Forum Discussion
change SSL port for LTM management
Hello folks,
how can I change management port from 443 to different port ? I see it already configured on different LTM under the http daemon. I did not find any reference.
list sys httpd sys httpd { auth-pam-dashboard-timeout on ssl-include "Listen 8020
Thx
7 Replies
- Samir_Jha_52506
Noctilucent
I don't think you can change port. By default, the BIG-IP system allows access to only a limited set of the available ports. https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13250.html
- marian_57792
Nimbostratus
Acctually I do not want to change ssl port just add different port for managment purpose .
- amolari
Cirrostratus
I think it's not possible (at least not documented). TMSH command "list sys httpd sys httpd" do not show any of such option.
- marian_57792
Nimbostratus
thx cjunior, its new security requirement.
- marian_57792
Nimbostratus
Hey cjunior, you have added the green color part under the httpd ?
- cjunior
Nacreous
Sorry, I did not understand. Can you explain?
- jsellejr_47350
Nimbostratus
- Use SSH to log in to the virtual machine using the Public IP address.
- Move the port that is used to access the user interface from port 443 to some other port (such as 8443) using a tmsh command. modify sys httpd ssl-port 8443
- Add your new port (8443 in this example) to the default self allow port list (required for single NIC deployment) using a tmsh command. modify net self-allow defaults add { tcp:8443 }
- From the tmsh prompt, save the changes to the system configuration. save sys config
- End the SSH session on the virtual machine.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com