F5 Configuring BIG-IP DNS

COURSE OUTLINE:

Description

This course gives networking professionals a functional understanding of the BIG-IP DNS system as it is commonly used. The course covers installation, configuration, and management of the BIG-IP DNS system, and includes a combination of lecture, discussion, and hands-on labs.

Audience

System and network administrators responsible for installation, setup, configuration, and administration of BIG-IP DNS systems

Learning Objectives

BIG-IP initial setup (licensing, provisioning, and network configuration)
Overview of the Domain Name System and DNS resolution flow through BIG-IP DNS
Configuring DNS listeners
Accelerating DNS resolution with DNS Express, DNS cache, and DNS server load balancing
Intelligent DNS resolution with wide IPs and wide IP pools
Using probes and metrics to assist the intelligent DNS resolution process
Intelligent DNS load balancing methods
Monitoring intelligent DNS resources
Logging GSLB load-balancing decisions
Using DNSSEC
Integrating iRules in the DNS resolution process
Managing BIG-IP DNS sync groups

Course Outline:

1. Setting Up the BIG-IP System

Introducing the BIG-IP System
Initially Setting Up the BIG-IP System
Archiving the BIG-IP Configuration
Leveraging F5 Support Resources and Tools

2. Introducing the Domain Name System (DNS) and BIG-IP DNS

Understanding the Domain Name System (DNS)
Reviewing the Name Resolution Process
Implementing BIG-IP DNS
Using DNS Resolution Diagnostic Tools

3. Accelerating DNS Resolution

Introducing DNS Resolution with BIG-IP DNS
Configuring BIG-IP DNS Listeners
Resolving DNS Queries in the Labs (Lab Zone Records)
Load Balancing Queries to a DNS Server Pool
Accelerating DNS Resolution with DNS Cache
Accelerating DNS Resolution with DNS Express
Introducing Wide IPs
Using Other Resolution Methods with BIG-IP DNS
Integrating BIG-IP DNS into Existing DNS Environments

4. Implementing Intelligent DNS Resolutions

Introducing Intelligent DNS Resolution
Identifying Physical Network Components
Identifying Logical Network Components
Collecting Metrics for Intelligent Resolution
Configuring Data Centers
Configuring a BIG-IP DNS System as a Server
Configuring a BIG-IP LTM System as a Server
Establishing iQuery Communication between BIG-IP Systems
Configuring a Non-F5 Server
Defining Links and Routers
Configuring Wide IP Pools
Configuring Wide IPs
Managing Object Status
Using the Traffic Management Shell (TMSH)

5. Using LDNS Probes and Metrics

Introducing LDNS Probes and Metrics

6. Load Balancing Intelligent DNS Resolution

Introducing Load Balancing on BIG-IP DNS
Using Static Load Balancing Methods
Using Dynamic Load Balancing Modes
Using Quality of Service Load Balancing
Persisting DNS Query Responses
Logging GSLB Load Balancing Decisions
Using Manual Resume
Using Topology Load Balancing

7. Monitoring Intelligent DNS Resources

Exploring Monitors
Configuring Monitors
Assigning Monitors to Resources
Monitoring Best Practices

8. Advanced BIG-IP DNS Topics

Using DNSSEC
Setting Limits for Resource Availability
Using iRules with Wide IPs
Introducing Other Wide IP Types
Implementing BIG-IP DNS Sync Groups

9. Final Configuration Projects

Review Questions

10. Additional Training and Certification

Getting Started Series Web-Based Training
F5 Instructor Led Training Curriculum
F5 Professional Certification Program

11. Appendix A: BIND and ZoneRunner

Introducing BIND and ZoneRunner
Configuring BIND Files with ZoneRunner

12. Appendix B: Troubleshooting

Working with F5 Technical Support

RELATED COURSES

Courses
Cyber Security

CompTIA Advanced Security Practitioner (CASP) Prep Course

You have experience in the increasingly crucial field of information security, and now you’re ready to take that experience to the next level. CompTIAï¿½ Advanced Security Practitioner (CASP) (Exam CAS-002) is the course you will need to take if your job responsibilities include securing complex enterprise environments. In this course, you will expand on your knowledge of information security to apply more advanced principles that will keep your organization safe from the many ways it can be threatened. Today’s IT climate demands individuals with demonstrable skills, and the information and activities in this course can help you develop the skill set you need to confidently perform your duties as an advanced security professional. This course is designed for IT professionals who want to acquire the technical knowledge and skills needed to conceptualize, engineer, integrate, and implement secure solutions across complex enterprise environments.

This course can also benefit you if you intend to pass the CompTIA Advanced Security Practitioner (CAS-002) certification examination. What you learn and practice in this course can be a significant part of your preparation.

Courses
Cyber Security

Dell SonicWALL Network Security Basic Administration

This course provides you with the background, knowledge, and hands-on experience to begin designing, implementing, and troubleshooting SonicWALL security appliances running SonicOS firmware. Attend this course, and receive one Dellï¿½ SonicWALLï¿½ SOHO security appliance and a one-year Comprehensive Gateway Security Suite license.

This technical training covers configuration and deployment of the SonicOS firmware. You will become familiar with a wide spectrum of SonicWALL’s innovative feature set, such as Unified Threat Management (UTM), Single Sign On, VPN, SSL VPN, and Content Filtering Service. As you examine the wide array of security features SonicOS has to offer, you will learn validation of settings and troubleshooting techniques using the SonicWALL diagnostic tools. Formative evaluations (knowledge checks and hands-on exercises) are incorporated throughout this course to test new skill sets.

To attend this course, prerequisite skills and knowledge are required, including completing three e-Learning courses prior to beginning this class. Information from these e-Learning modules is included on the certification exam. The prerequisite training is available from SonicWALL athttps://support.software.dell.com/sonicwall-nsa-series/training/100/dell-sonicwall-network-security-basic-administration-cssa-level-course-instructor-led-training and includes:

Network Security Technology Overview e-Learning (~ 4 hours)

For those new to network security, this optional online course provides an introduction to the key concepts and fundamentals of network security. While this course is not mandatory, it is strongly suggested.

Network Security Essentials e-Learning (~6 hours)

This online course will provide you with critical foundational information concerning firewall technology, security risks and remediation, and network security design and implementation considerations. Additionally, you will learn how to configure and implement SonicWALL firewall appliances and extend the firewall’s capability using rules, security applications, and other network specific functions and troubleshooting techniques. You will practice key activities through online simulations.

Virtual Private Networking with SonicOS e-Learning (~6 hours)

A critical follow-on to the Network Security Essentials e-Learning course, this online course will give you a comprehensive education in core VPN technology, design, and implementation considerations. You will also learn about SonicWALL-specific VPN configuration and deployment as well as troubleshooting techniques. As in Securing Networks with SonicOS, you will be able to practice key activities through online simulations.

Courses
Cyber Security

Cybersecurity Analyst+ (CSA+)

Learn about the duties of cybersecurity analysts who are responsible for monitoring and detecting security incidents in information systems and networks and for executing a proper response to such incidents. Depending on the size of the organization, this individual may act alone or may be a member of a cybersecurity incident response team (CSIRT). Gain the tools and tactics to manage cybersecurity risks, identify various types of common threats, evaluate an organization’s security, collect and analyze cybersecurity intelligence, and handle incidents as they occur. This is a comprehensive approach to security aimed toward those on the front lines of defense.

This course is designed to assist students in preparing for the CompTIAï¿½ Cybersecurity Analyst+ (Exam CS0-001) certification exam.

In addition, this course can help students who are looking to fulfill DoD directive 8570.01 for information assurance (IA) training. This program is designed for personnel performing IA functions, establishing IA policies, and implementing security measures and procedures for the Department of Defense and affiliated information systems and networks. (CompTIA Cybersecurity Analyst Plus)

Courses
Cyber Security

IBM Security QRadar SIEM Administration and Advanced Topics

In this course, you will learn how to minimize the time gap between when suspicious activity occurs and when you detect it. There are a variety of administrative tools you can use to manage a QRadar SIEM deployment. The next level of this course focuses on attacks and policy violations. These vulnerabilities leave their footprints in log events and network flows of your IT systems. To connect the dots, QRadar SIEM correlates these scattered events and flows into offenses that alert you to suspicious activities.

This course covers system configuration, data source configuration, and remote networks and services configuration. You will be able to configure processing of uncommon events, work with reference data, and develop custom rules using the skills taught in this course.