Courses Coaching FAQs Blogs

301a - BIG-IP LTM Specialist: Architect, Setup and Deploy

For engineers preparing for the F5 301a certification exam

Understand how LTM really behaves under real traffic.


Understand how to securely design and implement BIG-IP LTM to the 301a exam-level requirements from requirements through to deployment, using all relevant features.

Join Wait List for early access list
 

Enrolment opens: February 1st 2026
Full course access: February 28th 2026

Pricing €499 > Full Course

Created by: Graham Mattingley (15+ years F5 consultant - banking, aviation, government & F5 instructor)"

Last Updated: Jab 30, 2026

Course Overview

In this course, you are provided with a structured understanding of how to architect, design, and deploy BIG-IP Local Traffic Manager (LTM) solutions in alignment with the 301a certification blueprint. The course includes video training, configuration walkthroughs, architectural discussions, and practical deployment examples covering high availability, Virtual Servers, Pools, monitors, profiles, SSL configuration, persistence methods, SNAT, and traffic flow through the BIG-IP system. You will develop the knowledge required to design secure, scalable LTM environments and implement configurations for real customers that meet the 301a exam-level requirements. This course is aligned to the official F5 301a BIG-IP LTM Specialist: Architect, Setup and Deploy certification exam blueprint.

What's Included

  • Instructor-led, self-paced video training, step by step, so it is clearly understood and ready for production.

  • Hands-on configuration walkthroughs using the F5 GUI and CLI (TMSH)

  • Full explainer videos, notes, scripts, and configuration examples mapped to each 301a blueprint section

  • Practical deployment demonstrations and validation exercises, and multiple-choice tests to help you assess how your learning is progressing

  • Real-world scenarios from banking, aviation, and enterprise deployments

  • Private course community access for technical discussion and exam support 

Join the 301a Wait List - Free Updates Until April 2026

Receive weekly build updates, preview content, and early access notifications.

Course Curriculum

▶️Section 1 – Architect and Deploy Applications

11 Sub-Modules, 55 Lessons

  • Deployment architectures  (one-arm, inline, routed, HA models)

  • VLANs, trunks, and Self IP design L1–L3 security considerations

  • Nodes, Pools, load-balancing methods, and advanced health monitoring

  • Virtual Server types, configuration patterns, and use cases

  • LTM profiles (TCP, HTTP, OneConnect, caching, compression, persistence, etc.) and their interaction

  • SSL architecture (client-side, server-side, bridging, and offload strategies)

  • Persistence and application-aware session management

  • SNAT design and behaviour, and traffic flow analysis

  • Routing, asymmetric routing prevention, and return path validation

  • Application flows, full proxy processing, TMM traffic handling

  • Deployments, configuration review methodology, and performance best practices

  • Change control awareness and structured implementation planning 

▶️Section 2 – Set Up, Administer and Secure LTM Devices

9 Sub-Modules | 45 Lessons

  • Initial BIG-IP device setup and configuration

  • Licensing, provisioning, and module relationships

  • HA configuration (Device Trust, ConfigSync, Failover)

  • User roles, RBAC, and administrative security controls

  • Logging, monitoring, and system diagnostics

  • Configuration management, backups, and UCS handling

  • Secure management access (SSH, HTTPS, certs, access control)

  • TMSH fundamentals and command-line administration

  • System maintenance, upgrades, and operational readiness

  • Understanding TMM architecture and resource allocation

  • Troubleshooting core device-level issues before escalation

  • Local Traffic Policies: how and when to use them vs Irules
  • iRules fundamentals, events, and safe deployment
  • AVR analytics Module configuration, learn how to configure the module to aid with performance troubleshooting and developer assistance

Private Community Included with the Course

Share a private community with other members of this course.
Course community membership is permanent.

✅Ask questions and get practical advice from other course members on the same learning journey. 

✅Share real-world scenarios, problems, and solutions. 

Want Personalised Support?

Add a 1:1 Strategy Session

Get a private hour with Graham to:
✅ Review your specific LTM study and knowledge gaps
✅ Review specific areas of the blueprint that are blockers.
✅ Live question sessions to test exam readiness 
 Additional Costs: €100

16 Hours of Video Lessons

Presentations, F5 GUI and CLI demonstrations, real-world LTM Virtual; deployment scenarios, profile configuration walkthroughs, traffic flow analysis, and architectural design examples aligned to the 301a blueprint.

Labs with GUI, CLI, and Postman

Architectural presentations, F5 GUI and TMSH demonstrations, real-world deployment scenarios, profile implementation walkthroughs, traffic flow validation, and high availability configuration exercises aligned to the 301a blueprint.

Lesson Knowledge Checks

Targeted knowledge assessments after each module to reinforce key concepts and ensure you are progressing toward 301a exam readiness. The questions will also include production-level Q&A

Course FAQs

Instructor

Graham Mattingley

Graham Mattingley

F5 Instructor

Graham Mattingley F5 Instructor

F5-certified expert with 30+ years in application development and 15 years specialising in F5 technologies. I've deployed and secured F5 solutions for banking, aviation, and government systems across Europe. I'm also an app developer and OWASP member, so I teach security from both sides: how apps work and how to protect them.

I don't teach exam shortcuts. I teach real-world security, how LTM actually behaves under production traffic, how to tune policies without breaking applications, and how to make confident decisions when it's 2 AM and something's on fire.

This is the operational knowledge I wish I'd had 15 years ago, distilled from production deployments you won't find in official training materials.

How this course is delivered

  • Instructor-led, structured video lessons aligned directly to the 301a blueprint

  • Step-by-step configuration walkthroughs using the F5 GUI and TMSH

  • Guided video lab demonstrations showing full architectural builds and validation

  • Clearly structured modules progressing from architecture fundamentals to deployment design

  • Self-paced access, allowing you to study around professional commitments

  • Practical architectural scenarios based on real-world LTM implementations

Prerequisites & Requirements

  • A valid F5 201 – TMOS Administration certification is required before sitting the 301a exam

  • Foundational BIG-IP and TMOS knowledge

  • Basic networking understanding (OSI Layers 2–4)

  • Familiarity with TCP/IP concepts and application delivery fundamentals

  • Access to a BIG-IP lab environment is recommended for maximum benefit

If you have not yet completed the 201 – TMOS Administration certification, a combined 201 + 301a preparation pathway is available.

What happens next?

  • Join the waiting list to be notified when enrolment opens

  • Receive weekly, blueprint-aligned LTM architecture and deployment insights while the course is in development

  • Get early access and priority enrolment before the public launch 

Join Wait List for early access list