F5 F5CAB2 - BIG-IP Administration Data Plane Concepts (F5CAB2) exam

In BIG-IP LTM, a pool member state directly affects how traffic is handled at the data plane level. When a pool member is manually disabled , BIG-IP changes the member’s availability state to disabled , which has specific and predictable traffic-handling consequences.

According to BIG-IP Administration Data Plane Concepts:

A disabled pool member :

Does not accept new connections

Continues to process existing non-persistent connections until they naturally close

Is removed from load-balancing decisions , including persistence lookups

Most importantly for this question:

Persistent connections (such as those created using source-address persistence, cookie persistence, or SSL persistence) are not honored for a disabled pool member

BIG-IP will not send new persistent traffic to a disabled member, even if persistence records exist

Therefore, when a pool member is manually disabled, it stops processing persistent connections , while allowing existing non-persistent flows to drain gracefully.

Why the Other Options Are Incorrect:

B – Persistent connections are not honored for a disabled pool member

C – Existing connections are not immediately terminated when a pool member is disabled

D – Only the disabled pool member stops accepting new connections, not all pool members

Key Data Plane Concept Reinforced:

Manually disabling a pool member is a graceful administrative action that prevents new and persistent traffic from reaching the member while allowing existing connections to complete, which is critical for maintenance and troubleshooting scenarios.

===========

This scenario combines session continuity , multiple protocols (HTTP and FTP) , and HA failover behavior , which directly implicates persistence handling across devices and services .

Key Requirements Breakdown

Same pool member for entire session

Session must survive failover

Session must span multiple services (HTTP and FTP)

Why Persistence Mirroring + Match Across Services Is Required

Persistence Mirroring

Ensures persistence records are synchronized from the active BIG-IP to the standby BIG-IP.

Without mirroring:

After failover, the standby device has no persistence table

Clients are load-balanced again

Sessions break, forcing users to restart

Persistence mirroring is essential for session continuity during failover

Match Across Services

Allows a single persistence record to be shared across multiple virtual servers / protocols

Required when:

HTTP and FTP must use the same pool member

Multiple services are part of a single application session

Together, these settings ensure:

Persistence survives device failover

Persistence is honored across HTTP and FTP

Why the Other Options Are Incorrect

A. Cookie persistence and session timeout Cookie persistence only applies to HTTP and does not address FTP or failover synchronization.

B. Stateful failover and Network Failover detection Stateful failover applies to connection state , not persistence records , and does not link HTTP and FTP sessions.

D. SYN-cookie insertion threshold and connection low-water mark These are DoS / SYN flood protection settings, unrelated to persistence or HA behavior.

On BIG-IP, a disabled pool member is deliberately treated differently from a member that is unavailable because of a failed health monitor or one that has been forced offline . Disabling a pool member removes it from normal load-balancing selection for new, unrelated sessions, but BIG-IP can continue sending traffic associated with existing active connections and existing persistence sessions to that member.

F5 documentation states specifically that when a pool member is disabled, it continues to process active connections and connections belonging to the current persistence session. F5 also describes the disabled state as allowing “persistent or active connections” while preventing ordinary new load-balanced connections.

The relevant persistence configuration is attached to the virtual server , making A correct. When a client has an existing persistence record—for example, source-address affinity—the persistence decision can continue directing that client ' s connections to its previously selected pool member even though that member has subsequently been disabled.

Slow Ramp Time serves a different purpose: it gradually increases connection allocation to a newly available pool member so that it is not immediately overwhelmed. It does not explain continued access to disabled members. A persistence profile is not configured on the pool itself, eliminating D.

Study Guide References/Topics: Pool Member States; Disabled versus Forced Offline; Persistence Profiles; Virtual Server Persistence; Connection Processing; Slow Ramp Time.

In BIG-IP LTM, health monitors are used to determine the availability of pool members and directly influence traffic flow decisions in the data plane.

Key characteristics of the default HTTP monitor according to BIG-IP Administration Data Plane Concepts:

Sends an HTTP request (typically GET /)

Expects an HTTP response code of 200 OK

Any response other than 200 is treated as a monitor failure

A failed monitor causes the pool member to be marked offline (down)

In this scenario:

Two pool members return 404 Not Found

A 404 response indicates that the requested object was not found

This does not meet the success criteria of the default HTTP monitor

These two members are therefore marked offline

One pool member returns 200 OK

This matches the expected response

The member is marked online

Resulting Pool Member Availability:

2 members: Offline

1 member: Online

Why the Other Options Are Incorrect:

B – 404 responses are not considered healthy by the default HTTP monitor

C – At least one member responds with the expected 200 OK

D – Members returning 404 responses fail the monitor and cannot be marked online

Key Data Plane Concept Reinforced:

BIG-IP health monitors make binary availability decisions based strictly on configured success criteria. For HTTP monitors, response codes matter— 404 is a failure , even if the service is technically reachable.

===========

Managing the lifecycle of a pool member requires understanding the difference between " Disabled " and " Forced Offline " states, especially when persistence is involved.

Disabled (User-Disabled) : This state allows existing connections and persistent sessions to continue until they naturally time out or are closed by the client/server. It only prevents new sessions from being established.

Forced Offline : This state is more restrictive; it allows existing connections to complete but rejects all new connections, including those with existing persistence records.

Immediate Removal : Neither " Disabled " nor " Forced Offline " will instantly kill currently active, established TCP connections. To meet the requirement of " immediately " removing all connections, the administrator must first set the member to Forced Offline (to prevent persistence from bringing in new traffic) and then use the command line (e.g., tmsh delete sys connection ss-server-addr [IP]) to clear the current connection table entries.

The appropriate configuration for emulating conventional stateless IP routing is a Forwarding (IP) virtual server using a FastL4 profile .

A Forwarding (IP) virtual server does not select an application-server pool in the normal load-balancing sense. Instead, BIG-IP forwards the packet toward the destination address originally specified by the client and uses the system ' s routing table to determine the serverside path. This makes the Forwarding (IP) virtual server the BIG-IP virtual-server type designed to provide router-like Layer 3 forwarding behavior.

BIG-IP processing is inherently stateful, so to approximate stateless router behavior, F5 uses specific FastL4 profile settings with the IP forwarding virtual server. FastL4 is supported with Forwarding (IP) virtual servers and provides efficient Layer 4 packet processing.

Option C is deceptive. BIG-IP does have a virtual server type called Stateless , but F5 documents that this type applies specifically to UDP traffic , requires a default pool, and has significant configuration restrictions. It is therefore not the general mechanism used to emulate stateless IP routing.

A Standard virtual server performs full-proxy processing, while Performance (Layer 4) is primarily used for high-performance Layer 4 application delivery and can use pools. Neither is the intended router-emulation configuration.

Study Guide References/Topics: Forwarding (IP) Virtual Servers; FastL4 Profile; Routing Table Processing; Stateful versus Stateless Forwarding; Virtual Server Types.

BIG-IP Priority Group Activation causes members in the highest-numbered priority group to receive traffic first. F5 defines the activation value as the minimum number of available members required before traffic can remain confined to the higher-priority group. If availability falls below that threshold, the system activates the next lower priority group.

Here, Priority Group 3 is the highest group. Of its three members, only 172.16.15.7:80 is available. Because one available member is less than the configured threshold of 2 , BIG-IP must activate Priority Group 2 as well.

In Priority Group 2, only 172.16.15.4:80 is available. Adding this member provides two available members across the currently activated priority groups: 172.16.15.7:80 and 172.16.15.4:80. The required availability threshold is therefore satisfied, so Priority Group 1 does not need to participate. F5 specifically documents that traffic expands into lower-priority groups when the required number of members is unavailable in the higher-priority set.

Because the configured load-balancing method is Round Robin , new connections are distributed across these two eligible members.

Study Guide References/Topics: Pools; Priority-Based Member Activation; Priority Groups; Pool Member Availability; Round Robin Load Balancing.

Configuring networking objects in BIG-IP requires using the correct TMSH module path and verb .

Module Path: Trunks are networking objects, so they reside under the /net module, not /sys.

Verb: Since the trunk already exists, the modify verb must be used to update its properties rather than create.

Syntax: The correct syntax to append physical interfaces to an existing trunk is tmsh modify /net trunk [name] interfaces add { [port list] }.

Data Plane Impact: Adding interfaces to a trunk (Link Aggregation) increases the total aggregate bandwidth available to the system and provides additional hardware redundancy.

For an interface to be used as a physical member of a BIG-IP trunk , it must be free from conflicting Layer 2 assignments. In this question, the correct condition is that the interface is not assigned to a VLAN .

BIG-IP trunks aggregate multiple physical interfaces into one logical interface. The normal configuration sequence is to create the trunk from eligible physical interfaces and then assign the trunk itself to one or more VLANs. F5 documentation specifies that an interface assigned to a trunk must be an untagged interface and cannot simultaneously belong to another trunk. The Configuration utility therefore restricts which physical interfaces are presented as eligible trunk members.

An interface that is already directly participating in VLAN configuration is not treated as an available standalone interface for the intended trunk configuration. Instead, the physical interfaces are first aggregated, after which the resulting trunk becomes the VLAN member.

Option A is incorrect because a tagged interface has VLAN association and is not the prerequisite state for adding the physical interface to a trunk. Option B is also incorrect: an interface being administratively or operationally DOWN does not define trunk eligibility and may prevent it from becoming an active working link.

Study Guide References/Topics: Physical Interfaces; Trunk Configuration; Link Aggregation; VLAN Membership; Tagged and Untagged Interfaces; Interface Availability.

===============