For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_22613's avatar
Richard_22613
Icon for Nimbostratus rankNimbostratus
Aug 05, 2015

Restrict GTM to only allow replies for external users to certain zones

I have a GTM which has many zones configured, some of the resource records are in zone runner and some in Wide IPs pointing to LTMs.   I want to restrict external (internet) users to only be able ...
application delivery
BIG-IP DNS
deployment
devops
iRules
Ian_Johnson_162's avatar
Ian_Johnson_162
Historic F5 Account
Aug 05, 2015

Inside of Zonerunner you can setup views which are basically ACL's. The view can then be assigned to zone and define who has access to that zone.

 

Ian

 

  • Richard_22613's avatar
    Richard_22613
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015
    Perfect, that looks just what I need. I've configured a new view list but dont seem to be able to move a zone from one view list to another in the gui. Can I do this from the CLI editing one of the conf files? Thanks for your help so far ! Richard
  • Richard_22613's avatar
    Richard_22613
    Icon for Nimbostratus rankNimbostratus
    Aug 05, 2015
    I think I found it, named.conf file in /var/named/config
  • Mohamed_Lrhazi's avatar
    Mohamed_Lrhazi
    Icon for Altocumulus rankAltocumulus
    Aug 07, 2015
    Most likely not what you need o be doing... editing files under /var/... In the GUI try: DNS ›› Zones : Zones ›› zone-name-here. Then: Options. The online help says: Specifies one or more statements that comprise the zone in the named.conf configuration file. Depending on the zone type that you configure, the default statement (or statements) may change. For additional details on the default zone type statements, refer to the Configuration Guide for Global Traffic Management.