By the end of this course, you will be able to:

Administering BIG-IP v15.1

• Explain the role of BIG-IP as a full proxy device in an application delivery network

• Set up, start/stop/restart, license, and provision the BIG-IP system from scratch

• Build a basic network setup including VLANs and self IPs

• Manage resources (virtual servers, pools, members, nodes, profiles, monitors) using the Configuration utility and TMSH

• Create, restore, and manage system archives

• Check system status, availability, and traffic statistics to understand how BIG-IP is processing traffic

• Use profiles to control how traffic flows through a virtual server

• Perform basic troubleshooting with tools like iHealth and TCPDUMP

• Manage user roles and partitions

• Configure and manage a sync-failover device group (with more than two members)

• Set up stateful failover with connection and persistence mirroring

Configuring BIG-IP LTM v15.1: Local Traffic Manager

• Back up the BIG-IP configuration safely

• Set up and manage virtual servers, pools, monitors, profiles, and persistence objects

• Test and confirm application delivery using local traffic statistics

• Use priority group activation so servers are only used when needed

• Compare member-based vs. node-based dynamic load balancing methods

• Apply connection limits to control traffic volume to pool members and nodes

• Understand and configure different persistence methods (cookie, SSL, SIP, universal, destination address) and when to use them

• Explain Match Across Services persistence options and their use cases

• Configure health monitors for proper application delivery checks

• Set up different types of virtual services for different traffic processing needs

• Configure various SNATs to route traffic properly

• Use VLAN tagging and trunking

• Restrict traffic with packet filters, port lockdown, and virtual server settings

• Configure SNMP alerts and traps for remote monitoring

• Use iRules and local traffic policies to customize application delivery

• Set up BIG-IP to detect and reduce common network and application attacks (using SYN check, eviction policies, iRules, and policies)

Administering BIG-IP v16.1

Chapter 1: Setting Up the BIG-IP System

• Introducing the BIG-IP System

• Initially Setting Up the BIG-IP System

• Configuring the Management Interface

• Activating the Software License

• Provisioning Modules and Resources

• Importing a Device Certificate

• Specifying BIG-IP Platform Properties

• Configuring the Network

• Configuring Network Time Protocol (NTP) Servers

• Configuring Domain Name System (DNS) Settings

• Configuring High Availability Options

• Archiving the BIG-IP Configuration

• Leveraging F5 Support Resources and Tools

Chapter 2: Traffic Processing Building Blocks

• Identifying BIG-IP Traffic Processing Objects

• Configuring Virtual Servers and Pools

• Load Balancing Traffic

• Viewing Module Statistics and Logs

• Using the Traffic Management Shell (TMSH)

• Understanding the TMSH Hierarchical Structure

• Navigating the TMSH Hierarchy

• Managing BIG-IP Configuration State and Files

• BIG-IP System Configuration State

• Loading and Saving the System Configuration

• Shutting Down and Restarting the BIG-IP System

• Saving and Replicating Configuration Data (UCS and SCF)

Chapter 3: Using NATs and SNATs

• Address Translation on the BIG-IP System

• Mapping IP Addresses with NATs

• Solving Routing Issues with SNATs

• Configuring SNAT Auto Map on a Virtual Server

• Monitoring for and Mitigating Port Exhaustion

Chapter 4: Monitoring Application Health

• Introducing Monitors

• Types of Monitors

• Monitor Interval and Timeout Settings

• Configuring Monitors

• Assigning Monitors to Resources

• Managing Pool, Pool Member, and Node Status

• Using the Network Map

Chapter 5: Modifying Traffic Behavior with Profiles

• Introducing Profiles

• Understanding Profile Types and Dependencies

• Configuring and Assigning Profiles

• Introducing SSL Offload and SSL Re-Encryption

Chapter 6: Modifying Traffic Behavior with Persistence

• Understanding the Need for Persistence

• Introducing Source Address Affinity Persistence

• Managing Object State

Chapter 7: Administering the BIG-IP System

• Configuring Logging

• Legacy Remote Logging

• Introducing High Speed Logging (HSL)

• High-Speed Logging Filters

• HSL Configuration Objects

• Configuring High Speed Logging

• Using TCPDUMP on the BIG-IP System

• Leveraging the BIG-IP iHealth System

• Viewing BIG-IP System Statistics

• Defining User Roles and Administrative Partitions

• Leveraging vCMP

Chapter 8: Configuring High Availability

• Introducing Device Service Clustering (DSC)

• Preparing to Deploy a DSC Configuration

• Configuring DSC Communication Settings

• Establishing Device Trust

• Establishing a Sync-Failover Device Group

• Synchronizing Configuration Data

• Exploring Traffic Group Behavior

• Understanding Failover Managers and Triggers

• Achieving Stateful Failover with Mirroring

Configuring BIG-IP LTM v15.1: Local Traffic Manager

Chapter 1: Setting Up the BIG-IP System

• Introducing the BIG-IP System

• Initially Setting Up the BIG-IP System

• Archiving the BIG-IP Configuration

•Leveraging F5 Support Resources and Tools

Chapter 2: Reviewing Local Traffic Configuration

• Reviewing Nodes, Pools, and Virtual Servers

• Reviewing Address Translation

• Reviewing Routing Assumptions

• Reviewing Application Health Monitoring

• Reviewing Traffic Behavior Modification with Profiles

• Reviewing the TMOS Shell (TMSH)

• Reviewing Managing BIG-IP Configuration Data

Chapter 3: Load Balancing Traffic with LTM

• Exploring Load Balancing Options

• Using Priority Group Activation and Fallback Host

• Comparing Member and Node Load Balancing

Chapter 4: Modifying Traffic Behavior with Persistence

• Reviewing Persistence

• Introducing Cookie Persistence

• Specifying Default and Fallback Persistence

• Introducing SSL Persistence

• Introducing SIP Persistence

• Introducing Universal Persistence

• Introducing Destination Address Affinity Persistence

• Using Match Across Options for Persistence

Chapter 5: Monitoring Application Health

• Differentiating Monitor Types

• Customizing the HTTP Monitor

• Monitoring an Alias Address and Port

• Monitoring a Path vs. Monitoring a Device

• Managing Multiple Monitors

• Using Application Check Monitors

• Using Manual Resume and Advanced Monitor Timer Settings

Chapter 6: Processing Traffic with Virtual Servers

• Understanding the Need for Other Virtual Server Types

• Forwarding Traffic with a Virtual Server

• Understanding Virtual Server Order of Precedence

• Path Load Balancing

Chapter 7: Processing Traffic with SNATs

• Overview of SNATs

• Using SNAT Pools

• SNATs as Listeners

• SNAT Specificity

• VIP Bounceback

• Additional SNAT Options

• Network Packet Processing Review

Chapter 8: Modifying Traffic Behavior with Profiles

• Profiles Overview

• TCP Express Optimization

• TCP Profiles Overview

• HTTP Profile Options

• HTTP/2 Profile Options

• OneConnect

• Offloading HTTP Compression to BIG-IP

• Web Acceleration Profile and HTTP Caching

• Stream Profiles

• F5 Acceleration Technologies

Chapter 9: Selected Topics

• VLAN, VLAN Tagging, and Trunking

• Restricting Network Access

• SNMP Features

• Segmenting Network Traffic with Route Domains

Chapter 10: Customizing Application Delivery with iRules

• Getting Started with iRules

• Understanding When iRules are Triggered

• Deploying iRules

• Constructing an iRule

• Testing and Debugging iRules

• Exploring iRules Documentation

Chapter 11: Customizing Application Delivery with Local Traffic Policies

• Getting Started with Local Traffic Policies

• Configuring and Managing Policy Rules

Chapter 12: Securing Application Delivery with LTM

• Understanding Today’s Threat Landscape

• Integrating LTM Into Your Security Strategy

• Defending Your Environment Against SYN Flood Attacks

• Defending Your Environment Against Other Volumetric Attacks

• Addressing Application Vulnerabilities with iRules and Local Traffic Policies

• Detecting and Mitigating Other Common HTTP Threats

Chapter 13: Final Lab Project

• About the Final Lab Project

Chapter 14: Additional Training and Certification

• Getting Started Series Web-Based Training

• F5 Instructor Led Training Curriculum

• F5 Professional Certification Program

Course Changes since v15

Administering BIG-IP v.16.1

• No significant changes to course outline or materials since the v15 release.

• Minor updates to the course include review and update of referenced knowledge articles, GUI screenshots, hardware platform images in introduction and chapter 1 slides and student guide pages, and removed information for obsolete topics such as Link Controller.

Configuring BIG-IP LTM v16.1: Local Traffic Manager

• Updates for the v16.1 release include changes to TCP Profiles and Securing Application Delivery chapters.

• All remaining content was reviewed and updated for relevance to the BIG-IP v16.1 release.

The following free web-based training courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience.

These courses are available at LearnF5 (https://www.f5.com/services/training):

• Getting Started with BIG-IP

• Getting Started with BIG-IP Local Traffic Manager (LTM) web-based training

The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course:

• OSI model encapsulation

• Routing and switching

• Ethernet and ARP

• TCP/IP concepts

• IP addressing and subnetting

• NAT and private IP addressing

• Default gateway

• Network firewalls

• LAN vs. WAN

Exam 201 – TMOS Administration

Prerequisite: Valid passing score on Exam 101 or valid F5-CTP, Sales Certification

This is the second and final exam that must be completed successfully by candidates wishing to achieve F5 Certified! Administrator, BIG-IP status. Passing this exam shows independence in performing day-to-day operations and basic troubleshooting of TMOS-based devices in various application environments after it has been installed, configured, and implemented. Individuals may choose to complete their certification journey here or move on to pursue the Technical Professional, Technical Specialist, Cloud or Security Solutions certification tracks.

Exam 301a – BIG-IP LTM Specialist: Architect, Set-up, Deploy

Prerequisites: Valid F5-CA, BIG-IP Certification

This is the first of two exams in the F5 Certified Technology Specialist, BIG-IP LTM certification and serves as a prerequisite to exam 301b. Candidates who pass this exam possess an understanding of underlying principles – from SSL-based VPN implementation to symmetric and asymmetric acceleration – and can draw on that insight to integrate BIG-IP LTM into existing networks as well as new implementations. Receiving the F5-CTS, BIG-IP LTM certification is a prerequisite for both the Cloud and Security Solutions Expert certification tracks.

LTM Specialist: Maintain and Troubleshoot

Prerequisites: Valid F5-CA, BIG-IP Certification, valid passing score on Exam 301a

This is the second exam candidates are required to pass in order to receive the F5 Certified Technology Specialist, BIGIP LTM certification. Passing this exam validates their ability to design, implement, maintain, and troubleshoot advanced F5 product features to enhance the effectiveness of an Application Delivery Network. In addition, it shows that a candidate understands underlying principles – from SSL-based VPN implementation to symmetric and asymmetric acceleration – and can draw on that insight to integrate BIG-IP LTM into existing networks as well as new implementations. Receiving the F5-CTS, BIG-IP LTM certification is a prerequisite for both the Cloud and Security Solutions Expert certification tracks.

Exam vouchers can be purchased at an additional charge. Vouchers can be used  to schedule exams at a time and location convenient to the attendee.

• Configuring BIG-IP DNS (formerly GTM) v.16.1
• Configuring F5 Advanced WAF (previously licensed as ASM) v16.1
• Configuring BIG-IP APM: Access Policy Manager v.16.1