Forum Discussion

Shashank_jain's avatar
Shashank_jain
Icon for Nimbostratus rankNimbostratus
Feb 24, 2020

Registration/Login

Hi F5 Team,

I am new to F5 and below is my question , Do we have a permanent Token generation function available in F5 for Authentication ? Current Token Based Authentication is maximum for 36000 Seconds . if it there which version supports it and How can i start using it ? If F5 does not support Permanent Token generation , Do we have a way to Block only F5 GUI for a specific users ? But REST API should work as it is .

Thanks, Shashank

BIG-IQ
iControlREST
security
  • NAG's avatar
    NAG
    Icon for Cirrostratus rankCirrostratus
    Feb 24, 2020

    Hi Shashank,

     

    I believe there is no option to restrict a use access to just REST API and block from accessing GUI.

     

    Nag

  • Grumpy_Cat's avatar
    Grumpy_Cat
    Icon for Cirrus rankCirrus
    Feb 24, 2020

    Hi Shashank jain,

     

    For token auth, the BIG-IQ has this feature in v6.1+ if I'm not mistaken useful for Restful operations. You can send a POST to https://bigiq/mgmt/authn/login but this isn't permanent. You used to be able to PATCH the token timeout but I believe this is fixed in later versions (at least doesn't work for me on v7). In the response you would receive a 'refreshToken' used to obtain a new token; this token expires in a day by default.

     

    You can block access to TMUI at L3 by modifying httpd access.

    More details here https://support.f5.com/csp/article/K13309

     

    Hope that helps.

     

    Kind regards

    Ben