Lab – Create an APM Policy

This lab will teach you how to create a basic APM Policy using the GUI. Estimated completion time: 20 minutes

Task - Setup Virtual Server

Go to Local Traffic -> Virtual Servers -> Create
Enter the following values (leave others default) Name: webtop_demo_vs Destination Address: 10.1.10.47 Service Port: 443 HTTP Profile: http SSL Profile (Client): f5demo_client_ssl Source Address Translation: Àutomap

Task - Create a Connectivity Profile

1. Go to Access -> Connectivity/VPN -> Profiles -> Add
Enter the following values (leave others default) Name: webtop_demo_cp Parent Profile: /Common/connectivity

Task - Create an AD Server as AAA

1. Go to Access -> Authentication -> Active Directory -> Create
Enter the following values (leave others default) Name: webtop_demo_aaa_srvr Domain Name: f5demo.com Server Connection: Direct Domain Controller: 10.1.20.251 Admin Name: service_account Admin Password: password

Task - Create a container (webtop)

1. Go to Access -> Webtop -> Webtop Lists -> Create
Enter the following values (leave others default) Name: webtop_demo_webtop Type: Full

Task - Create a Portal Access

1. Go to Access -> Connectivity/VPN: Portal Access List -> Create
Enter the following values (leave others default) Name: portal_intranet Link Type: Application URI Application URI: http://10.1.20.32 Caption: INTRANET

Task - Setup APM Profile

1. Go to Access -> Profiles / Policies -> Access Profiles (Per Session Policies) -> Create
2. Enter the following values (leave others default) then click Finished Name: webtop_demo Profile Type: All Profile Scope: Profile Languages: English
3. Click Edit for webtop_demo, a new browser tab will open
4. Click the + between Start and Deny, select Logon Page from the Logon tab, click Add Item
5. Enter the following values (leave others default) then click Save Form Header Text: Secure Logon <br> for "your demo organization"
6. Click the + between Logon Page and Deny, select AD Auth from the Authentication tab, click Add Item
7. Change the Server to /Common/webtop_demo_aaa_srvr, then click Save
8. Change the AD Auth Successful branch ending to Allow, then click Save
9. Click the + between AD Auth and Allow, select Advanced Resource Assign from the Assigment tab, click Add Item
10. Click on Add new Entry, then for the new Expression, click Add/Delete. Add the following resources, and then click Update and Save Portal Access: /Common/portal_intranet Webtop: /Common/webtop_demo_webtop
11. Click Apply Access Policy in the top left and then close the browser tab

Task - Add the Access Policy to the Virtual Server

1. Go to Local Traffic -> Virtual Servers -> webtop__demo_vs
2. Modify the Rewrite Profile setting to rewrite, Access Profile to webtop_demo and Connectivity Profile to webtop_demo_cp, then click Update
3. Test access to https://webtop.vlab.f5demo.com (you can use the bookmark in Chrome) from the jump host, you should see a logon page. You can login with any user: sales_user sales_manager partner_user