Lab 1: APM Troubleshooting Lab Object Preparation (GUI)¶

Connect to the Lab¶

1. Establish an RDP connection to your Jump Host and double-click on the BIG-IP Chrome shortcut on the Windows desktop.
   • User: agility
   • Password: Agility1
2. Ignore the certificate warning.
3. Login into the BIG-IP Configuration Utility with the desktop icon (or Favorite link in Chrome) with the following credentials:
   • User: admin
   • Password: admin

DNS Resolver for System Configuration¶

1. Create a DNS entry by selecting: System->Configuration->Device->DNS

2. In the Properties Section for DNS Lookup Server List, enter 10.128.20.100 in the Address field and click the ADD button.
3. Scroll down to the DNS Search Domain List section and enter agilitylab.com in the Address field and click the ADD button.
4. Click the UPDATE button at the bottom of the page to save the changes you just made.

NTP Server for System Configuration¶

1. Create a NTP entry by selecting: System  Configuration  Device  NTP

2. In the Properties Section for Time Server List, enter 10.128.20.100 in the Address field and click the ADD button.
3. Click the UPDATE button at the bottom of the page to save the changes you just made.

Access Policy (APM) AAA Server – Active Directory Object Creation¶

1. Create a new AAA Server Object of type Active Directory by selecting: Access  Authentication  Active Directory

2. Click the CREATE button on right side of page.

3. Under General Properties type LAB_AD_AAA in the name field.
4. In the Configuration Section, Click the radio button option next to Direct in the Server Connection row.
5. In the Domain Name field enter agilitylab.com
6. Leave the Domain Controller, Admin Name and Admin Password fields blank for now.
7. Click the FINISHED button at the bottom of the page to save your changes.

Access Policy (APM) SSO Configuration – NTLMv1¶

1. Create a new SSO Configuration Object of type NTLM by selecting: Access  Single Sign-On  NTLMV1

2. Click the CREATE button on the right side of the page.

3. In the Name field enter Agility_Lab_SSO_NTLM
4. Click the FINISHED button at the bottom.

Access Policy (APM) Access Profile Creation¶

1. Create a new APM Profile Object of type ALL by selecting: Access  Profiles/Policies  Access Profiles (Per-Session Policies)

2. Click the CREATE button on the right side of the page.

3. In the Name field enter, Agility-Lab-Access-Profile
4. In the Profile Type drop down list select All
5. In the Profile Scope drop down list select Profile

6. In the Settings section click the checkbox to the right of Access Policy Timeout and change the value from 300, to 30, seconds.

7. Scroll the bottom of the page and in the Language Settings section, click to highlight English in the Factory Builtin Languages box, then click the left << arrows to move it to the left box labeled Accepted Languages.
8. Click the FINISHED button at the bottom of the page to save your changes.

Local Traffic (LTM) Pool and Member Creation¶

1. Create a new LTM Pool and Member by selecting Local Traffic  Pools Pools List

2. Click the CREATE button on the right side of the page.

3. In the Name field enter Agility-Lab-Pool
4. In the Resources section, in the New Members area, enter 10.128.20.100 in the Address field.
5. In the Service Port field, enter 80, or select HTTP from the drop-down menu.
6. Click the ADD button
7. Click the FINISHED button at the bottom to save your changes.

Local Traffic (LTM) Virtual Server Creation¶

This lab will walk you through creating the Virtual Server we will use during the course of the lab. This Virtual Server will be used to associate Access Policies which will be evaluated when authenticating users.

1. Create an new Virtual Server by selecting Local Traffic  Virtual Servers  Virtual Server List

2. Click the CREATE button on the right side of the page.

3. Under the General Properties section, in the Name field enter Agility-LTM-VIP
4. In the Destination Address field enter 10.128.10.100
5. In the Service Port fields enter 443, or select HTTPS from the drop-down menu

6. Under the Configuration section, in the HTTP Profile field use the drop-down menu to select http
7. In the SSL Profile (Client) field select clientssl from the Available profiles then use the << left arrows to move it to the Selected box.
8. Ensure VLAN and Tunnel Traffic is set to All VLANs and Tunnels
9. In the Source Address Translation field select Auto Map from the drop-down menu.

10. Scroll down to the Access Profile section, select Agility-Lab-Access-Profile from the drop-down menu.

11. Click the FINISHED button to save your changes.