Manual Chapter : Managing Network Whitelists in Shared Security

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 5.3.0
Manual Chapter

About network whitelists

You use network whitelists to define network addresses that are allowed to bypass the checks in a DoS profile. The Network White Lists screen displays the managed BIG-IP® devices that might have network whitelists defined. Click the name of a BIG-IP device to display the network whitelists that are defined. A maximum of 8 network white lists are allowed for each BIG-IP device

Create network whitelist

You create network whitelists to bypass checks in a DoS profile.
  1. Click Configuration > SECURITY > Shared Security > Network White Lists .
  2. Click the name of the BIG-IP device on which to create the network white list.
  3. Click Create to add a network white list.
  4. Type a Name for the network white list, and an optional Description that will be useful in your environment.
  5. In the Protocol list, leave the default value, Any, or select the appropriate network protocol.
  6. In the Source area Address setting, leave the default value, Any, or select Specify and provide the address in the provided field.
    You can specify IPv4 or IPv6 addresses in CIDR notation as the address. You can specify a source address or destination address, but not both in the same white list entry.
  7. In the VLAN list, leave the default value, Any, select the appropriate VLAN, or select Other and provide a VLAN tag number.
  8. In the Destination area Address setting, leave the default value, Any, or select Specify and provide the address in the provided field.
    You can specify IPv4 or IPv6 addresses in CIDR notation as the address. You can specify a source address or destination address but not both in the same white list entry.
  9. In the Port setting, leave the default value, Any, or select the appropriate port.
    The default port number value is provided for each port type.
  10. When you are finished, click OK.
  11. Save your changes.
The network white list is updated.