v11.4.x tmsh - how to enable and select an ASM policy; DoS policy

ASM is a bit more complicated in TMSH. The GUI creates this goofie policy link. You'd need to do the same in TMSH but without the goofiness.

First: create an ASM policy:

create asm policy test-asm-policy { active encoding utf-8 blocking-mode enabled policy-template some-template } 

Now you need to create an LTM policy referencing it:

create ltm policy test-ltm-asm-policy { controls add {asm} requires add { http } rules add { default { actions add { 1 { asm enabled policy test-asm-policy } } } strategy first-match }

Now you can add it to your Virtual with a create or modify

modify ltm virtual test-http-virtual { policy add|replace-all-with { test-ltm-asm-policy }}

I don't use DDos policies, but I'm sure it's a similar procedure.