301a - BIG-IP LTM Specialist: Architect, Setup and Deploy

For engineers preparing for the F5 301a certification exam

Understand how LTM really behaves under real traffic.

Understand how to securely design and implement BIG-IP LTM to the 301a exam-level requirements from requirements through to deployment, using all relevant features.

Join Wait List for early access list

Enrolment opens: August 1st 2026
Full course access: August 28th 2026

Pricing €499 > Full Course

Created by: Graham Mattingley (15+ years F5 consultant - banking, aviation, government & F5 instructor)"

Last Updated: July 2nd, 2026

Course Overview

In this course, you are provided with a structured understanding of how to architect, design, and deploy BIG-IP Local Traffic Manager (LTM) solutions in alignment with the 301a certification blueprint. The course includes video training, configuration walkthroughs, architectural discussions, and practical deployment examples covering high availability, Virtual Servers, Pools, monitors, profiles, SSL configuration, persistence methods, SNAT, and traffic flow through the BIG-IP system. You will develop the knowledge required to design secure, scalable LTM environments and implement configurations for real customers that meet the 301a exam-level requirements. This course is aligned to the official F5 301a BIG-IP LTM Specialist: Architect, Setup and Deploy certification exam blueprint.

Prerequisites & Requirements

A valid F5 201 – TMOS Administration certification is required before sitting the 301a exam
Foundational BIG-IP and TMOS knowledge
Basic networking understanding (OSI Layers 2–4)
Familiarity with TCP/IP concepts and application delivery fundamentals
Access to a BIG-IP lab environment is recommended for maximum benefit

If you have not yet completed the 201 – TMOS Administration certification, a combined 201 + 301a preparation pathway is available.

Join the 301a Wait List - Free Updates Until April 2026

Receive weekly build updates, preview content, and early access notifications.

Course Curriculum

▶️Section 1 – Architect and Deploy Applications

11 Sub-Modules, 55 Lessons

Deployment architectures: one-arm, inline, routed and HA models
VLAN, trunk and self-IP design, including Layer 1–3 security considerations
Nodes, pools, load-balancing methods and advanced health monitoring
Virtual server types, configuration patterns and deployment use cases
LTM profiles, including TCP, HTTP, OneConnect, caching, compression and persistence
SSL architecture: client-side, server-side, bridging and offload strategies
Persistence and application-aware session management
SNAT design, behaviour and traffic-flow analysis
Routing, asymmetric-routing prevention and return-path validation
Application flows, full-proxy processing and TMM traffic handling
Deployment planning, configuration reviews, change control and performance best practices

▶️Section 2 – Set Up, Administer and Secure LTM Devices

9 Sub-Modules | 45 Lessons

Initial BIG-IP setup, licensing, provisioning and module relationships
HA configuration: Device Trust, ConfigSync and failover behaviour
User roles, RBAC and administrative security controls
Secure management access: SSH, HTTPS, certificates and access control
TMSH fundamentals and command-line administration
Logging, monitoring, system diagnostics and core device troubleshooting
Configuration management, backups and UCS archive handling
System maintenance, upgrades and operational-readiness checks
TMM architecture, resource allocation and performance awareness
Local Traffic Policies: when to use them instead of iRules
iRules fundamentals, events and safe deployment practices

Private Community Included with the Course

Share a private community with other members of this course.
Course community membership is permanent.

✅Ask questions and get practical advice from other course members on the same learning journey.

✅Share real-world scenarios, problems, and solutions.

Want Personalised Support?

Add a 1:1 Strategy Session

Get a private hour with Graham to:
✅ Review your specific LTM study and knowledge gaps
✅ Review specific areas of the blueprint that are blockers.
✅ Live question sessions to test exam readiness
Additional Costs: €100

16 Hours of Video Lessons

301a blueprint training: presentations, F5 GUI/CLI demos, LTM deployments, profile configuration, traffic analysis and design examples.

With GUI, CLI, and Postman

301a blueprint training: architecture, GUI/TMSH demos, deployments, profiles, traffic validation and HA configuration.

Lesson Knowledge Checks

Module knowledge checks and production-level Q&A to reinforce learning and build 301a exam readiness.

Course FAQs

Is this a certification prep course?

Do I need prior BIG-IP experience?

Does this course include practical lab demonstrations?

Is this course suitable for real-world deployment work, or only the exam?

Instructor

Graham Mattingley

F5 Instructor

Graham Mattingley F5 Instructor

F5-certified expert with 30+ years in application development and 15 years specialising in F5 technologies. I've deployed and secured F5 solutions for banking, aviation, and government systems across Europe. I'm also an app developer and OWASP member, so I teach security from both sides: how apps work and how to protect them.

I don't teach exam shortcuts. I teach real-world security, how LTM actually behaves under production traffic, how to tune policies without breaking applications, and how to make confident decisions when it's 2 AM and something's on fire.

This is the operational knowledge I wish I'd had 15 years ago, distilled from production deployments you won't find in official training materials.