F5 BIGIP LinkController v9 配置指南lx修改版

F5 link controller操作说明：（此文档仅供参考）一、网络环境电信公网地址171.8.0.58掩码24位，网关171.8.0.1联通公网地址222.143.24.153 掩码28 网关222.143.24.153Web1地址192.168.0.1掩码24位网关192.168.0.220端口80Web2地址192.168.0.2掩码24网关192.168.0.220位端口80Web1网站域名Web2网站域名需求：1、内部用户使用双线访问外网，2、互联网用户访问内部网站按照运营商进行判定二、操作说明Outbount流量配置配置VLan分别建立中国联通、中国电信、服务器网关三个VLAN，如下图所示：配置Self IP配置对应vlan接口地址，如下图所示：配置三个端口对应的self ip建立pool建立Default_Gateway_Pool,如下图所示：建完之后，members如下：设置默认路由选中routes配置默认路由添加Virtual Servers这样内部服务器就可以访问互联网。

内部服务器访问互联网FTP必须做以下配置优化（按照不同运营商地址走相对应的线路）建立电信地址池ct_pool建立联通地址池cnc_pool设定好Pool以后，我们需要定义中国电信和中国联通地址段的Class，然后在Rules中根据class来识别用户去往那个运营商。

建立电信class建立联通class建立规则把规则和virtual servers 关联起来这样流量就按照不同运营商地址进行转发。

Inbount流量配置建立server_pool, (内部服务器ip地址为：192.168.0.1)建立serverbak_pool(内部服务器ip地址为：192.168.0.2)做公网地址映射如下图，电信和联通的公网地址都映射到内部服务器（192.168.0.1）Virtual Server建立完后，下一步需要配置Link(CT_Link,CNC_Link)CT-LinkCNC_LinkLink建立完毕后，建立ListenersWideip 域名解析配置同一公网ip地址映射到不同内网服务器首先要在pool中添加这台服务器地址，然后更改Virtual Servers配置。

bigstart Restarts the SNMP agent bigsnmpd. bigtop Displays real-time statistics.Config Configures the IP address, network mask, and gateway on the management (MGMT) port.Use this command at the BIG-IP system prompt prior to licensing the the BIG-IP system, and do not confuse it with the bigpipe config command or the BIG-IP Configuration utility.halt Shuts down the BIG-IP software application.hostname Displays the name you have given to the BIG-IP system.printdb Prints the values of one or more entries in the bigdbTM database. reboot Reboots the BIG-IP system.ssh and scp Access command line interfaces on other SSH-enabled devices, and copy files to or from a BIG-IP system.自定义Bigpipe shell名称bp> shell prompt <string>bp> shell prompt BIG-IP>系统Shell名称将变成:BIG-IP>此特性避开此限制,在Linux命令前加”!”.BIG-IP>!ls //查看目录BIG-IP>!ifconfig //查看接口配置•Routes•Self IP addresses•Packet Filters•Trunks (802.3ad Link Aggregation)•Spanning Tree Protocol (STP)•VLANs and VLAN groups•ARP配置Packet Filtering命令: bigpipe packet filter你可以定义一个包过滤规则来提供访问控制,速率shaping,审计. 配置路由命令:route (<route key list> | all | inet | inet6)F5的Show Tech[root@XXXX:Standby] config # qkviewGetting systemwide backup configuration files.Getting AOM information.Getting last 175 lines of log files.Getting last 175 lines of gzipped log files.Getting md5 sum information.Getting core file list.Getting Public Certificate information.Getting tmctl information.completed... 6 of 161 checks produced no dataDiagnostic information has been saved in file /var/tmp/-tech.out Please send this file to **************.bigtop - display real-time statistics-bytes display counts in bytes (vs bits)-pkts display counts in packets (vs bits)-reqs display counts in requests (vs connections)-vips <n> number of virtual servers to print-nodes <n> number of nodes to print-once print once and exit-delay <n> number of seconds between samples (default 4)-scroll disable full-screen mode-nosort disable sorting-conn sort by connection count (vs byte count)-delta sort by count since last sample (vs total)-n print IP address and services in numeric format-vname display virtual servers by name (vs IP address)-help, -h print this message日志文件系统1. Access the BIG-IP system prompt.2. Stop the BIG-IP system or put the system into a safe condition such as standby mode using the bigstart stop command.3. Type the following command:resize-logFSThis command prompts you for the desired file size in gigabytes.4. At the prompt, type an integer.The minimum allowed value is 1, and the maximum allowed value is 10.A prompt appears that allows you to confirm the specified file size.5. Type Y.A message appears, notifying you of the need for the BIG-IP system to perform a reboot, followed by a prompt, which allows you to permit the reboot operation. Note: Prior to rebooting, the BIG-IP system verifies that the integer you typed in step 3 is within the allowed range, and checks to ensure that enough disk space exists for the specified size.6. Type Y.A confirmation prompt appears.7. Type Y.The system displays messages indicating that the reboot operation is about to occur.8. Wait for the reboot operation to finish.When the system becomes available again, the newly-specified disk space for the log file will be in effect.WARNINGDo not delete the files: /shared/.LoopbackLogFS and /shared/LogFS_README, because this action deletes all of your log files.启用/禁用虚拟服务或虚拟地To enable or disable a virtual server, use the appropriate command syntax:bp> virtual <virtual addr>:<virtual port> enable | disableTo enable or disable a virtual address, use the appropriate command syntax:bp> virtual address <virtual addr> enable | disable从服务中移出单个的NodeYou can remove an individual node from service, or return an individual node to service from the bigpipe shell command line.To remove an individual node from service, use the following command:bp> node <node addr>:<node port> downTo return an individual node to service, use this command:bp> node <node addr>:<node port> up查看修改F5系统配置文件器来编辑或者查看这些文件,当你没有条件使用浏览器时,有时候修改配置文件很有必要.这就需要F5的无浏览器配置模式和命令行配置模式Important:在你编辑完bigip.conf or bigip_base.conf 重启MCPD service之前, 你必须运行bigpipe load 确保MCPD service 使用的是当前的配置数据alert.conf Stores definitions of SNMP traps (system default alerts).user_alert.conf Stores definitions of SNMP traps (user-defined alerts)./config/bigip.conf Stores all configuration objects for managing local application traffic, such as virtual servers, load balancing pools, profiles, and SNATs.Note that after you edit bigip.conf, and before you restart the MCPD service, you must run the bigpipe load command./config/bigip_base.conf Stores BIG-IP self IP addresses and VLAN and interface configurations. Note that after you edit bigip_base.conf, and before you restart the MCPD service, you must run the bigpipe load command./config/bigip.license Stores authorization information for the BIG-IP system./etc/bigconf.conf Stores the user preferences for the Configuration utility./config/bigconfig/openssl.conf Holds the configuration information for how the SSL library interacts with browsers, and how key information is generated./config/user.db Holds various configuration information. This file is known as the bigdb database. /config/bigconfig/httpd.conf Holds configuration information for the web server./config/bigconfig/users The web server password file. Contains the user names and passwords of the people permitted to access whatever is provided by the webserver./etc/hosts Stores the hosts table for the BIG-IP system./etc/hosts.allow Stores the IP addresses of workstations that are allowed to make administrative shell connections to the BIG-IP system./etc/hosts.deny Stores the IP addresses of workstations that are not allowed to make administrative shell connections to the BIG-IP system./etc/rateclass.conf Stores rate class definitions./etc/ipfwrate.conf Stores IP filter settings for filters that also use rate classes. /etc/snmpd.conf Stores SNMP configuration settings./etc/snmptrap.conf Stores SNMP trap configuration settings./config/ssh Contains the SSH configuration and key files./etc/sshd_config This is the configuration file for the secure shell server (SSH). It contains all the access information for people trying to get into the system by using SSH./config/routes Contains static route information.[root@ISAG-2:Standby] config # find_keysISAG-2 koradsatn. omtitra eodISAG-2 junl trig Cmi nevl5scnsdt md.6koradsatn. omtitra eodFound license key JTPBO-CHRSX-DGBIO-HOAHJ-MOZJEVALicense file location is: /sda.1/config/bigip.licenseFound license key JTPBO-CHRSX-DGBIO-HOAHJ-MOZJEVAUnmounting unneeded partitions... ISAG-2 junl trig Cmi nevl5scnsn Cmi nevl5scnsree aamd.<>junl trig Cmi nevl5scns<6>EXT3-fs: mounted filesystem with ordered data mode.ISAG-2 junl trig Cmi nevl5scns<6>kjournald starting. Commit interval 5 secondscompleteAbove information can be found in /tmp/keys.outManaging Local Application Traffic•Setting up load balancing•Controlling HTTP traffic•Implementing HTTP and TCP optimization profiles•Authenticating application traffic•Implementing persistence•Enhancing the performance of the BIG-IP system•Managing health and performance monitors•Implementing iRules设置VirtualServer负载均衡1. Decide what types of traffic you want the BIG-IP system to manage, as well as whether you want to implement session persistence, connection persistence, and remote authentication.2. For each decision in step 1, decide whether you want to use the corresponding default profile that the BIG-IP system provides, or whether you want to create a custom profile.3. Access the bigpipe shell.4. If you want to create custom profiles, use the profile command, specifying the appropriate type of profile as an argument. If you do not want to create custom profiles, skip this step.5. Create one or more load balancing pools, using the pool command.6. Create a virtual server, using the virtual command, and assign to it any profiles and pools that you created. If you are using default profiles, some of those profiles might already be assigned to the virtual server by default.配置克隆Pool克隆Pool设计是用于入侵检测,你可以针对一个VS设置一个克隆Pool,这个克隆的VS接收世的流量和普通Pool一样,你就可以复制流量到入侵检测系统中.1. Access the bigpipe shell.2. Use the virtual command, to create or modify a virtual server, specifying a value for the clone pool argument.配置最后一跳Pool默认,BIG-IP系统自动启用最后一跳特性是,如果你想禁用这个特性.然后自己手工定义一个最后一跳路由器,你可以建立一个最后一跳pool并且指定其属于某个VS当中.1. Access the bigpipe shell.2. Use the pool command to create a last hop pool that contains the router inside addresses.3. Use the lasthop pool argument with the virtual command to assign the last hop pool to a virtual server.If you have not assigned an SSL profile to the virtual server, use the profile argument with the virtual command to assign the profile to the virtual server.配置SNATs这里有两种基础方法来建议一个SNAT,你可以直接将一个转换地址委派给一个或多个源IP地址,或者你可以配置一个SNAT pool,然后委派这个SNAT pool到某个源IP地址,在较新的版本中,BIG-IP自动从SNAT Pool中选择一个转换地址Note that you can assign these types of mappings from within an iRule.To map a single translation address to an original address1. Access the bigpipe shell.2. Designate an IP address as a translation address, using the snat translation command.3. Map the translation address to one or more original IP addresses, using the snat command or the rule command.To map a SNAT pool to an original address1. Access the bigpipe shell.2. Create a pool of translation addresses (that is, SNAT pool), using the snatpool command.3. Map the SNAT pool to one or more original IP addresses, using either the snat command or the rule command.配置HTTP traffic你可以配置BIG-IP来控制HTTP流量:配置HTTP压缩,HTTP请求重定向,HTTP请求重写,插入和插除HTTP头,启用或者禁用cookie加密和SYN cookie支持,配置HTTP 类Profile, HTTP响应数据组块控制.Configuring HTTP compression配置BIG-IP系统压缩HTTP 服务响应1. Access the bigpipe shell.2. Configure the compression-related settings of an HTTP profile,using the profile http command.3. Assign the HTTP profile to a virtual server, using the virtual command.Redirecting HTTP requests你可以配置HTTP Profile来重定向HTTP请求,并且在这个Profile中定义一个Fallback主机1. Access the bigpipe shell.2. Using the profile http command, create or modify an HTTP profile, specifying a value for the fallback argument. You can specify either a URI or the default fallback host, or you can specify that you want no HTTP redirection.3. Verify that the HTTP profile you created or modified is assigned to a virtual server.Rewriting HTTP redirections你可以配置HTTP Profile来重写HTTP的重定向规则1. Access the bigpipe shell.2. Using the profile http command, create or modify an HTTP profile, specifying a value for the redirect rewrite argument.For example, to create a profile that only rewrites URIs matching the originally requested URI (minus an optional training slash), use the following syntax:profile http myHTTPprofile { redirect rewrite matching }3. Verify that the HTTP profile you created or modified is assigned to a virtual server.Inserting and erasing HTTP headers你可以配置HTTP Profile来插入一个头文件到HTTP请求,或者从HTTP请求中移出一个头文件1. Access the bigpipe shell.2. Using the profile http command, create or modify an HTTP profile, specifying a value for either the header insert, header erase, or insert xforwarded for options.3. Verify that the HTTP or Fast HTTP profile you created or modified is assigned to a virtual server.Enabling or disabling cookie encryption你可以使用Profile http中的两个选项来启用或者禁用cookie加密1. Access the bigpipe shell.2. Using the profile http command, create or modify an HTTP profile, specifying a value for the encrypt cookie and cookie secret options.3. Verify that the HTTP profile you created or modified is assigned to a virtual server.Enabling or disabling SYN cookie support为了管理DOS攻击,你可以在一个Fast L4 Profile中配置SYN Cookie选项启用或者禁用SYN Cookie支持功能◆如果BIG-IP系统包含了Packet Velocity ASIC (PVA)技术,使用profile fastl4命令,定义一个hardware syncookie(enable | disable | default)选项,同样,你可以根据需求设置以下的变量通过db命令.•pva.SynCookies.Full.ConnectionThreshold (default: 500000)•pva.SynCookies.Assist.ConnectionThreshold (default: 500000)•pva.SynCookies.ClientWindow (default: 0)值得注意的是这个hardware syncookie 特性目前只可用于D84和D88平台.在其实平台设备这个特性无效.所以如果你在D84和D88上设置software syncookie 特性,SYN Cookie只通过软件处理◆如果BIG-IP系统不包含Packet Velocity ASIC(PVA)技术,使用profile fastl4 命令,指定为software syncookie (enable | disable | default) option.Configuring the HTTP Class profileBIG-IP系统包含一种Profile叫做HTTP Class Profile,你可以使用你定义的标准来用分类HTTP流量,当你分类流量的时候,你转地流量的原则是根据审查目标流量的头文件或者内容来定.如果BIG-IP系统包含Application Security Manager (ASM)或者WebAcclerator模块,你可以配置系统来先发送HTTP流量到那个模块,然后再发送到最终目标,例如,你可以使用HTTP Class Profile来对Virtual Server下命令,要求它发送流量先经过ASM然后再转发到负载均衡Pool.Unchunking and rechunking HTTP response data如果你想要监控内容你可以取消或者重新对HTTP响应进行组块操作,只需要配置HTTP Profile来启用unchunking功能.1. Access the bigpipe shell.2. Using the profile http command, create or modify an HTTP profile and specify the response argument.3. Make sure that you have assigned the HTTP profile to a virtual server, using the virtual command.你能够设备的保持有以下几种:实施Session保持•Cookie•Destination Address Affinity•Microsoft Remote Desktop Protocol (MSRDP)•Hash•Session Initiation Protocol (SIP)•Source Address Affinity•SSL•Universal具体操作:1. Access the bigpipe shell.2. Create a persistence profile, using the profile command, that corresponds to the type of persistence you want to implement.3. Assign the persistence profile to a virtual server, using the persist and fallback persist arguments with the virtual command.实施连接保持为了实施连接保持,你可以添加一个Keep-Alive头文件到HTTP /1.0头文件里(如果不存在).(默认HTTP/1.1连接包含Keep-Alive支持),你同样可以启用connection pooling特性,它可以保持服务器端的连接打开,重新用来供其它客户端请求所使用.你可以通过修改HTTP或者Fast HTTP Profile文件来启用keep-alive支持和Connection pools.同样可以修改OncConnect Profile来实现.To add Keep-Alive headers into HTTP requests1. Access the bigpipe shell.2. To ensure that HTTP connections stay open, use the profile http command and specify the oneconnect transformations argument. This ensures that the BIG-IP system inserts aConnection:Keep-Alive header into any HTTP /1.0 request that does not already contain one.3. Make sure that you have assigned the HTTP or Fast HTTP profile to a virtual server, using the virtual command.To enable connection pooling1. Access the bigpipe shell.2. Using the profile oneconnect command, configure a profile for connection pooling.3. Assign the profile to a virtual server, using the profile argument with the virtual command.小提示:你同样可以通过配置Fast HTTP Profile来配置连接保持,在BIGPIPE SHEEL中使用fasthttp命令.加强BIG-IP性能BIG-IP系统.设置连接Qos和数据包TOS等级你可以使用bigpipe工具来设置QoS和TOS等级,你不仅可以对所有具有目标负载均衡Pool的流量做,同时你也可以对自定义的流量做,例如:Layer 4 ,TCP 和UDP流量.1. Decide whether you want to set QoS and ToS levels for traffic targeted for an entire pool or for specific types of traffic, or both.•If you want to set the QoS and ToS levels for an entire pool, access the bigpipe shell and use the pool command with one or more of the following arguments: link qos to client, link qos toserver, ip tos to client, and ip tos to server.•If you want to set the QoS and ToS levels for certain types of traffic, access the bigpipe shell and use the profile command to create or modify a Fast L4, TCP, or UDP profile.2. Verify that the pool or the profile that you created or modified is assigned to a virtual server. To do this, use the following syntax:bp> virtual <virtual server name> list设置空闲超时时间(Idle timeout time)或者修改一个Fast L4,Fast HTTP,TCP,或者UDP Profile.1. Create or modify a Fast L4, Fast HTTP, TCP, or UDP profile, by accessing the bigpipe shell and using the profile command.2. Specify the idle timeout argument to set a timeout value.3. Verify that the profile you created or modified is assigned to a virtual server.实施速率整形Virtual Server或者Packet Filter规则中.1. Access the bigpipe shell.2. Create one or more rate classes, using the rate class command.3. Assign the rate classes to a virtual server or a packet filter rule, using either the virtual command or the packet filter command.Implementing iRulesiRule特性强大而灵活,值得注意的是它可以增强BIG-IP系统能力.一个iRule可以引用任意object,它不管这个被引用的object处理哪个分区里.例如;一个iRule属于分区A,但包含指定一个Pool属于分区B的语句.1. Access the bigpipe shell.2. Create an iRule using the rule command. You must include the name of the Tcl script and the script itself as arguments for the command.3. Assign the iRule to a virtual server, using the virtual command in one of the following ways:•To associate multiple iRules with a virtual server, use this syntax:bp> virtual <virtual_server_name> rule <iRule1_name> \ <iRule2_name> ...•To remove the assignment of an iRule from a virtual server, use this syntax:bp> virtual <virtual_server_name> rule none•To remove the iRule assignments from multiple virtual servers, use the following syntax. Note that you can remove the iRule assignments only from virtual servers that reside in the current Write partition or in partition Common.bp> virtual all rule none•To associate an existing iRule with multiple virtual servers, use the following syntax. Note that you can associate an iRule only with virtual servers that reside in the current Write partition or in partition Common. bp> virtual all rule <iRule_name>Important: In this case, the iRule becomes the only iRule that is associated with each virtual server in the current Write partition. Because this command overwrites all previous iRuleassignments, we do not recommend use of this command.。

密级：文档编号：第版分册名称：第册共册BIGIP V9.0 SYSLOG 配置步骤SINOGRID北京信诺瑞得信息技术有限公司总页数正文附录生效日期：编制：邸加欣审核：批准：F5 BIGIP V9系列产品的日志系统采用syslog-ng，不再使用原来的syslog系统。

本文只描述在BIGIP上面配置syslog-ng，将日志发送到远程的日志服务器。

如需了解更多syslog-ng 的内容，请查阅相关资料。

一预置条件在配置之前，需要准备一台日志服务器，能够接收日志数据。

本文中采用一台Windows 环境的服务器，安装syslog软件3CDaemon V2.0，默认syslog监听端口514。

二配置步骤需求是local0的所有日志不再写到文件/var/log/ltm中，将日志发送到指定的服务器。

BIGIP syslog-ng的配置文件的路径是：/etc/syslog-ng/syslog-ng.conf，编辑配置文件syslog-ng.conf，定位到local0日志记录的位置处：# local0.* /var/log/ltmfilter f_local0 {facility(local0) and level(info..emerg);};destination d_ltm {file("/var/log/ltm" create_dirs(yes));};log {source(local);filter(f_local0);destination(d_ltm);};一个消息路径是由一个或者多个日志消息源、一个或者多个过滤规则以及一个或者多个日志消息目的组成的。

来自某个日志消息源的消息进入syslog-ng，如果消息命中某条规则，syslog-ng就把它发送到对应的日志消息目的。

对上面代码的解释如下：filter f_local0 {facility(local0) and level(info..emerg);}; #定义日志过滤规则，过滤local0的所有日志destination d_ltm {file("/var/log/ltm" create_dirs(yes));};#定义日志消息目的，写到指定文件中log {source(local); #指定消息源filter(f_local0);#指定过滤规则destination(d_ltm);#指定日志消息的目的};理解上面一段代码的意思之后，将日志发送到远程服务器就变得非常简单了。

F5 BIG-IP负载均衡器配置指导书目录一、网络结构与IP地址规划本手册以移动WAP/彩信网关为例网络拓扑结构如下图所示：整个数据网络设备，采用两台防火墙、两台BIG-IP 3600负载均衡器、及两台交换机、网络设备都采用主、备设备，以实现设备、链路的冗余备份，以消除单点故障。

这里部署负载均衡器的目的主要是为了增加服务器的数量，以提升系统的处理能力。

但对外仍然是一个IP地址。

相关的IP地址规划如下：注：以上的IP地址规划是测试环境的IP地址设置，需要根据现网环境中的IP地址规划进行修改。

注：建议现场工程师先填写以下规范表：二、配置BIGIP3600负载均衡设备本章将主要描述BIGIP3600负载均衡设备的配置方法及配置内容。

旁路/直连的选择2.1.1路由/直连模式的介绍 网络连接的物理结构如下结构：BigipSwitchServer Pool典型的结构–路由/直连Ip 规划说明：图中bigip 为负载均衡交换机，bigip 上面使用公开的ip 地址，bigip 下面同负载均衡的服务器使用不公开的ip 地址。

但对外提供服务则使用公开的ip 。

2.1.2旁路模式的介绍网络连接的物理结构如下结构：BigipBigipSwitchServer Pool典型的结构-旁路Ip 规划说明：图中bigip 为负载均衡交换机，bigip 和负载均衡的服务器均使用公开的ip 地址。

2.1.3 路由/直连模式同旁路模式的比较 （1）流量走向不一样；路由/直连模式的流量走向如下：SwitchServer Pool直连结构下正常流量走向234如上图，bigip 同客户端的流量在bigip 的上联接口，bigip 同服务器的流量在下面的接口。

旁路模式的流量走向如下：BigipBigipSwitchServer Pool旁路结构下正常流量走向1234如上图，bigip 无论同客户端还是同服务器的通讯流量均在bigip 的一个接口上。

如何创建网元目录目录1 创建外购件网元――F5 BIG-IP负载均衡器 ............................................................................. 1-21.1 组网图....................................................................................................................................................... 1.1-21.2 创建过程简介........................................................................................................................................... 1.2-21.3 准备工作................................................................................................................................................... 1.3-31.3.1 设备侧 .......................................................................................................................................... 1.3.1-31.3.2 I2000网管侧 ................................................................................................................................. 1.3.2-31.4 创建步骤................................................................................................................................................... 1.4-31.4.1 配置设备的SNMP Agent ............................................................................................................ 1.4.1-31.4.2 在I2000客户端创建网元 ........................................................................................................... 1.4.2-71.4.3 正确性检查................................................................................................................................... 1.4.3-81.5 常见问题处理........................................................................................................................................... 1.5-91.5.1 创建网元时系统提示无法连接设备........................................................................................... 1.5.1-91.5.2 创建设备成功，但收不到设备的告警信息............................................................................... 1.5.2-91 创建外购件网元――F5 BIG-IP负载均衡器本文描述了将一个F5接入网管的过程，通过创建网元操作使设备在I2000的拓扑视图中正常显示，且能够接受I2000的管理。

文档编号：000055ZH_PZSC_BP_XX_XXX_0706XXF5 BigIP V9 负载均衡配置手册1. 登录F5配置界面BigIP的最右边有一个独立的RJ45口，这个是配置口，新安装的BigIP 默认管理IP 是192.168.１.245 , 将工作站网卡IP 改为: 192.168.１.x 网段：然后：用浏览器https://192.168.1.245登录账号/密码admin/admin恭喜你，这时你已经进入V9管理界面，2.单一网段服务器负载均衡设置介绍接下来让我们来做一个简单的单一网段本地服务器负载均衡配置，拓扑图如下：InternalVS IP 192.168.5.248Self IP 192.168.5.249 192.168.5.77 172.16.5.79首先先配置网络设置：创建VLAN 以及VLAN 配置：Click “Network-VLANS - Create”来创建Internal Vlan :Internal VLANName : InternalInterfaces : 1.1 端口点击finished然后配置vlan管理IP Network-Self IPs-create InternalIP Address ：192.168.5.249Netmask ：255.255.255.0VLAN ：internal如果登录的客户端网段和vlan管理IP不在一个网段，必须要配置routes，properties-resource-usegateway 配置网关到这里我们就可以放弃使用配置口，而使用internal 这个VLANS的self Ips来登录配置了。

https://192.168.5.249网络配置好后，创建一个monitor ，选Local traffic -> Monitor -> 进行Monitor 创建。

Name : Monitor _tcp :interval : 20 Timeout : 61开始配置Pool :在这里指定我们刚才的monitor ，将服务器IP 及服务（port ）加入，选好负载均衡算法，点击finishedName : web_8080Health Monitors : monitor_tcpLoad Balancing Method : Round RobinNew Members : 192.168.5.77:8080192.168.5.79:8080创建一个基于cookie的会话，选Local traffic -> Profiles ->Persistance->createName : persisten_cookie_insert Persistence Type : cookie接下来，我们将建立Virtual Server , 并把我们定义好的Pool : web_8080 和Virtual server建立关系：Local Traffic-Virtual Server-Create其中需要更改的配置为：1. Name : Vs_web_802. Address : 192.168.5.2483．Port : 804. Http Profile : http5. Default Pool : web_80805 Define Persistence Profile : persisten_cookie_insert定义好后，选“ Finish “完成Virtual Server 的定义。

F5 BigIP V9 安装傻瓜书F5 NetworksSteven Zheng目录第一部分：设备安装前准备工作 (3)1. 设备及环境 (3)2. 设备连接和预设置 (3)第二部分：安装过程 (17)1. 网络启动BigIP : (18)2. 系统安装 (18)3. 安装License (24)4. 设置setup utility 界面 (29)第三部分：简单的服务器负载均衡设置介绍 (31)第一部分：设备安装前准备工作1. 设备及环境1．BigIP 一台（如果要做HA ，需要两台），本例使用一台BigIP 2400.2．工作站一台并且预安装了：Telnet 管理工具例如SecureCRT；SSH 工具例如F-Secure SSH Client；VMware Workstation (最好高点的版本例如4.5.2)3．各种连接线：网线（RJ45）, Console Cable ,等等4．上网环境：以便申请license 或其他上网需要2. 设备连接和预设置1．将工作站与BigIP 连接好：Console cable 连到BigIP Console 口和工作站COM 口，网线连到BigIP 的管理口MGMT和工作站网卡。

2．设置工作站COM 口设置：如果是SecureCRT 则设置如下：3．设置VMW ARE , 启动一个PXE 服务器作为网络安装服务。

打开vmware:新建一个Virtual Machine : click “new virtual machine “图标然后修改virtual machine Devices :删除USB Controller删除Audio添加Floopy添加CDROM 并指向相应的ISO Image好啦，你已经快完成了。

让我们来启动设置好的VMWARE virtual machine : V9_PXE , 启动时，你也许会看到一下错误：那是因为你没有把virtual machine 的BIOS 里把CDROM放在启动设备的最前面，你可以重启virtual machine 并进行设置按F2 进入virtual machine 的BIOS :修改后重启virtual machine , 进入到下面界面后：回车，选安装“ Server “ , 然后一路回车直到最后完成：Virtual machine （PXE Server ）的默认IP 是10.1.10.199, 这时，你可以把你的工作站网卡地址改成：10.1.10.x 的地址并Ping 看看通不通：C:\Documents and Settings\Administrator>ping 10.1.10.199Pinging 10.1.10.199 with 32 bytes of data:Reply from 10.1.10.199: bytes=32 time=2ms TTL=64Reply from 10.1.10.199: bytes=32 time<1ms TTL=64Reply from 10.1.10.199: bytes=32 time<1ms TTL=64Reply from 10.1.10.199: bytes=32 time<1ms TTL=64记得把防火墙关掉！！！好，你已经大功告成了，现在一切准备就绪。