F5基本操作培训.pptVIP

安装注意 为了保证通信的安全性，本软件与所管理设备的通信使用数字证书对通信数据进行验证，用户在使用本软件的时候要首先安装需要管理设备的证书，否则，将会出现通讯错误，无法连接到需要管理的设备 F5终端常用的命令 b conn show ；查看连接数 bigstart restart ；启动所有进程 bigstart restart gtmd ；启动gtm进程 bigtop –n –delay 1 ；查看实时流量 tmstat ；查看实时状态 tcpdump –ni 1.1 ；接口1.1的数据流向分析 tcpdump –ni vlan_name ；某vlan下的流向分析 tcpdump –ni vlan_name host ip ；某vlan下指定某个IP的数据流向分析 tcpdump –ni vlan_name host ip and port 80 ；某vlan下指定某个IP的80端口的数据流向分析 tcpdump –ni vlan_name host ip and icmp ；某vlan下指定某个IP有ICMP数据流向分析 答疑QA 谢 谢! 感谢大家！ * * Priority Group Activation Clients Router BIG-IP Controller Servers 1 3 5 2 4 6 Internet Priority 1 Priority 2 If you set Priority Group Activation to 2, and 3 of the highest priority members are available, then lower priority members will not be used. Priority Group Activation Clients Router BIG-IP Controller Servers 1 5 Internet Priority 1 Priority 2 3 2 4 6 7 8 If number of members falls below Priority Group Activation (2), then the next highest priority members are used also. Fallback Host Clients Router BIG-IP Controller Servers Internet If all members fail, then client is sent an http redirect to and alternate server. NAT转换和SNAT No need to mirror NATs SNAT Mirroring configuation SNATs Internet 02 SNAT Automap1 Internet Self IP Dest Src Dest Src SNAT Automap 2 If enabled for multiple self IP’s, Internet Self IP Self IP SNAT Automap ISP #1 Self IP 0 Dest X.X.X.X Src Dest X.X.X.X Src 0 211.1 / 16 ISP #1 222.2 / 16 ISP #2 Self IP 0 Virtual Server :0 Internet First request is Load Balanced to router on ISP #1 using wildcard Virtual Server SNAT Automap ISP #2 Self IP 0 211.1 / 16 ISP #1 222.2 / 16 ISP #2 Self IP 0 Dest Y.Y.Y.Y Src Dest Y.Y.Y.Y Src 0 Virtual Server :0 Internet Second request is Load Balanced to router on ISP #2 using wildcard Virtual Server SNAT using an iRule: iSNATs Internet Router Router Client Client Client Client Client