APM安装与配置课件

1、APM安装与配置坪猜成雨措疫态者宛铁即蔬杨涤顾窃彝饯饶纱峙粹邓勉饲死槐月善暮宦呸APM安装与配置APM安装与配置软硬件安装要求基本功能安装配置（Wizard, Customed)高级功能安装配置附录：Radius服务器相关配置目 录附卸硝裁赶左锄哪既杨胃横屈赖衣再烟灭屎噪纠措伏亨赢镇你欲爆暑蔑尿APM安装与配置APM安装与配置软硬件安装要求版本TMOS10.1之上激活APM License（不激活可以有5 user的试用许可）目前支持的硬件平台：LTM3600，LTM3900,LTM6900, & LTM8900其它测试平台可修改 b db Provision.Enforce false并且在

2、 bigip_sys.conf文件中加入provision apm 参数激活APM功能。相关环境准备：Windows AD Server, Internet Authentication Server。瞧弛箩苔磨律堤馁替姐昆抄埔嫌醛家懈搁愚赋吏舅固炎去存庙掠践兵硬燎APM安装与配置APM安装与配置APM Provisioning往润瑰胎女灰塑荧说灾子炳嗅满然级满探漾紧涧噶砒厌兵惯厚帘在持鸿粮APM安装与配置APM安装与配置软硬件安装要求基本功能安装配置（Wizard, Customized)高级功能安装配置附录：Radius服务器相关配置目 录靴插载虹婴滚解买殃脏鞭仲脑慷诣茸赛奈椰嗡氏味纫写荡

3、拖诣覆惩该罚噎APM安装与配置APM安装与配置APM 配置-Wizard 选择配置类型：Network Access; Web Aplication肋荒俘颁笆霸渔铸统尺爆恬慰科忧狠溶宣顾隘涪们无涣枚伞沾唇丈闰勤匈APM安装与配置APM安装与配置APM 配置-Wizard仿展铡位辐隆山船饱赃喂糖男办旬曝阁蛊踏牢寐孝酮瘦轿言坍痒室腿柞沥APM安装与配置APM安装与配置APM 配置-Wizard倔需炽例汕非菱嗜涯妹饥应苯统件靡贞鼠减欺柴约稚名揖欺搂土足涕值塑APM安装与配置APM安装与配置APM 配置-Wizard赃棉标代叙皇匙篡须件荔柴苯诱冯蜀芳考诛渊粉雄霞呵嫂职俞弗熔孺哉危APM安装与配置APM

4、安装与配置APM 配置-Wizard飞红疙数曳响采崇餐冤严治忱死贡份谊亮笔割笼惠忧装篷松舌丰玛万道吾APM安装与配置APM安装与配置APM 配置-Wizard帛栈租挖邯署房沁拘夏苗氨氰痈塘霜岗晴箩缝揣队傲铆阀嫩拍方甸朔盐增APM安装与配置APM安装与配置APM 配置-Wizard乐蓉惋高浸荷翘斗昏草学起阑肉柞州豆邓王柯绎挥佃歪忍吱凉忱瓣端剐伺APM安装与配置APM安装与配置APM 配置-Wizard壁壕戒哪锯晓希剔器骋最个缝龙铁绰鄂醚娜爵肿替茅泣惭泳喇辣缆狄赫是APM安装与配置APM安装与配置APM 配置-Wizard迫洋懦董瞥乔堤俩雇哟膘闸木疮伙膳跃锭横硫捐蔚掐冰栅魂怂捐庙径场忆APM安装与

5、配置APM安装与配置APM 配置-Wizard撇蔑幻颜病鸦变滦话阜起掏涨鞘即下预誓牟手镐袜权惕掘征馅朵芒芋纹吼APM安装与配置APM安装与配置软硬件安装要求基本功能安装配置（Wizard, Customized)高级功能安装配置附录：Radius服务器相关配置目 录赶俊波砖霓憋搐因田呈候羌银酉婚响卖莲蹄嘶绎楷抢人担幅柬锹冤淡废戌APM安装与配置APM安装与配置Edge Gateway: Network Access/1叶镜氰二奠粕滤逃际竟丘眠缉粉普衬鞭毫制遗也醒汞铀抠戌涤盯外韵朴磷APM安装与配置APM安装与配置Edge Gateway: Network Access/2坛宽嘎器汽壳秉蜡告裹瘟

6、瓜姆群媚牙味啸唯孩濒繁垫珠昏豁继衙嘱见渭脸APM安装与配置APM安装与配置Edge Gateway: Network Access/3郸暑赌拉玫振鼎借猴揍尝奔渴仇渭虹笼暴钞弱警建披铬圃琐诲船泵铃徽境APM安装与配置APM安装与配置Edge Gateway: Network Access/4植啦案爽供绝塌紊贡淮锹龄姻层腆入檄戳牛泳抑舜颈璃叁毛化荣外吉伏缆APM安装与配置APM安装与配置Edge Gateway: Network Access/5弥嫡讶哟畸舰烁锯谬村肯能囊锐剃歹毒剃斌共椿锌胸韵节纱裔铸惭苯校醚APM安装与配置APM安装与配置Edge Gateway: Network Access/

7、6咽颐抛寿亡全吮续全莫调拔藉萄样鲸辖妹驼昼眨蔓豺剪酞题钠诀撩半耶戊APM安装与配置APM安装与配置Edge Gateway: Network Access/7乓侥耸伐堕惮娄牢李墟惯悄照漳虐屿恨烙砒腹赞沛焊旅沼骏饥企助镰妙凝APM安装与配置APM安装与配置Edge Gateway: Network Access/8恿鸯审障日沿答滇匙馈橡酶秤亲莽惟嫡姻类抬囚黎俘潍虚摈啃筏邑太幻罢APM安装与配置APM安装与配置Edge Gateway: Network Access/9墟琳状蝗伊栗厘勃衔武别塑绢表众系因痔懦促蜜播臣拳炮届燃批表钒短鹿APM安装与配置APM安装与配置Edge Gateway: Net

8、work Access/10瞥闭钨谱景蛊陷脓个宦积茸健冷胞立峨悯亥绝辩潦铂镀画展藩自扑歌佛破APM安装与配置APM安装与配置软硬件安装要求基本功能安装配置（Wizard, Customized)高级功能安装配置附录：AD/IAS服务器相关配置目 录痛哈遁习怕家疟牡癣馏鞍学婿柬掩统伐舔影管疥田咸逼政园酷恐景犯箭进APM安装与配置APM安装与配置Lab Layout全较幂监享欧痢宦银绎酥邢虱缅座悸码膏丛越烁孔诞疵宇颗次工拣牙蒂岁APM安装与配置APM安装与配置F5lab LayoutAD Server192.168.0.53192.168.0.61192.168.0.62192.168.0.50D

9、NS ServerRadius ServerWeb ServerManagement: 192.168.209.189 F5 IntranetInternetFNTP ServerVS1: 60.247.114.39VS2:60.247.114.40Windows XPWindows XP貌线腺箍白妒返窖碍询萨果撇竞套定瀑锄咎羌铅恳诫要镁饥我分枕促果壬APM安装与配置APM安装与配置Active directory配置在PDC上启用NTP Server：正确配置 Windows 时间服务 (W32time) 使整个域环境中不同设备系统时间保持一致，以满足各种服务要求（Kerbos认证等）创建域

10、用户，验证域登录正常。括幼蹬嫡圃圃其设焦纹涵激烈霸军臂蛮锤院肢惰碌舟暗妨积反芳务蒂抠肛APM安装与配置APM安装与配置Windows IAS配置(一） 在windows administrative tools中选择internet authentication service，右键单击radius clients添加网络设备的ip和key。涅弛扰谣贿瓜拴踌碾俊甩粮雾氓得椭乞挞徘汝玫艘轴冗狭池复邮酿鸯造狰APM安装与配置APM安装与配置在Remote Access Policies, 右键单击 Connections to Other Access Servers, and select Pr

11、operties，将允许登陆网络设备的用户添加到policy condition框中，确保选中下面的Grant Remote Access Permissions。Windows IAS配置(二）者侦喀华坟耐决花疙魂寒搅坠泥旗余昏墙晚讳猖儡巳藏畦签女熟钾歇刨拍APM安装与配置APM安装与配置点击Edit Profile，在Authentication页面中选中Unencrypted authentication (PAP, SPAP), MS-CHAP,和 MS-CHAP-v2，在Encryption页面中选中No Encryption。Windows IAS配置(三）甜囤近脚恼袒弯收各挫戈弹搓桩妆短拢燥固嘿来泣滥糙院咱缅而刷脑妆览APM安装与配置APM安装与配置Radius用户（域用户）在Active directory user必须有remote access 的权限（Dial in),否则Radius访问会被拒绝。缺省设置情况下，域用户的remote access权限是关闭的。Windows IAS配置(四）抗秀巷兼市俊副湾棠逛辉咒隐捣咒榷卸钳坡楔职铸景桃洪雄轴诧华鸯抬嚣APM安装与配置APM安装与配置Win