Asim_Afzal_1147
Nimbostratus
NimbostratusGUI admin access to F5 LTM
HI,
i want restrict admin gui https access to F5 LTM to certian ip address .How i can do this .
I created packet filter but whre should i apply that
Forum Discussion
3 Replies
What_Lies_Bene1Cirrostratus
To restrict HTTPS access (to the Configuration Utility), use the following tmsh command: [tmsh] modify sys httpd allow replace-all-with { 10.11.*.* } to replace the allow list entirely or [tmsh] modify sys httpd allow add { 10.11.*.* } to add an address or network to it.
There is no Configuration Utility method for restricting Configuration Utility access; however you can now apply firewall rules if AFM is installed.
dirtycacheIdeally you should manage the BIG-IP via it's management port interface, connected to a dedicated management VLAN with appropriate ACLs. Otherwise, the advice above is spot on for creating an ACL for httpd.
gsharriAltostratus
Note that the packet filters (Network>Packet Filters) apply only to vlan traffic not the management interface. AFM (if available) rules can be applied directly to the management interface. Or use tmsh to restrict httpd as outlined previously.