Forum Discussion

Bill_Callahan_8's avatar
Bill_Callahan_8
Icon for Nimbostratus rankNimbostratus
Oct 07, 2009

Big-IP Local Traffic Self-ips for internet facing addresses

Is there a particular reason why I would not set the Self-IP on an interface for the Internet to deny all traffic? For any virtual servers, I am using separate IP addresses. Mostly, my concern is ab...
management
monitoring
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Oct 07, 2009
I use the self addresses for management rather then the management interfaces for several reasons. However, I faced the same issue way in the past about how to protect the self-addresses from the internet. We basically used the firewall to protect it. Others have put in a ACL on the LTm on who can directly access the management interfaces.

 

 

I am not sure if there is a best practice but I think default ALLOW is something that shouldn't be used if you want security.

 

 

 

CB