Forum Discussion

itspec_166936's avatar
itspec_166936
Icon for Nimbostratus rankNimbostratus
Aug 15, 2014

Command for disabling http access for management

I am trying to figure out the correct command for disabling or removing http management access. I believe the following is correct but not sure. This is for version 9-10

 

b httpd allow "NONE"

 

10 Replies

  • Hi!

     

    Have you tried this article?

     

    http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13309.html

     

    /Patrik

     

  • Note that I don't think this applies to the iControl SOAP and REST interfaces. If you want to disable everything you may need to consider shutting down the httpd and tomcat daemons on start-up.

     

  • If you don't mind about the iControl stuff your suggestion is valid I would have thought. I've no option to test right now but using a tmsh command try this and see if there is a None option;

    [tmsh] modify sys httpd allow replace-all-with ...
    
  • let me test it for you. 😉

    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) modify sys httpd allow none
    
    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys httpd allow
    sys httpd {
        allow none
    }
    
    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys db service.httpd.allow
    sys db service.httpd.allow {
        value ""
    }
    
  • let me test it for you. 😉

    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) modify sys httpd allow none
    
    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys httpd allow
    sys httpd {
        allow none
    }
    
    root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys db service.httpd.allow
    sys db service.httpd.allow {
        value ""
    }