For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mohammed_124031's avatar
mohammed_124031
Icon for Nimbostratus rankNimbostratus
Sep 22, 2014

Lock out from Big IP after setting up Tacacs+

Is their any way to remove tacacs+ configuration from single user mode or roll back to local authentication mode.   We have lost root as well as admin access to the devices immediately after confi...
application delivery
lock out
LTM
root password
tacacs+
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Sep 22, 2014

Well according to that article you need to reboot into single user mode (SOL4178). Update /config/bigip.conf, replace tacacs with the word local.

system {
   auth source type tacacs
}

Save and remove binary versions with

rm /var/db/mcpdb.*

Now reboot.

When the system comes up, verify you can login using admin user on the GUI. Push the config to the standby device.