650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/73/2D/wKioL1X3gv6ACPqhAAElKScbTxA501.jpg "title=" 1.jpg " alt= "Wkiol1x3gv6acpqhaaelkscbtxa501.jpg"/>
First, the initialization of the configuration
1. Go to the command line and enter config configuration management address
2. Enter Web interface activation license (optional)
3. Update the device certificate System->device Certificate
Note: Multiple duplicate certificates need to be deleted
Second, network configuration (networks)
1. Configure VLANs
Generally create two vlan:internal and external, select interface
Internal Select 1.1;external Select 1.2
2. Configure the Self Ips
Typically two SELFIP:INTERNAL_SELFIP and EXTERNAL_SELFIP are created, and the associated VLAN (INTERNAL_SELFIP is the same network segment as the server)
Port Lock Select Allow Default, specific IP address see above table
III. Equipment Management configuration (device Management)
1. Configure the Sync IP address device->name (self)->device connectivity->configsync and failover
Configsync Select internal (at this time to ensure that the virtual network card and adapter are connected correctly, so that both BIGIP and the computer can communicate with each other), failover can be arbitrarily selected
Note: Both BIGIP1 and BIGIP2 complete this step in the next steps
2. Add trust list device Trust->peer list, fill in the other's management port IP address, user name and password
Configure the above steps, only need one side to add, both sides can trust each other
3. Add Equipment group device Groups, fill in the Device group type (General Sync-failover), pull the members in, and select Network Failover
4. Configure Traffic group traffic Groups, pull the members in, members are the server's IP address + port (optional, dual live needs)
Note: To do this here has been completed two machine synchronization, the following is the configuration of business testing
Iv. Local traffic configuration (locally traffic)
1. Configure Pools Select monitor and add members
2. Add virtual Servers, configure address, VLAN, Snat, pool
Here I do not use Snat, using Aotu map to automatically reverse into the INTERNAL_SELFIP into the server
This article is from the "Hellox" blog, make sure to keep this source http://echox.blog.51cto.com/6918071/1694851
LTM Dual-machine configuration manual V11