Forum Discussion

player_72606's avatar
player_72606
Icon for Nimbostratus rankNimbostratus
Jan 31, 2012

bigip hardening

Hi all,     how can i harden f5 bigip which is facing the internet directly for specific ip address   to manage the device?     management port is not in use , management is used via t...
config
design
mikand_61525's avatar
mikand_61525
Icon for Nimbostratus rankNimbostratus
Jan 31, 2012
I think you could also check the configuration of each vserver.

 

 

One thing to specify to tighten it down further is the allowed vlan property. So you will only expose the vserver for the proper interfaces. But this will also depend on if you use the F5 as a pure loadbalancer or if you use it as a router aswell.

 

 

Even if you use it as a router aswell you can then specify for which vlans the forwarding-ip vserver should be exposed.