F5-301A study guide
F5-301A · Work through your exam, one topic at a time.
F5-301A - usually written as 301a - is the exam code associated with the F5 BIG-IP Administrator credential, a mid-level certification for people who run BIG-IP application delivery controllers day to day. It suits administrators, network engineers and operations staff who already touch BIG-IP configuration and want their practical skills validated, rather than architects or developers working purely with APIs and automation. The F5-301A study guide has 8 sections and about 2,967 words.
01Setup and Initial Configuration
Initial configuration takes a BIG-IP from an unconfigured appliance to a licensed, provisioned, correctly clocked system. At first boot the console setup utility prompts for the management IP, netmask, gateway, hostname, DNS, NTP and the admin password.
344 words, about 2 min02Network Configuration: VLANs, Self IPs and Routes
Network configuration is split across two planes. The management interface has its own routing table ( sys management-ip , sys management-route ); data traffic through TMM uses VLANs, self IPs and routes.
398 words, about 2 min03Local Traffic Objects: Nodes, Pools and Monitors
A node is a logical server address; a pool member is a node plus a port. Pools hold members and select one with a load-balancing method - round robin, least connections, observed, predictive, ratio, dynamic ratio, fastest, and priority groups.
379 words, about 2 min04Virtual Servers and Profiles
A virtual server is a listener: destination address, port and type, plus a default pool and profiles. Types matter - Standard proxies TCP/UDP fully; Performance (Layer 4) is faster but has no HTTP awareness; Forwarding (IP) forwards without a pool; Network virtual servers match traffic rather than a socket; Reject drops cleanly.
338 words, about 2 min05NAT and SNAT
SNAT rewrites the client source address on outbound traffic. Three options exist on a virtual server: None (source preserved, so the server must route back through the BIG-IP), Automap (source rewritten to the self IP of the VLAN the traffic egresses), and a SNAT pool (one of a defined set of translation addresses).
379 words, about 2 min06SSL/TLS and Certificate Management
TLS on the BIG-IP is built from three objects: a certificate (public key plus identity), a private key, and an SSL profile referencing them. The client SSL profile terminates inbound TLS; the server SSL profile initiates outbound TLS to pool members.
379 words, about 2 min07High Availability and Device Service Clustering
High availability rests on three layers. A device trust establishes secure peer communication using certificates.
384 words, about 2 min08Monitoring, Logging and Troubleshooting
Monitoring is layered: statistics ( tmsh show ltm virtual , tmsh show sys tmm-traffic ), logs ( /var/log/ltm for TMM and iRule output, /var/log/audit for configuration changes, /var/log/messages for system events), and packet capture ( tcpdump on a VLAN or interface). Remote syslog is configured under sys syslog , and log levels decide how much noise reaches each file.
366 words, about 2 min