Manual Chapter :
Creating a WebSSH Resource
Applies To:
Show VersionsBIG-IP APM
- 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0
Creating a WebSSH Resource
You need to have developed an Authentication
Configuration before you can create a WebSSH Resource.
Next, you create a WebSSH Resource which
represents an application or other information that exists on a backend server and is
secured by SSH.
- On the Main tab, click.
- ClickCreate.
- ForName, type a name for the WebSSH Resource.
- ForDestination, specify the WebSSH Resource destination (backend server):
- Select eitherHost NameorIP Address.
- Type the address. ForHost Name, type a fully qualified domain name (FQDN). ForIP Address, both IPv4 and IPv6 addresses are supported. Example for IPv4: 10.0.0.1; and for IPv6: 2001::1.
- ForPort, specify the SSH port on the backend server; typically, port 22 (the default).
- SelectPublish on Webtopso the WebSSH resource is listed on the webtop.
- ForAuthentication Configuration, select the name of the Authentication Configuration to use for the WebSSH Resource.If not specified, the resource uses the Authentication Configuration selected in the Access Configuration that is associated with the virtual server.
- For customization settings, you can specify aCaptionfor the WebSSH Resource that will appear on the webtop, and an optionalImage.
- ClickSave.
The WebSSH Resource is created. Later, you
will need to configure a WebSSH Resource in an Advanced Resource Assignment agent that
is part of the access policy associated with the Ephemeral Authentication virtual
server. The access policy should also contain SSO Credential Mapping with WebSSH
Resources.
Next, configure the LDAP Authentication
Configuration needed for authenticating the users accessing the backend server. If the
backend resources also use RADIUS, you can also create a RADIUS Proxy and a RADIUS
Authentication Configuration.