Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

rcheeks_75965's avatar
rcheeks_75965
Icon for Nimbostratus rankNimbostratus
Feb 01, 2011

Configuration management

I would like to restrict configuration changes to a single LTM unit in a HA pair. Is this possible and if so could anyone point me in the right direction on where to start?     Thanks  
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 01, 2011
To restrict config changes to the active unit only, you could enforce an ACL that only allows access to the floating self IP(s) on the VLAN(s) you want admin traffic on. This wouldn't account for direct access to the management port, but you could optionally lock that down to specific source networks.

 

 

Aaron