For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

thebull_6486's avatar
thebull_6486
Icon for Nimbostratus rankNimbostratus
Apr 29, 2008

Management IP's

Hello ALL,     I do have a silly question and i am new to F5 Prodcuts.     I do have 3-DNS sitting facing the internet and all i need is how is it configured so that guys from outside cann...
dev
devops
iControl
v4
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 02, 2008
As bmbhatt suggests, it's ideal to have a firewall between the BIG-IP (or 3DNS) and any insecure network). It's also recommended to use the mgmt port (interface 3.1) to administer the units. Ideally, you'd have the management port on a discrete internal subnet not reachable from any public network.

 

 

You can configure which ports are open/need to be open on the self IP addresses using the port lockdown configuration. For more info on port lockdown, check SOL7317 (Click here).

 

 

Aaron