F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Sleiman's avatar
Sleiman
Icon for Altostratus rankAltostratus
May 22, 2019

F5 Read Only In ISE with TACACS

Hello, can someone assist in setting up ISE to authorize users login in to the F5 LB with a read only account?
BIG-IP
security
Sleiman's avatar
Sleiman
Icon for Altostratus rankAltostratus
May 23, 2019

Thanks for the reply DRJ. Here's what I've done. I'm able to login but I still have read/write rights.

DRJ's avatar
DRJ
Icon for Altocumulus rankAltocumulus
May 23, 2019

So in your example, in the Custom Attribute in ISE (the last screenshot), specify the NAME as F5-LTM-USER-Info-1 and the Value as monitoring

 

I can't recall if this is required or not, but if you're still having issues after fixing the attribute, try set the shell privilege levels from 15 to something like 2.