limiting sshd session per user

Hello,

I do not think if there is any option to limit ssh session per account but there are some other recommendations for securing administrative access as follows -

1. Restricting access from specific source subnet/IPs only.
2. Monitoring login attempts.

You can view BIG-IP system login attempts in the Configuration utility and from the command line. You can view the audit log from the command line in the /var/log/audit file or under configuration utility, system--Logs--Audit--List.

3. Configuring automatic logout of idle admin/user sessions.

This can be done using below command under tmsh - modify /sys sshd inactivity-timeout <seconds>

Also just wanted to know, do you have local users configured on BigIP or using system login IDs?

Mayur

Hello Adnankhan,

If you question is about limit SSH connexions on the management interface, you can set ip ranges to limit SSH access.

https://support.f5.com/csp/article/K5380

Hi Mayur and Lidev,

thanks for you reply on my question.

we are currently using Local Authentication Method.