Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 15, 2012
OK, so you'll need to create a Data Group containing all the subnets, as this would take an age in the CLI I'd recommend you use tmsh and obviously supernet where you can; 


tmsh ltm data-group internal create name type ip records add { 10.10.10.0/24 10.10.11.0/24 another/24 ... }