Forum Discussion

SH_F5_381212's avatar
SH_F5_381212
Icon for Nimbostratus rankNimbostratus
Jan 15, 2019

APM access through virtual server

Hi All,

 

I have configured APM for SSL VPN connectivity through the wizard and associated with a virtual server. Also, I did configure lease pool and resource pool. I can see under virtual server configuration that resource pool is associated with the virtual server.

 

To access APM 1. I believe I have to use the virtual server ip address in the web browser(and not management ip of Big IP) ? 2. How the host on the internet gets ip from the lease pool? 3. Do I need to create a different user under same partition for the authentication , so that end host on the internet after connecting to virtual server will get authenticated. 4. If answer to above question is yes then how one can do that?

 

Clear configuration steps and example will be much appreciated.

 

Thank you, J

 

BIG-IP
BIG-IP Access Policy Manager (APM)
security
Super-NetOps
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jan 15, 2019

    To access APM

    I believe I have to use the virtual server ip address in the web browser(and not management ip of Big IP) ?

    Exact. Management IP is only for management. you can create as many virtual servers as needed to manage different authentication policies.

    How the host on the internet gets ip from the lease pool?

    After the user authenticate with browser or Edge Application, VPN starts. when user is connected, a virtual network adapter is created on client with IP assigned from lease pool

    Do I need to create a different user under same partition for the authentication , so that end host on the internet after connecting to virtual server will get authenticated.

    You can authenticate user against multiple authentication sources... AD, LDAP, or local DB.

    If you want to authenticate a user with local DB, you must create one localDB instance in 
    Access  ››  Authentication : Local User DB : Instances
    then create users in 
    Access  ››  Authentication : Local User DB : Users