Forum Discussion

RAQS's avatar
RAQS
Icon for Cirrus rankCirrus
Mar 24, 2021

Port Lock down | Impact

Hi All,

 

Hope your are doing great.

 

I am planning to restrict access on Self IP. Can you please help to understand the impact of port lock down when i change it from allow all to "None".

 

What things will be impacted like HA or anything and how we can prevent it. We do not have GTM . We have LTMs in HA and some are standalone.

 

Regards,

RaqS

application delivery
BIG-IP
LTM
  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Mar 28, 2021

    When you lock down the ports you'll shut down everything except for a few exceptions.

    The article recommends Default for self IPs used with Network failover or alternately using UDP port 1026.

     

    I'd recommend running the HA services on dedicated VLANs.

     

    The official KB is here:

    https://support.f5.com/csp/article/K17333

     

    Kind regards,

    Patrik