Complete F5CAB2 F5 Materials

On BIG-IP, a disabled pool member is deliberately treated differently from a member that is unavailable because of a failed health monitor or one that has been forced offline . Disabling a pool member removes it from normal load-balancing selection for new, unrelated sessions, but BIG-IP can continue sending traffic associated with existing active connections and existing persistence sessions to that member.

F5 documentation states specifically that when a pool member is disabled, it continues to process active connections and connections belonging to the current persistence session. F5 also describes the disabled state as allowing “persistent or active connections” while preventing ordinary new load-balanced connections.

The relevant persistence configuration is attached to the virtual server , making A correct. When a client has an existing persistence record—for example, source-address affinity—the persistence decision can continue directing that client ' s connections to its previously selected pool member even though that member has subsequently been disabled.

Slow Ramp Time serves a different purpose: it gradually increases connection allocation to a newly available pool member so that it is not immediately overwhelmed. It does not explain continued access to disabled members. A persistence profile is not configured on the pool itself, eliminating D.

Study Guide References/Topics: Pool Member States; Disabled versus Forced Offline; Persistence Profiles; Virtual Server Persistence; Connection Processing; Slow Ramp Time.

This question tests understanding of Priority Group Activation (PGA) and how BIG-IP determines which pool members are eligible to receive traffic.

Key BIG-IP Priority Group Concepts:

Higher priority group numbers = higher priority

BIG-IP will only send traffic to the highest priority group that meets the Priority Group Activation condition

Lower priority groups are activated only when the condition is met

Only available (green) members count toward the activation threshold

Configuration from the Exhibit:

Priority Group Activation: Less than 2 available members

Pool Members and Status:

Pool Member

Priority Group

Status

serv1

2

Active (available)

serv2

2

Inactive (down)

serv3

1

Active (available)

serv4

1

Active (available)

Step-by-Step Traffic Decision:

BIG-IP first evaluates the highest priority group (Priority Group 2)

Priority Group 2 has:

serv1 → available

serv2 → unavailable

Total available members = 1

Activation rule is Less than 2 available members

Condition is true (1 < 2)

BIG-IP activates the next lower priority group (Priority Group 1)

Traffic is now sent to:

serv1 (Priority Group 2)

serv3 and serv4 (Priority Group 1)

Final Result:

Traffic is distributed to serv1, serv3, and serv4

Why the Other Options Are Incorrect:

A – Ignores activation of the lower priority group

B – serv4 is also active and eligible

C – serv2 is down and cannot receive traffic

Key Data Plane Concept Reinforced:

Priority Group Activation controls when lower-priority pool members are allowed to receive traffic , based strictly on the number of available members in the higher-priority group. In this case, the failure of one high-priority member caused BIG-IP to expand traffic distribution to lower-priority members to maintain availability.

===========

With Least Connections (member) , BIG-IP attempts to send new connections to the pool member with the fewest current connections. In a perfectly “stateless” scenario (no affinity), this often trends toward a fairly even distribution over time.

However, persistence overrides load balancing :

When a persistence profile is applied, BIG-IP will continue sending a client (or client group) to the same pool member based on the persistence record (cookie / source address / SSL session ID, etc.).

This means even if another pool member has fewer connections, BIG-IP may still select the persisted member to honor session affinity.

The result can be uneven active connection counts , even though the configured load balancing method is Least Connections.

Why the other options are not the best cause:

A. Priority Group Activation is disabled Priority Group Activation only affects selection when priority groups are configured; disabling it does not inherently create uneven distribution under Least Connections.

B. SSL Profile Server is applied A server-side SSL profile affects encryption to pool members, but it does not by itself cause skewed selection across pool members. (Skew could happen indirectly if members have different performance/latency, but that’s not the primary, expected exam answer.)

D. Incorrect load balancing method Least Connections is a valid method and does not itself explain unevenness unless something is overriding it (like persistence) or pool members are not all eligible.

Conclusion:

A persistence profile is the most common and expected reason that active connections become unevenly distributed , because persistence takes precedence over the Least Connections load-balancing decision.

In BIG-IP high availability (HA) configurations, MAC Masquerade is used to speed up failover by allowing traffic-group-associated Self IPs to retain the same MAC address when moving between devices. This prevents upstream switches and routers from having to relearn ARP entries during a failover event, resulting in near-instant traffic recovery.

By default, MAC masquerade applies one MAC address per traffic group, regardless of how many VLANs the traffic group spans. This can create problems in some network designs because the same MAC address appearing on multiple VLANs may violate network policies or confuse switching infrastructure.

To address this, BIG-IP provides Per-VLAN MAC Masquerade, enabled by the database variable:

`tm.macmasqaddr_per_vlan = true`

When this feature is enabled:

BIG-IP derives a unique MAC address per VLAN

The base MAC address configured on the traffic group remains the first four octets

The last two octets are replaced with the VLAN ID expressed in hexadecimal

The VLAN ID is encoded in network byte order (high byte first, low byte second)

### VLAN ID Conversion:

VLAN ID: 1501 (decimal)

Convert to hexadecimal:

1501₁₀ = 0x05DD

High byte: 05

Low byte: DD

### Resulting MAC Address:

Base MAC: `02:12:34:56:00:00`

Per-VLAN substitution → last two bytes = `05:DD`

Final MAC address:

`02:12:34:56:05:dd`

### Why the Other Options Are Incorrect:

A (01:15) – Incorrect hexadecimal conversion of 1501

B (dd:05) – Byte order reversed (little-endian, not used by BIG-IP)

D (15:01) – Uses decimal values instead of hexadecimal

### Key BIG-IP HA Concept Reinforced:

Per-VLAN MAC Masquerade ensures Layer 2 uniqueness per VLAN while preserving the fast failover benefits of traffic groups, making it the recommended best practice in multi-VLAN HA deployments.