Manual Chapter : Managing Local Traffic Profiles

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 5.3.0
Manual Chapter

How do I manage LTM profiles in BIG-IQ?

You can create or modify custom LTM® profiles in BIG-IQ® Centralized Management and then attach them to a virtual server to deploy them to your managed devices.

When you create a profile, you specify a parent profile from which the custom profile inherits its properties. You then specify which of these properties you want to override. You can name any existing profile as a parent profile. When you modify a profile that has child profiles (that is, profiles that name your profile as a parent profile), all of the child profiles inherit any changes you made in the parent profile (except those you choose to override).

Create an LTM profile

You must discover a device and import that device's service configurations before you can add a profile to that device from BIG-IQ® Centralized Management.

Creating a new profile allows you to specify the parameters that define the characteristics you want your virtual servers to use. Each virtual server that references this profile uses the parameters you specify for this profile. Additionally, the parameters you define for this profile are given to the profiles that name this profile as their parent profile.
  1. At the top of the screen, click Configuration.
  2. On the left, expand LOCAL TRAFFIC.
  3. Under LOCAL TRAFFIC, select Profiles.
    The screen displays the list of profiles defined on this device.
  4. Click Create.
    The New Profiles screen opens.
  5. In the Name field, type in a name for the LTM profile you are creating.
  6. For Partition, type the name of the BIG-IP® device partition on which you want to create the profile.
  7. For the Type, select the type of profile you want to create.
    The Parent Profile setting displays.
  8. From Parent Profile, select the parent profile from which you want your profile to inherit settings.
    Note: The parent profile you select determines the value of the profile parameters for this profile. You can override these values, but if you do not, changes made to parameters in the parent profile propagate to all child profiles.
    A number of additional settings display, specifying the parameters associated with the parent profile you selected. There are two controls for each field. The first one (a check box) controls whether you want to override the inherited value for that field. The second control (the type varies by field) sets the value you want for the parameter.
  9. For any fields you want to override, select the Override check box and then specify the value you want for the fields you selected.
    Note: You can select Override All if you want to override all of the parent profile parameter values.
    Important: If you override a parent profile parameter, regardless of whether or not you change the parameter's value, then future changes to the parent's parameter value will not be inherited by this profile.
    Note: For detailed information on the impact of using a particular profile parameter value, refer to the BIG-IP Local Traffic Management: Profiles Reference on support.F5.com.
  10. If you are adding a profile that requires a security parameter, specify the passphrase in the corresponding Passphrase field.
    Note: For version 12.0.0 devices, you do not need to supply the pass phase for the profile. For devices earlier than version 12.0.0, if you plan to make changes to a Client SSL profile, you need to supply the pass phrase for that profile. If you do not change any of the parameters for the profile or associate the profile with a virtual server or another client SSL profile, then you can leave this field blank. So, if you add a pre-version 12.0.0 device that has a significant number of profile definitions, you do not need to add the pass phrase for every profile, just the ones that you plan to change or associate with an LTM object.
  11. Click Save & Close.
    The system creates the new profile you specified and adds it to the list of profiles.
You can now use the profile you created. You can select it when you configure a virtual server. You can also use it as a parent profile to base new BIG-IP® LTM® profiles on.
You must deploy your changes to the BIG-IP device before you can see these changes on the device.

Edit an LTM profile

By editing a profile, you can revise the parameters that define the characteristics you want your virtual servers to use. Each virtual server that references this profile uses the parameters you specify for this profile. Additionally, the parameters you define for this profile are given to the profiles that name this profile as their parent profile.
  1. At the top of the screen, click Configuration.
  2. On the left, expand LOCAL TRAFFIC.
  3. Under LOCAL TRAFFIC, select Profiles.
    The screen displays the list of profiles defined on this device.
  4. Click the name of the profile you want to edit.
    The screen displays the current settings for the selected profile.
  5. Under Referenced by, note the virtual servers and profiles that refer to this profile.
    Changes you make to this profile impact all of the virtual servers listed here.

    Any changes you make to this profile are also inherited by all profiles listed here that name this profile as their parent profile.

  6. Under the Override All check box, select the check box corresponding to any fields you want to override, and then specify the value you want for the fields you selected.
    Note: You can select Override All if you want to override all of the parent profile parameter values.
    Note: For detailed information on the impact of using a particular profile parameter value, refer to the BIG-IP Local Traffic Management: Profiles Reference on support.F5.com.
  7. If you imported a profile that requires a security parameter, specify the passphrase in the corresponding Passphrase field.
    Important: For imported profiles that use passphrases:
    • If the profile was imported from a version 12.0.0 or later device, you do not need to re-enter the passphrase.
    • If the profile was imported from a device earlier than version 12.0.0 and you plan to make changes to the profile (or if you associate the profile with a virtual server or a child profile), then you must supply the passphrase for the imported profile.
    • If you do not change any of the parameters for the profile or associate the profile with a virtual server or a child profile, then you do not need to re-enter the passphrase.
  8. When your edits are complete, click Save & Close.
    The system updates the profile with the settings you specified and adds it to the list of profiles.
You must deploy your changes to the BIG-IP® device before you can see these changes on the device.