BIG-IP Administration Control Plane Administration (F5CAB4) - Question #43 Discussion

On BIG-IP, management access restrictions by source subnet are controlled on the Self IP using Port Lockdown. This is where you define:

Which services (HTTPS, SSH, SNMP, etc.) are allowed

Which source IPs or subnets are permitted to access those services

By restricting management ports (like 22, 443) to a specific subnet on the management or internal Self IP, you effectively limit management access.

Why the other options are incorrect

B. System > Users
Controls authentication and roles, not network-based access restrictions.

C. Network > Routes
Determines traffic forwarding paths, not access control.

D. System > Platform
Used for hardware and platform-level settings, not access control.

Exam tip

If the question mentions “allow management access only from a specific subnet”, think:
👉 Self IP + Port Lockdown

System ›› Platform > user administration: ssh ip allow (specific range) justo for SSH por HTTP will be on CLI

The only correct is D.

D is the correct answer