Lab 2: APM Troubleshooting Lab Object Preparation (TMSH)¶

Connect to the Lab via SSH¶

1. Establish an RDP connection to your Jump Host and double-click on the BIG-IP Chrome shortcut on the Windows desktop. - User: agility - Password: Agility1
2. Ignore the certificate warning.
3. Login into the BIG-IP via SSH using putty and the following credentials: - User: root - Password: default
4. Log in to tmsh by typing the following command: tmsh

DNS Resolver for System Configuration (TMSH)¶

1. To add a name server to your /etc/resolv.conf file, use the following command syntax, replacing <IP addresses> with your IP addresses:

   modify sys dns name-servers add { <IP addresses> }

2. To add domains to your search list use the following command replacing <domains> with the domain you wish to add:

   modify sys dns search add { <domains> }

3. Configure as follows:

   modify sys dns name-servers add { 10.128.20.100 }

   modify sys dns search add { agilitylab.com }

   save sys config

4. To verify, use the following command: list sys dns

   You should see the following reply:

NTP Server for System Configuration (TMSH)¶

1. To configure one or more NTP servers for the BIG-IP system, use the following command syntax:

   modify sys ntp servers add {hostname hostname….}

2. Configure as follows:

   modify sys ntp servers add { 10.128.20.100 }

   save sys config

3. To verify, use the following command:

   list sys ntp

   You snould see the following reply:

Access Policy (APM) AAA Server – Active Directory Object Creation (TMSH)¶

1. To configure an Active Directory AAA Server object, use the following command syntax:

   create apm aaa active-directory <name> domain <domain-name> use-pool <disabled>

2. Configure as follows:

   create apm aaa active-directory LAB_AD_AAA domain agilitylab.com use-pool disabled

   save sys config

3. To verify, use the following command:

   list apm aaa

   You should see the following reply:

Access Policy (APM) SSO Configuration – NTLMv1 (TMSH)¶

1. To configure an NTLMv1 SSO profile, use the following command syntax:

   create apm sso ntlmv1 <profile_name>

2. Configure as follows:

   create apm sso ntlmv1 Agility_Lab_SSO_NTLM

   save sys config

3. To verify, use the command:

   list apm sso

Access Policy (APM) Access Profile Creation (see GUI steps)¶

Local Traffic (LTM) Pool and Member Creation (TMSH)¶

1. To configure a LTM Pool and Pool members, use the following command syntax:

   create ltm pool <pool-name> members add { <IP-addr>:<service-port> }

2. Configure as follows:

   create ltm pool Agility-Lab-Pool members add { 10.128.20.100:80 }

   save sys config

3. To verify, use the following command:

   list ltm pool

Local Traffic (LTM) Virtual Server Creation (TMSH)¶

1. To configure a virtual server, use the following command syntax:

   create ltm virtual Agility-LTM-VIP { destination 10.128.10.100:443 profiles add { clientssl http Agility-Lab-Access-Profile } vlans default source-address-translation { type automap } }

2. Configure as follows:

   create ltm virtual Agility-LTM-VIP { destination 10.128.10.100:443 profiles add { clientssl http Agility-Lab-Access-Profile } vlans default source-address-translation { type automap } }

   save sys config

3. To verify, use the following command:

   list ltm virtual