EXAMPLE.COM

Contents:

Previous topic

Pools

Next topic

Security Policy

Community Training Classes & Labs > EXAMPLE.COM Index

Virtuals

../../../_images/waf_create_vips.png

An LTM VIP needs to be created in order to accept traffic from the ADC.

Navigate to: Local Traffic ›› Virtual Servers : Virtual Server List ›› New Virtual Server

../../../_images/waf1_virtual_creation.png

Create VIPS on all four WAF devices according to the follwing tables

  1. asm1.site1

    Setting Value
    Name site1_waf1_virtual
    Destination Address/Mask 10.1.50.101
    Service Port 443
    Protocol Profile (Client) shared/example.com_tcp_profile
    HTTP Profile shared/example.com_http_profile
    SSL Profile (Client) clientssl
    SSL Profile (Server) serverssl
    Source Address Translation Auto Map
    Default Pool pool shared/site1_adc_https_pool

    TMSH command for asm1.site1:

    tmsh create ltm virtual site1_waf1_virtual { destination 10.1.50.101:https ip-protocol tcp profiles add { clientssl { context clientside } serverssl { context serverside } shared/example.com_http_profile { } shared/example.com_tcp_profile { } } source-address-translation { type automap } security-log-profiles add { "Log all requests" } pool shared/site1_adc_https_pool }

  2. asm2.site1

    Setting Value
    Name site1_waf2_virtual
    Destination Address/Mask 10.1.50.102
    Service Port 443
    Protocol Profile (Client) shared/example.com_tcp_profile
    HTTP Profile shared/example.com_http_profile
    SSL Profile (Client) clientssl
    SSL Profile (Server) serverssl
    Source Address Translation Auto Map
    Default Pool pool shared/site1_adc_https_pool

    TMSH command for asm2.site1:

    tmsh create ltm virtual site1_waf2_virtual { destination 10.1.50.102:https ip-protocol tcp profiles add { clientssl { context clientside } serverssl { context serverside } shared/example.com_http_profile { } shared/example.com_tcp_profile { } } source-address-translation { type automap } security-log-profiles add { "Log all requests" } pool shared/site1_adc_https_pool }

  3. asm1.site2

    Setting Value
    Name site2_waf1_virtual
    Destination Address/Mask 10.1.60.101
    Service Port 443
    Protocol Profile (Client) shared/example.com_tcp_profile
    HTTP Profile shared/example.com_http_profile
    SSL Profile (Client) clientssl
    SSL Profile (Server) serverssl
    Source Address Translation Auto Map
    Default Pool pool shared/site2_adc_https_pool

    TMSH command for asm1.site2:

    tmsh create ltm virtual site2_waf1_virtual { destination 10.1.60.101:https ip-protocol tcp profiles add { clientssl { context clientside } serverssl { context serverside } shared/example.com_http_profile { } shared/example.com_tcp_profile { } } source-address-translation { type automap } security-log-profiles add { "Log all requests" } pool shared/site2_adc_https_pool }

  4. asm2.site2

    Setting Value
    Name site2_waf1_virtual
    Destination Address/Mask 10.1.60.102
    Service Port 443
    Protocol Profile (Client) shared/example.com_tcp_profile
    HTTP Profile shared/example.com_http_profile
    SSL Profile (Client) clientssl
    SSL Profile (Server) serverssl
    Source Address Translation Auto Map
    Default Pool pool shared/site2_adc_https_pool

    TMSH command for asm2.site2:

    tmsh create ltm virtual site2_waf2_virtual { destination 10.1.60.102:https ip-protocol tcp profiles add { clientssl { context clientside } serverssl { context serverside } shared/example.com_http_profile { } shared/example.com_tcp_profile { } } source-address-translation { type automap } security-log-profiles add { "Log all requests" } pool shared/site2_adc_https_pool }

https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-1-0/4.html#conceptid

Previous Next