Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012
i have different remote sites not all ip addresses are allowed to access the VIP.

 

ex: remote site 10.10.10.0 / 24

 

only 10.10.10.100, 10.10.10.102, 10.10.10.150 are allowed to access

 

another subnet 10.10.20.0/24 also some IP's to access another subnet 10.10.30.0/24 and another 100 site

 

all of these subnet can access the VIP only 900 IP addresses should be allowed to have access to login page VIP which is internal http site the other users should not see the login page.

 

RFC 1918 will not help in this case because different IP address from same subnet are allowed and others are not allowed.

 

I am new to iRule so please help in this

 

 

thanksssssssssssssssssssss