Blocking certain TLS versions and Ciphers from Management Access on F5

Hello,

I need to block TLS v1, and v1.1 in Management access, in addition to static-key-ciphers. but am not sure of the syntax, as follows:

tmsh modify /sys httpd ssl-ciphersuite 'ALL:!TLSv1_1:!TLSv1:!DES:!IDEA:!3DES:!RC4'.

or

modify /sys httpd ssl-ciphersuite 'DEFAULT:!TLSv1_1:!TLSv1:!DES:!IDEA:!3DES:!RC4'

save /sys config