Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 15, 2012
This shouldn't be too hard with an iRule and a Data Group. Would it not be better to just deny the RFC1918 addresses? Are there really 900 individual addresses or would using network ranges reduce the number?