Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 16, 2012
thanks,

 

As i understand i will do the followiing

 

1) tmsh ltm data-group internal create name type ip records add { 10.10.10.1 19.10.10.2 10.10.10.3 10.10.10.10 172.16.1.1 }

 

2) when CLIENT_ACCEPTED {

 

if { not [class match [IP::addr [IP::client_addr] equals some-dg] } {

 

reject }

 

}

 

but i did not find any relation between data group and code, (where code point to data group ???)

 

 

after i finish the irule i should apply it to VIP right ???

 

 

does it affect the perfornace of ltm since other services are running on it ?

 

 

thanksss