A10 ACOS study plan

Diagram the full client-to-real-server packet path for routed, one-arm, and transparent deployment modes, labeling where SNAT and destination NAT occur.

Configure initial access in a lab instance: management IP, default gateway, admin credentials, and SSH/HTTPS remote access, recording every command used.

Create two VLANs with interface IPs plus a static route, then verify connectivity with ping and show commands.

Compare hardware and virtual ACOS deployments and list which operational tasks differ between them.

Describe how a virtual server, service group, and real server bind together, then build one complete binding in the lab.

Configure a Layer 4 TCP virtual server backed by a two-member service group and confirm traffic is spread across both members.

Trace a single client request through counters or a packet capture to prove it reaches the VIP and leaves via a real server.

Maintain a running glossary of ACOS objects and terms, adding at least ten entries with a one-line definition each.

Differentiate at least five load-balancing methods and predict which member receives each of ten sequential connections before testing.

Configure source-IP and cookie persistence, then demonstrate that twenty consecutive requests from one client stay on a single member.

Implement source NAT so return traffic from real servers flows back through the ACOS device correctly.

Apply a service-group template to two separate service groups and verify both inherit the intended port and monitor settings.

Build HTTP, TCP, and ICMP health monitors with deliberately different intervals, timeouts, and retry counts.

Interpret monitor status and counters to explain precisely why one member was marked down and another stayed up.

Stop the web service on one real server and verify automatic removal from rotation, then restart it and verify re-addition.

Calculate worst-case failure detection time from interval multiplied by retries, and justify the tuning you chose for each monitor.

Schedule and execute a maintenance window using disable, weight reduction, and slow-start connection ramp on one member without a client-visible outage.

Apply per-real-server connection and rate limits and measure the effect under a generated load.

Diagnose a flapping member using health-check history and logs, then correct the root cause.

Write a rolling maintenance runbook that a colleague could follow without additional explanation.

Generate a CSR, obtain a certificate with its intermediate chain, and install both on the ACOS device.

Configure SSL/TLS offload on an HTTPS virtual server and verify the served chain with a command-line TLS client.

Restrict the accepted TLS versions and cipher suites, then confirm that a weak protocol or cipher handshake is rejected.

Draft a certificate inventory and renewal checklist covering expiry tracking, chain order, and key handling.

Explain active-standby and active-active HA models, then configure a two-device redundant pair with priorities and failover triggers.

Force a failover and measure the interruption window, recording sync status and preemption behavior.

Back up the running configuration, restore it onto a second device, and confirm parity with a diff.

Configure role-based admin accounts, NTP, and remote logging, then verify each service is receiving data.

Rebuild a complete end-to-end scenario from a blank configuration in under sixty minutes: VIP, two members, monitors, TLS offload, and HA.

Complete a timed sixty-question practice set across all five domains and score at least 85 percent.

Rewrite condensed notes for the three weakest objectives identified by the practice results.

Recite from memory the default values and decision points most likely to be tested, such as monitor defaults, persistence behavior, and failover triggers.