Forum Discussion
NimbostratusLTM Authentication - Management Access
I am attempting to look for a way to enable MFA via Radius Token Authentication via the LTM Management Login Page. I have never see this done before. Essentially, you would have a third text box that asks for an RSA Token ID and you would incorporate MFA this way.
I see a few posts on this noting to create a VIP under the Management IP and then calling an APM Policy. Is there any way to do this through the defacto configuration or does this have to be executed by setting up a VIP for the Management IP of the Big IP Unit?
Is it a good idea to setup an APM Policy? My fear is, if I lose the APM, I'll lose management access.
- boneyard
MVP
with the extra field that isn't built in, you might use external authentication and then have it handled on the server, but adding the token to the password or such.
https://support.f5.com/csp/article/K12173
i do believe you can attach the APM profile directly on the interface and don't need a separate virtual server, but can't login to check now.
