Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 15, 2012
Then use an iRule to reference the Data Group and reject traffic not in the group (or you could use 'drop' to silently drop it);

 

 
 when CLIENT_ACCEPTED { 
  if { not [class match [IP::addr [IP::client_addr] equals some-dg] } { 
    reject } 
 } 
 [/code