nerdexam
F5

201 · Question #102

Refer to the exhibit. A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers. What should the BIG-IP Administrator do to resolve…

The correct answer is B. Set HTTP Profile to None. When load balancing SSH traffic, an administrator should ensure no HTTP profile is applied to the virtual server to prevent interference with the SSH protocol.

Configure Load Balancing Features

Question

Refer to the exhibit. A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers. What should the BIG-IP Administrator do to resolve the issue?

Exhibits

201 question #102 exhibit 1
201 question #102 exhibit 2

Options

  • ASet Protocol to UDP
  • BSet HTTP Profile to None
  • CSet Source Address to 10.1.1.2
  • DSet Destination Addresses/Mask to 0.0.0.0/0

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    78% (31)
  • C
    13% (5)
  • D
    8% (3)

Why each option

When load balancing SSH traffic, an administrator should ensure no HTTP profile is applied to the virtual server to prevent interference with the SSH protocol.

ASet Protocol to UDP

SSH operates over TCP, not UDP; setting the protocol to UDP would prevent all SSH connections from establishing correctly.

BSet HTTP Profile to NoneCorrect

SSH is a TCP-based protocol, not HTTP. Applying an HTTP profile to an SSH virtual server causes the BIG-IP system to attempt HTTP processing and parsing, which interferes with the SSH handshake and prevents successful user logins, thus setting the HTTP profile to 'None' bypasses this Layer 7 processing.

CSet Source Address to 10.1.1.2

Setting the source address to a specific IP would restrict access from only that IP and does not resolve issues related to protocol interference from an HTTP profile.

DSet Destination Addresses/Mask to 0.0.0.0/0

Setting the destination addresses/mask to 0.0.0.0/0 is a common wildcard configuration for a virtual server but does not address issues caused by an incorrect profile assignment for the traffic type.

Concept tested: BIG-IP virtual server profile configuration for non-HTTP traffic

Source: https://techdocs.f5.com/en-us/big-ip-system-and-module-reference/big-ip-profiles-reference/http-profile.html

Topics

#Virtual Server configuration#SSH#HTTP profile#Protocol mismatch

Community Discussion

No community discussion yet for this question.

Full 201 Practice