Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Jul 06, 2015

APM admin GUI/ssh over APM network access

Hi,   I m trying to access APM admin access of mgmt IP over GUI and ssh over network access terminating on same APM. In tcpdump I see below packet   Client ----> APM mgmt IP :443. TCP Syn A...
BIG-IP Access Policy Manager (APM)
deployment
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 06, 2015

That is actually a "feature", that you can't access the management interface through an SSLVPN connection on the same APM. To get around this, create a simple TCP VIP with client and server SSL profiles applied and this iRule:

when CLIENT_ACCEPTED {
    node 127.0.0.1 443
}

You would then access the management interface externally via this virtual server. I would also make the IP of this VIP something on your (non-routable) lease pool subnet so that only clients inside an established VPN can talk to it.