Forum Discussion

Sonny's avatar
Sonny
Icon for Cirrus rankCirrus
Oct 01, 2015

Configuring VS to access LTM

I have 2 management interfaces, x.x.10.1 and x.x.20.1. I normally access the device through 20.1. So I created a vs to access 10.1. However, looking at the tcpdump, I don't see any response back from...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 08, 2015

What is is best way to require 2FA when admins access the self-IP directly instead using my VS?

 

In this case you have to rely on the management plane's authentication capabilities, which only supports "ClientCert LDAP" for two-factor authentication. Another option might be to set the self-IP's Port Lockdown setting to "Allow None". This would restrict direct access but still allow the VIP-iRule access to work.