How to turn off TLS1.0 – and only allow TLS1.1 and TLS1.2 on LTM 2000s

Create a new clientssl profile where you specify a custom cipher-string, keep the other settings as default. You can name this as 'profile_clientssl_base'.

If all you want is to disable TLSv1.0, and keep the rest as default, you can use

DEFAULT:!TLSv1

If your concern is with the upcoming PCI DSS 3.1 requirements (will be enforced in June 2016), have a look at here https://devcentral.f5.com/questions/pci-cipher-set. You should check out the second answer which is not User Accepted, if you don't want to disable more cipher suites than required.

This thread goes into detail on this

If you are unsure about changing the ciphers in the ssl profile then if you look in the Options list in the profile then there is an option No TLSv1 that you can use if you prefer

Also, have a look at this document which is totally recommended reading: https://f5.com/Portals/1/Premium/Architectures/RA-SSL-Everywhere-deployment-guide.pdf