AD Authentication traffic and Domain Join

You're passing AD traffic through VIPs? You can't use an IP or port range in a VIP, but you could:

1. Create an any:any VIP and only allow it on specific VLANs

    

2. Create an any:any VIP and apply IP filters that can specify IP and port ranges