Forum Discussion

Sleiman's avatar
Sleiman
Icon for Altostratus rankAltostratus
May 23, 2019

F5 Read Only In ISE with TACACS

Hello, can someone assist in setting up ISE to authorize users login in to the F5 LB with a read only account?
BIG-IP
security
Sleiman's avatar
Sleiman
Icon for Altostratus rankAltostratus
May 23, 2019

Thanks for the reply DRJ. Here's what I've done. I'm able to login but I still have read/write rights.

  • DRJ's avatar
    DRJ
    Icon for Altocumulus rankAltocumulus
    May 23, 2019

    So in your example, in the Custom Attribute in ISE (the last screenshot), specify the NAME as F5-LTM-USER-Info-1 and the Value as monitoring

     

    I can't recall if this is required or not, but if you're still having issues after fixing the attribute, try set the shell privilege levels from 15 to something like 2.