Manual Chapter : Configuring PEM Sessions

Applies To:

Show Versions Show Versions

BIG-IP PEM

  • 13.0.1, 13.0.0
Manual Chapter

Overview: Configuring PEM Sessions

In the BIG-IP® system, the Policy Enforcement Manager™ (PEM™) provides a greater level of manageability for subscriber sessions and flexibility.
Session creation
The PEM profile controls creation of sessions for traffic originated on Internet side.
Flow termination
The PEM global option controls flow termination on session delete.
TCL scripts support
The PEM TCL filter supports the multiple line TCL scripts and variables.

Creating sessions from server side

You can drop unknown traffic from server side by disabling unknown subscriber session creation for a PEM profile, or enable it so that a session can be created from the server side.
  1. On the Main tab, click Subscriber Management > Profiles > Subscriber Management .
    The Subscriber Management screen opens.
  2. ClickCreate.
    The New Subscriber Management Profile screen opens.
  3. In the Name field, type a unique name for the subscriber management profile.
  4. At the right of the Session Creation From Server Side setting, select the Custom check box, and then select Disabled from the list so that the session is not created for the server side IP. The deafault value is Enabled.
  5. From the Drop Unknown Traffic From Server Side option, select Enabled to drop unknown traffic from server side. The default value is Disabled.
  6. Click Finished.
    The system creates a session based on server side IP when the server side traffic comes.
  7. On the Main tab, click Local Traffic > Virtual Servers .
    The Virtual Servers List screen opens.
  8. Select a virtual server you have already created.
  9. In the Name field, type a unique name for the virtual server.
  10. For Configuration, select Advanced.
  11. Scroll down to the Subscriber Management Profile list, and select the subscriber management profile you created.
    The subscriber management profile linked to the session creation for server side is attached to the virtual server here.
The Subscriber Management profile controls session creation for traffic that originates on the server side.