If you want to steer specific traffic (or otherwise regulate certain types of
traffic) you must first develop appropriate enforcement policies. If using a Gx
interface to a PCRF, you need to create a new virtual group in listeners that connect to
You can create listeners that specify how to handle traffic for policy enforcement.
Creating a listener performs preliminary setup on the BIG-IP®
system for application visibility, intelligent steering, bandwidth management, and
On the Main tab, click
The Listeners screen opens.
Click Data Plane.
The Data Plane screen opens.
Click Add Group.
The New Virtual Group screen opens.
In the Name field, type a unique name for the listener.
In the Destination Address field, type the IP address of the
virtual server. For example, 10.0.0.1 or
Note: When you use an IPv4 address without specifying a prefix, the BIG-IP® system automatically uses a /32
Tip: You can use a catch-all virtual server (0.0.0.0)
to specify all traffic that is delivered to the BIG-IP® system.
Configure the source and destination setting, during forwarding mode only. In the relay
mode, the client does not have an IP address and the DHCP provides the client with an IP
The system will create a virtual server using the address or network you
For the Service Port setting, type or select the service port
for the virtual server.
From the VLAN and Tunnel Traffic list, select Enabled
on. Then, for the VLANs and Tunnels setting, move the
VLAN or VLANs on which you want to allow the virtual servers to share traffic from the
Available list to the Selected list.
For the VLANs and Tunnels setting, move the VLANs and tunnels
that you want to monitor from the Available list to the
In the Policy Provisioning area, select enforcement policies to apply to the
For Global Policy, move policies to apply to all subscribers
to High Precedence or Low Precedence.
Note: For URL categorization to take effect, you need to associate the
enforcement policy with a classification profile.
For Unknown Subscriber Policy, move policies to use if the
subscriber is unknown to Selected.
The system applies the global policy to all subscribers in parallel with the
subscriber policies, and must be configured with unknown subscriber policy.
High-precedence global policies override conflicting subscriber policies, and
low-precedence policies are overridden by conflicting subscriber policies.
The Policy Enforcement Manager creates a listener.
When you create a listener, Policy Enforcement Manager™ also
creates virtual servers for each type of traffic (TCP, UDP, or both and IP), and a
virtual server for HTTP traffic. The system sets up classification and assigns the
appropriate policy enforcement profile to the virtual servers. If you are connecting to
a RADIUS authentication server, a virtual server for RADIUS is also added.
Now you can send traffic through the network. As network traffic moves through the
BIG-IP® system, the system classifies the traffic, and if you
have developed policies, the system performs the actions specified by the enforcement