A BIG-IP Administrator wants to allow management access only from a specific subnet.

Management access security is a primary Control Plane configuration task3.

Management Interface Security: The BIG-IP system provides a dedicated management port that is separate from the TMM (Traffic Management Microkernel) data interfaces4444.

System Platform Settings: Under the System > Platform section of the Configuration Utility, an administrator can define specific IP addresses or subnets that are permitted to access the device via SSH or HTTPS (the GUI).

Port Lockdown Difference: While "Port Lockdown" settings under Network > Self IPs control access to the device through self-IP addresses on data VLANs, they do not manage the security of the dedicated management port .

Access Control Lists: For robust security, F5 recommends using the "IP Allow" or "httpd Allow" lists found in the platform settings to prevent malicious brute-force attempts or unauthorized access from non-management networks .