An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:
The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.
Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

Question

An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.

Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

Salih Igde · Accepted Answer

modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}

Salih Igde · Answer

modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')

Salih Igde · Answer

modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')

Salih Igde · Answer

modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 100 - 301a discussion

Suggested answer: C

0 comments