Forum Discussion

al_kabeer_2905's avatar
al_kabeer_2905
Icon for Nimbostratus rankNimbostratus
Nov 15, 2012

Allow specfic list of IP address to connect to VIP

Hi,   I have BigIP ltm 3900 (no ASM) for load balancing.   i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.   ex: list of IP's (10.10.10.1, 192...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Nov 16, 2012
1) Yes, this Data Group will contain the IP address and/or networks (with /xx prefix) you want to ALLOW - 'name' is the name you give the DG

 

2) I've used DG name 'some-dg' but this should be changed to whatever name you use for 1)

 

 

Apologies, it wasn't too clear.

 

 

Yes, you then apply the iRule to the Virtual Server. Existing (and new but persisted) connections will not be affected, only new ones.

 

 

A simple iRule like this should have virtually zero performance impact.