For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Racharla_Chandr's avatar
Racharla_Chandr
Icon for Nimbostratus rankNimbostratus
Sep 09, 2015

Enable port 80 and redirect to 443 to access configuration utility of bigip

Hi All,

 

Currently my f5 configuration utility (GUI) is accessible only through https ie. https://bigip1.xyz.com. Now if i try to connect using since port 80 is not open, it is giving me connection timed out error.

 

Can someone please let me know how can i redirect to 443 ? That is if i'm accessing using http://bigip1.xyz.com it should redirect to https://bigip1.xyz.com

 

Thanks in advance.

 

Regards, Chandu

 

6 Replies

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 09, 2015

    this option is available in 11.X version.

     

    version 10.0.1 is not supported since 31-Aug-2013.

     

    it is recommended to upgrade to version 11.5.

     

  • Racharla_Chandr's avatar
    Racharla_Chandr
    Icon for Nimbostratus rankNimbostratus
    Sep 09, 2015

    Platform Name BIG-IP 1500

     

    For this platform i cannot upgrade to v11.

     

    Is there any way to do it from httpd.conf file?

     

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Sep 09, 2015

    Hi,

     

    HTTP to Https redirection may not work if you have a firewall in between which blocks the connection to port 80. When you access this traffic will be blocked by firewall ( thats what you have mentioned) and f5 wont be knowing that you are accessing it.

     

  • Chase_Abbott's avatar
    Chase_Abbott
    Icon for Admin rankAdmin
    Sep 09, 2015
    Why not only connect via https then? Never use http://xxx and you'll never be blocked. It's the management interface so it shouldn't be publicly available and optimally protected by some management network, so only admins that know they should be hitting https are your target audience, correct?
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 10, 2015

    Hi,

     

    F5 bigIP 1500 is an old appliance which lives the last supported year.

     

    How did you to connect previously? through HTTPS URL like everyone...

     

    Even if HTTP redirection to HTTPS is available in new versions, a little number of admins enable it...

     

    trying to change httpd.conf file will not be supported and I'm not sure it will solve your problem.

     

    You have 2 solutions:

     

    • continue to connect to GUI with https URL
    • contact your F5 local sales team to replace the old appliance by a virtual or physical appliance

    Stanislas