Exam F5CAB1 Topic 3 Question 20 Discussion
Actual exam question for F5's F5CAB1 exam
Question #: 20
Topic #: 3
Question #: 20
Topic #: 3
The Configuration Utility of a BIG-IP device is currently accessible via its management IP
10.53.1.245 from all VLANs.
The BIG-IP Administrator needs to restrict access so only hosts from the 10.0.0.0/24 subnet can access the Configuration Utility.
Which TMSH command accomplishes this?
10.53.1.245 from all VLANs.
The BIG-IP Administrator needs to restrict access so only hosts from the 10.0.0.0/24 subnet can access the Configuration Utility.
Which TMSH command accomplishes this?
Suggested Answer: D Vote an answer
BIG-IP controls access to the web-based Configuration Utility (TMUI) through the /sys httpd allow list. This parameter specifies which client IPs or subnets may initiate HTTP/HTTPS connections to the management interface.
To restrict TMUI access to only the 10.0.0.0/24 subnet:
The correct method is to modify the HTTPD allow list so that it contains only this subnet.
This requires replacing the entire current list with the new subnet using:
modify /sys httpd allow replace-all-with {10.0.0.0/24}
This ensures that only clients within 10.0.0.0/24 can reach the Configuration Utility.
To restrict TMUI access to only the 10.0.0.0/24 subnet:
The correct method is to modify the HTTPD allow list so that it contains only this subnet.
This requires replacing the entire current list with the new subnet using:
modify /sys httpd allow replace-all-with {10.0.0.0/24}
This ensures that only clients within 10.0.0.0/24 can reach the Configuration Utility.
by Samantha at Oct 11, 2026, 12:16 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).