Forum Discussion

Leo_Rodrigues_1's avatar
Leo_Rodrigues_1
Icon for Altocumulus rankAltocumulus
Feb 05, 2015

Big IP LTM - first authenticate against Radius, then with a local account of last resort

Hello.   We have a pair of LTM boxes successfully authenticating with a pair of radius servers. I noticed that the local accounts are still available to log in.   Is there a way to force the L...
APM
application delivery
LTM
management
security
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Feb 05, 2015

Hi Leo,

 

I believe you are talking about remote authentication to the BigIP? If so, Please check out this manual entry https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-user-account-administration-11-6-0/5.html.

 

After configuring the BigIP for remote authentication the only two accounts that remain local should be root and admin. If you see accounts listed those are considered stub accounts and will just determine what properties and permission the user has when the login.

 

I'm not aware of any type of "fallback" authentication... the document for Firepass is for auth to the VPN as a user not as an administrator.

 

-Seth