cant access to management interface after vpn using apm established

This is actually a well-intentioned security feature, but you can get around it with the following trick:

1. Create a simple LTM virtual server - you can bind this to the VPN connectivity profile "VLAN" or to an internal VLAN (do NOT bind this to an external VLAN)

2. Apply a simple client SSL profile to the VIP

3. Apply a simple server SSL profile to the VIP

4. Apply the following iRule to the VIP:

   when CLIENT_ACCEPTED {
       node 127.0.0.1 443
   }
   

   Depending on platform version you may need to use an internal VLAN self-IP instead of 127.0.0.1.