F5CAB1: BIG-IP Administration Install, Initial Configuration, and UpgradeDemo

Question

The BIG-IP Administrator receives a ticket reporting that an authorized user is trying to connect to the Configuration Utility from a jump host but is being denied.

The HTTPD Allow configuration is:

Question Image

The jump host IP address is 172.28.32.22.

Which command should the BIG-IP Administrator use to permit HTTPD access for this host?

A modify /sys httpd allow replace-all-with { 172.28.32.22 }
B modify /sys httpd allow delete {172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }
C modify /sys httpd allow add {172.28.32.22 }

Explanation

The HTTPD allow list must retain the existing permitted networks and add 172.28.32.22 as an additional authorized host. The allow add operation appends an address to the current HTTPD access list, whereas replace-all-with would discard the existing entries and delete would remove them.

Learn more

F5 BIG-IP TMSH Reference: sys httpd

F5CAB1: BIG-IP Administration Install, Initial Configuration, and UpgradeDemo

AstroTutor

Notes

Readiness

QuestionQ41

Community Discussion