

Working with the BIG/db database

 

Working with the BIG/db database

 

Using the bigpipe db command

Working with the BIG/stat utility

Working with the BIG/stat utility

 

Working with the BIG/stat utility

 

Working with the BIG/stat utility

 

 

Additional Setup Options

Additional Setup Options

 

Additional Setup Options

 

Additional Setup Options

Overview of additional setup options

Defining additional host names

Using the MindTerm SSH Console

Downloading the SSH client to your administrative workstation

Downloading the SSH client to your administrative workstation

 

Downloading the SSH client to your administrative workstation

 

Downloading the SSH client to your administrative workstation

 

 

 

 

Using the MindTerm SSH Console

Downloading the SSH client to your administrative workstation

Downloading the SSH client to your administrative workstation

 

Downloading the SSH client to your administrative workstation

 

Downloading the SSH client to your administrative workstation

 

Downloading the SSH client from the web server
Setting up the SSH client on a Windows 95 or Windows NT workstation
Setting up the SSH client on a UNIX workstation

Addressing general networking issues

Addressing general networking issues

 

Addressing general networking issues

 

Addressing general networking issues

 

Addressing routing issues
Configuring DNS on the BIG-IP
Configuring email

Using a serial terminal with the BIG-IP

Using a serial terminal with the BIG-IP

 

Using a serial terminal with the BIG-IP

 

Using a serial terminal with the BIG-IP

 

Configuring a serial terminal in addition to the console
Configuring a serial terminal as the console
Forcing a serial terminal to be the console

Configuring RADIUS or LDAP authentication

Configuring RADIUS or LDAP authentication

 

Configuring RADIUS or LDAP authentication

 

Configuring RADIUS or LDAP authentication

 

To configure RADIUS login support
Configuring LDAP login support
Allowing multiple authentication styles
Requiring different authentication styles for different applications

Glossary

Glossary

 

Glossary

 

Glossary