Example Declarations

This section contains a number of additional example declarations you can use. Use the following index, or the links on the right to go to a specific category of declaration.

The following categories were introduced with the release of BIG-IP DO 1.17.

Important

The following examples include passwords that may not be valid for BIG-IP v14.0 and later. See BIG-IP Secure Password Policy for specific requirements.

Note

All of the examples will work on BIG-IP and BIG-IQ, however, when using BIG-IP DO on a BIG-IQ, you must add the BIG-IQ section to the declaration (see Using BIG-IP DO on BIG-IQ and the BIG-IQ examples for details).

Basic Examples

• Basic examples
  • Standalone declaration
  • Clustered declaration
  • Using JSON Pointers
  • User class

Network Objects

• Network Objects
  • Adding Route Domains to a declaration
  • Setting the DAG IPv6 prefix length
  • Configuring Traffic Control properties
  • Using the CMP Hash property in a VLAN
  • Configuring MAC Masquerading on Traffic Groups
  • Configuring VLAN Failsafe
  • Configuring a DNS Resolver
  • Configuring a TCP Forward Tunnel
  • Configuring Traffic Groups
  • Configuring routing prefix lists
  • Configuring BGP Routing in a declaration
  • Configuring a Firewall policy in a declaration
  • Configuring Auto Last Hop on VLANs
  • Specifying a static management IP address in a declaration
  • Preserving DHCP routes when adding new management routes
  • Configuring firewall rules on the management interface
  • Configuring routes and managementRoutes
  • Configuring routing access lists
  • Configuring VXLAN tunnels
  • Enabling management DHCP in a declaration

Clustering

• Clustering Examples
  • Clustered declaration
  • Clustered declaration with IP addresses for Device Group owner and members
  • Configuring multiple failover unicast addresses
  • Configuring connection and persistence mirroring
  • Configuring Failover Multicast settings

Authentication

• Authentication Examples
  • Adding public SSH keys to a declaration
  • Configuring BIG-IP authentication methods
  • Configuring Remote Roles for authentication
  • Configuring SSHD settings in a declaration
  • Updating the TLS/SSL Device Certificate in a declaration
  • Using variables in some remote role properties
  • Configuring a BIG-IP password policy
  • Referencing a URL in the sslCaCert property of Authentication_ldap

Observability

• Observability Examples
  • Creating an Analytics profile to enable AVR data streaming
  • Configuring SNMP in a declaration
  • Configuring a System Log (syslog) Destination in declaration
  • Configuring Audit Logging in a declaration
  • Configuring Security Analytics in a declaration

BIG-IQ Examples

• BIG-IQ example declarations
  • Licensing with BIG-IQ: Regkey Pool - Route to BIG-IP
  • Licensing with BIG-IQ: Utility Pool - Route to BIG-IP
  • Licensing with BIG-IQ: Utility Pool - No Route to BIG-IP
  • Licensing with BIG-IQ: Purchased Pool - Route to BIG-IP
  • Licensing with BIG-IQ: Purchased Pool - No Route to BIG-IP
  • Revoking a BIG-IP license from BIG-IQ without relicensing
  • Revoking and relicensing a BIG-IP (with route) from BIG-IQ
  • Revoking and relicensing a BIG-IP (no route) from BIG-IQ
  • Revoking and relicensing a BIG-IP (no route) from a different BIG-IQ
  • Onboarding a BIG-IP in AWS via BIG-IQ
  • Using an external authentication provider for BIG-IQ licensing
  • Onboarding a BIG-IP in Alibaba via BIG-IQ

GSLB Examples

• GSLB Examples
  • Configuring global GSLB settings in a declaration
  • Configuring a GSLB Data Center
  • Configuring a GSLB Server
  • Configuring GSLB health monitors
  • Configuring a GSLB prober pool

Miscellaneous

• Miscellaneous Examples
  • Configuring HTTPD settings in a declaration
  • Configuring System settings in a declaration
  • Using the userAgent Controls property
  • Enabling traces in BIG-IP DO responses
  • Creating Routes in the LOCAL_ONLY partition
  • Warning users the BIG-IP is under AS3 automation
  • Increasing the memory allocated to the restjavad daemon
  • Using the dryRun Controls property to test the declaration without deploying it
  • Relicense a BIG-IP while revoking the current license
  • Configuring BIG-IP ASM options
  • Configuring username and password prompts