For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

EM Template MS Exchange 2007 CA Active Sync

Problem this snippet solves:

Creates a virtual server referencing a pool with a basic monitor, a basic TCP profile, a cookie insert persistence profile, a customized HTTP profile with compression & caching, and a generic clientSSL profile.

Product/Version Details

Tested on EM 1.4.1/LTM 9.4.0 Based on F5 Deployment Guide Deploying F5 with Microsoft Exchange Server 2007

How to use this snippet:

Creating a Template

  • Create a new template using the Configuration Template Text below.
  • Optional: Modify default pool member IP:port values
  • Optional: Modify object names to match your naming convention (making sure to maintain existing cross references)
  • Optional: Customize the monitor profile settings to provide the level of monitoring appropriate for your environment.
  • Optional: Customize the clientSSL profile settings to include the appropriate SSL certificate for the service.
  • Optional: Customize the HTTP profile settings as required to support the service in your environment.
  • Optional: Customize the persistence profile settings as required to support the service in your environment.
  • Optional: Customize the TCP profile settings as required to support the service in your environment.

Creating a Changeset

  • Use this template to create a changeset, substituting values for:
    • Destination - IP:port of virtual server
    • Pool members - IP:port of real servers

Code :

@define @members description "ActiveSync Pool Members" editable visible default "10.10.10.1:http 10.10.10.2:http"
@define @destination description "ActiveSync Virtual" editable visible  default "10.12.12.101:https"

#F5[Local Traffic / Monitor]
#F5[$target_partition$]
monitor exch_activesync_http {
   defaults from http
   interval 30
   timeout 91
}

#F5[Local Traffic / Pool]
#F5[$target_partition$]
pool exch_activesync_pool {
   lb method least conn
   monitor all exch_activesync_http
   members
      @members
}

#F5[Local Traffic / Profiles / ClientSSL]
#F5[$target_partition$]
profile clientssl exch_activesync_clientssl {
   defaults from clientssl
}

#F5[Local Traffic / Profiles / HTTP]
#F5[$target_partition$]
profile http exch_activesync_http {
   defaults from http-wan-optimized-compression-caching
   compress keep accept encoding enable
   redirect rewrite matching
   compress content type include
      "text/"
      "application/(xml|x-javascript)"
      "application/pdf"
      "application/vnd.ms-publisher"
      "application/vnd.ms-powerpoint"
      "application/vnd.ms-excel"
      "application/msword"
   compress content type exclude none
}

#F5[Local Traffic / Profiles / Persist]
#F5[$target_partition$]
profile persist exch_activesync_cookie {
   defaults from cookie
   mode cookie
}

#F5[Local Traffic / Profiles / TCP]
#F5[$target_partition$]
profile tcp exch_activesync_tcp {
   defaults from tcp
}

#F5[Local Traffic / Virtual Server]
#F5[$target_partition$]
virtual exch_activesync_virtual {
   pool exch_activesync_pool
   destination 10.133.20.204:https
   ip protocol tcp
   profiles
      exch_activesync_clientssl
      exch_activesync_http
      exch_activesync_tcp
   persist exch_activesync_cookie
}
Published Mar 12, 2015
Version 1.0
No CommentsBe the first to comment