Forum Discussion
Cirrostratus2-factor authentication for mgmt
Hi,
I was reading articles and post related to implementing 2-factor authentication for access to applications served by BIG-IPs. Seems to be plenty options especially when using APM.
My question is about a way to use 2-factor for management access - I did not found any resources. Is that at all possible? No way to use iRules (or I am not aware of any), no build in mechanisms... so is there any option here?
Maybe at least there is a way to force certificate based client authentication?
Piotr
4 Replies
- nitass
Employee
No way to use iRules (or I am not aware of any)
not sure if it is a good idea but you can access configuration utilities via virtual server i.e. irule can be used.
Maybe at least there is a way to force certificate based client authentication?
sol13981: Restricting access to the Configuration utility using client certificates (11.x)
https://support.f5.com/kb/en-us/solutions/public/13000/900/sol13981
dragonflymrHi, Well, I should be less lazy and use search :-), thanks for help. What do you mean by using VS for accessing GUI? Create VS that is pointing to SelfIP as pool member (on port 443)? That could be solution for GUI, but I guess there is none like that for SSH? Piotr
nitass_89166Noctilucent
No way to use iRules (or I am not aware of any)
not sure if it is a good idea but you can access configuration utilities via virtual server i.e. irule can be used.
Maybe at least there is a way to force certificate based client authentication?
sol13981: Restricting access to the Configuration utility using client certificates (11.x)
https://support.f5.com/kb/en-us/solutions/public/13000/900/sol13981- dragonflymrHi, Well, I should be less lazy and use search :-), thanks for help. What do you mean by using VS for accessing GUI? Create VS that is pointing to SelfIP as pool member (on port 443)? That could be solution for GUI, but I guess there is none like that for SSH? Piotr
