For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rmd1023's avatar
rmd1023
Icon for Nimbostratus rankNimbostratus
Jul 19, 2011

ssh and iQuery via non-management interfaces?

Is it possible to have iQuery (and the SSH sessions where keys/certs are exchange for it) to happen over non-management interfaces? For a variety of reasons, I'd rather have the LTMs and GTMs talking...
config
design
Jason_40733's avatar
Jason_40733
Icon for Cirrocumulus rankCirrocumulus
Jul 19, 2011
Our professional services installation from F5 specifically stated that the iquery between GTMS & LTMs will not occur over the mgmt interfaces. We specifically use self-ips on the RFC1918 networks with only those ports allowed to do synchronization. We were told that it was the F5 best practices. Correct me if I'm wrong though.

 

 

If memory serves, trying to iquery to the mgmt interface consistently failed when doing the initial setup.