tcpdump

tcpdump -ni 0.0:nnn -s0 host x.x.x.x and host y.y.y.y -w /var/tmp/tdump1cap

11.4 configuration load issue

Problem:
Configuration did not load properly message with a yellow bar after logging into ltm. You were able to see most of the config in spite of warning message.

Solution:
ssh into ltm
#tmsh load sys config verifyThe output will indicate the issue.

If you see no errors during verify but still getting the warning from the console, run this command.
#tmsh load sys config

Also, execute the following command to clear and rebuild the cache after next restart.
touch /service/mcpd/forceload
http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13030.html?sr=32060389

NTP setup

To setup NTP on LTM 11.x,

GUI:
System -> Configuration -> Device -> NTP
Add the servers to the list and update.

Command:
SSH into LTM

#tmsh
/Common (tmos)#modify /sys ntp servers add {10.18.21.240 10.18.21.241}
/Common (tmos)#save /sys config
/Common (tmos)#list /sys ntp servers

To restart ntpd service, in case of issues,
#bigstart restart ntpd

tmsh commands

1) Displays memory information

tmsh show /sys tmm-info

2) tmsh load sys config partitions all

Display network information

#tmsh
#net
#show interface 

or 

#show interface 1.5 (where 1.5 is the interface key)

Load balancing Microsoft Active Directory LDAP

Steps to load balance Microsoft active directory ldap servers

1) Login to F5 BigIP LTM https://loadbalancerip

2) Create a ldap monitor 

    Main -> Local Traffic -> Monitors -> Monitor List -> Create

2) Create a pool

    Main -> Local Traffic -> Pools -> Pool List -> Create

3) Add pool members to the ldap-ad pool created in the previous step

    Main -> Local Traffic -> Pools -> Pool List -> ldap-ad -> Members

4) Create a virtual server

    Main -> Local Traffic -> Virtual Servers -> Virtual Server List -> Create

LDAP servers are ready for load balancing.

F5 setup for Lotus Sametime

Virtual Server	Pool	Monitor
sametime-community	sametime-community	sametime-http
virtual ip	server1 ip	Interval 30
port 1533	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 1533	Send String GET /names.nsf?login HTTP/1.0\r\n\r\n
Source Address Affinity (persistence)	Least Connections (Node)	Receive String Log In
Snat automap
sametime-meetings	sametime-meetings	sametime-tcp
virtual ip	server1 ip	Interval 30
port 8081	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 8081
Source Address Affinity (persistence)	Least Connections (Node)
Snat automap
sametime	sametime	sametime-http
virtual ip	server1 ip	Interval 30
port 80	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 80	Send String GET /names.nsf?login HTTP/1.0\r\n\r\n
Source Address Affinity (persistence)	Least Connections (Node)	Receive String Log In
Snat automap
http profile

iFile list - F5 hosting files

iFile list is really a cool feature which allows F5 to host files via iRule.

1) Upload your static resources - e.g. file named wpad.dat
System -> File Management -> iFile List -> Import
Choose your file and provide a label (e.g. wpad-file)
Make sure free disk is available.

2) Create an iRule
Local Traffic ->  iRules ->  iRule List

when HTTP_REQUEST {
    if { [HTTP::uri] eq "/wpad.dat" } {
        HTTP::respond 200 content [ifile get  wpad-file]
    }
    else { discard }
}

3) Associate iRule with virtual server

4) Access the file
http://virtual-server-ip/wpad.dat