Forum Discussion

jeffrey1984's avatar
jeffrey1984
Icon for Cirrus rankCirrus
Jan 25, 2021

F5 LTM authentication using Remote-APM based

We are planning to use DUO authentication for all users access to our LTM. Currently we are using RSA to authenticate all logins to the LTM . We understand that in order to achieve this, we need to create Access Policy thru the APM using Radius . Also needs to do some editing on the access policy itself. Under System>Users:Authentication, there is an option to use Remote- APM based which we think we needed. However were not sure if selecting that option automatically makes local authentication as a fallback in case any issues happens on the Radius server . Thanks in advance

BIG-IP Access Policy Manager (APM)
LTM
security
    • jeffrey1984's avatar
      jeffrey1984
      Icon for Cirrus rankCirrus
      Jan 26, 2021

      Thank you Daniel appreciate your response. Are there options for us to use DUO for LTM device authentication?

      • Daniel_Wolf's avatar
        Daniel_Wolf
        Icon for MVP rankMVP
        Jan 26, 2021

        I am afraid not Jeffrey, neither for authenticating users to the BIG-IP admin GUI nor for virtual server authentication.

        For virtual server auth, I have really good experience with DUO and APM. Great solution.

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      May 26, 2021

      I checked this today on 15.1.2 and i have the Remote - APM Based option, i also can create the APM profile for it.

       

      it probably doesnt get you to achieve what you want with DUO as you keep using the normal login page (not an actual APM one) so there is no space for a third field or to ask later for another field.