Forum Discussion
BIG-IQ UI advisory banner
There are articles on how to add an advisory banner for ssh login in BIG-IQ, but is there a method to configure an advisory banner for the BIG-IQ UI? I am running BIG-IQ 5.4.
- Steve_E_182861
Nimbostratus
I should state I am running BIG-IQ Centralized Management v5.4.
- SurgeonRet. Employee
It is not supported on 5.4
- Rebar_326494
Nimbostratus
It is not supported on 6.0.1 as well. Even thought I have enabled "sys db ui.advisory"
- SEales
Nimbostratus
The sys db ui.advisory is not a UI login advisory banner even on the BIG-IP. The ui.advisory banner banner gets displayed after login and is shown as a colored bar on the top and bottom of the UI page. You do not have to use the CLI to configure that parameter on the BIG-IP. From the Main tab, navigate to System >> Preferences. Select Advanced in the Security Settings section. At the bottom of that section is the settings for this Advisory Banner. You can select color of the bar and customize your text. Most corporate security teams mandate a legal advisory text to show up prior to logging into any device. That is what is not available and should be in BIG-IQ. It is available on the BIG-IP's.
- SEales
Nimbostratus
For the UI, it is supported in 6.1.0.
- From the UI, just go to System > THIS DEVICE > General Properties.
- In the top right, select Edit. You will be able to add a Custom Login Message in the appropriate section.
For the CLI, follow this procedure:
CLI Custom Message
- Login to BIG-IQ command line using root credentials.
- Use a text editor such as vi, open /config/ssh/ssh_banner file.
- Either paste in the approved banner or manually type in the banner.
- Save the file and exit the text editor.
- Add the sshd-banner by typing in the following command: tmsh modify sys sshd include "Banner /config/ssh/ssh_banner"
- Save the changes: tmsh save sys config
Should the banner ever need to be disabled, use the following procedure.
- Login to BIG-IQ command line using root credentials
- Disable the message banner with the following command: tmsh modify sys sshd include none
- Save the changes: tmsh save sys config
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com