Forum Discussion
Changing Default GUI HTTPS port
You can manually edit the /var/run/config/httpd.conf.d/ssl.conf file to change the management GUI's port, but that will usually be reset on config reload and reboots. Otherwise there are no settings in TMSH to change the management GUI's port.
There is one other approach that may work though.
-
Create a VIP on the desired port, apply client and server SSL profiles, and this iRule:
when CLIENT_ACCEPTED { node 127.0.0.1 443 } -
In tmsh remove allow access to httpd from anything other than localhost:
tmsh modify sys httpd allow replace-all-with { 127.0.0.1 }
Direct access to the management IP and default port will be denied/forbidden. If you ever break the VIP and/or lose access to the management GUI through this VIP, simply unlock the httpd allow:
tmsh modify sys httpd allow replace-all-with { all }
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com