101 · Question #556
A new web server VLAN has been created and the IP address 10.1.1.1/24 has been assigned to the BIG IP device. The BIG IP Administrator needs to create the new Self IP and prevent administrator…
The correct answer is A. create /net self internal address 10 1.1.1/24 vlan VLAN 10 allow service none. Creating a BIG-IP Self IP that blocks all administrative access requires the 'create /net self' TMSH command with the 'allow-service none' parameter. The correct verb is 'create' and the access restriction keyword is 'none'.
Question
A new web server VLAN has been created and the IP address 10.1.1.1/24 has been assigned to the BIG IP device. The BIG IP Administrator needs to create the new Self IP and prevent administrator access to the BIG-IP device from the newly created network. Which TMSH command should be used?
Options
- Acreate /net self internal address 10 1.1.1/24 vlan VLAN 10 allow service none.
- Badd 'net self internal address 10.1.1.1/24 vlan VLAN 10 allow-service none
- Ccreate /net self internal address 10.1.1.1/24 vlan VLAN 10 allow service default
- Dadd /net self internal address 10.1.1.1 mask 265. 255. 2550 vlan VLAN 10 allow
How the community answered
(21 responses)- A81% (17)
- B5% (1)
- C10% (2)
- D5% (1)
Why each option
Creating a BIG-IP Self IP that blocks all administrative access requires the 'create /net self' TMSH command with the 'allow-service none' parameter. The correct verb is 'create' and the access restriction keyword is 'none'.
The 'create /net self' command is the valid TMSH syntax for defining a new Self IP object, and the 'allow service none' parameter disables all service access from the associated VLAN, which satisfies the requirement of preventing administrator access to the BIG-IP from the newly created network.
'add' is not a valid TMSH verb for Self IP creation - the correct verb is 'create', and the missing leading '/' on the module path also makes this command syntactically invalid.
'allow service default' permits the default set of management and data-plane services from the network, which directly contradicts the requirement to block administrator access.
'add' is not a valid TMSH verb for this operation, and the subnet mask value '265.255.2550' is not a valid IPv4 mask, making the entire command invalid.
Concept tested: BIG-IP TMSH Self IP creation with allow-service none
Source: https://techdocs.f5.com/en-us/bigip-16-0-0/big-ip-tmsh-reference/tmsh-reference.html
Topics
Community Discussion
No community discussion yet for this question.