Block IPs using data group and irule

1) Create a data group

Local Traffic > Virtual Servers > iRules > Data Group List

Create data group with Type Address

Add IP address to IP field and provide description in the value field

You can add a list of IP addresses to be blocked.

2) Create an iRule

when HTTP_REQUEST {

 foreach allxforwardvalues [HTTP::header values X-Forwarded-For] {

  foreach destip [split [string map {" " ""} $allxforwardvalues] ","] {

if { [class match -- $destip equals ip_blacklist] } {  

     reject

     event disable all

     return

   }

  }

 }

}

3) Add the iRule to virtual  ip

tcpdump

tcpdump -ni 0.0:nnn -s0 host x.x.x.x and host y.y.y.y -w /var/tmp/tdump1cap

11.4 configuration load issue

Problem:
Configuration did not load properly message with a yellow bar after logging into ltm. You were able to see most of the config in spite of warning message.

Solution:
ssh into ltm
#tmsh load sys config verifyThe output will indicate the issue.

If you see no errors during verify but still getting the warning from the console, run this command.
#tmsh load sys config

Also, execute the following command to clear and rebuild the cache after next restart.
touch /service/mcpd/forceload
http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13030.html?sr=32060389

NTP setup

To setup NTP on LTM 11.x,

GUI:
System -> Configuration -> Device -> NTP
Add the servers to the list and update.

Command:
SSH into LTM

#tmsh
/Common (tmos)#modify /sys ntp servers add {10.18.21.240 10.18.21.241}
/Common (tmos)#save /sys config
/Common (tmos)#list /sys ntp servers

To restart ntpd service, in case of issues,
#bigstart restart ntpd

tmsh commands

1) Displays memory information

tmsh show /sys tmm-info

2) tmsh load sys config partitions all

Display network information

#tmsh
#net
#show interface 

or 

#show interface 1.5 (where 1.5 is the interface key)

Load balancing Microsoft Active Directory LDAP

Steps to load balance Microsoft active directory ldap servers

1) Login to F5 BigIP LTM https://loadbalancerip

2) Create a ldap monitor 

    Main -> Local Traffic -> Monitors -> Monitor List -> Create

2) Create a pool

    Main -> Local Traffic -> Pools -> Pool List -> Create

3) Add pool members to the ldap-ad pool created in the previous step

    Main -> Local Traffic -> Pools -> Pool List -> ldap-ad -> Members

4) Create a virtual server

    Main -> Local Traffic -> Virtual Servers -> Virtual Server List -> Create

LDAP servers are ready for load balancing.

F5 setup for Lotus Sametime

Virtual Server	Pool	Monitor
sametime-community	sametime-community	sametime-http
virtual ip	server1 ip	Interval 30
port 1533	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 1533	Send String GET /names.nsf?login HTTP/1.0\r\n\r\n
Source Address Affinity (persistence)	Least Connections (Node)	Receive String Log In
Snat automap
sametime-meetings	sametime-meetings	sametime-tcp
virtual ip	server1 ip	Interval 30
port 8081	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 8081
Source Address Affinity (persistence)	Least Connections (Node)
Snat automap
sametime	sametime	sametime-http
virtual ip	server1 ip	Interval 30
port 80	server2 ip	Timeout 91
tcp_lan_optimized (Server and Client profiles)	port 80	Send String GET /names.nsf?login HTTP/1.0\r\n\r\n
Source Address Affinity (persistence)	Least Connections (Node)	Receive String Log In
Snat automap
http profile