Forum Discussion
al_kabeer_2905
Nimbostratus
NimbostratusAllow specfic list of IP address to connect to VIP
Hi,
I have BigIP ltm 3900 (no ASM) for load balancing.
i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.
ex: list of IP's (10.10.10.1, 192.168.1.2, 172.16.1.1) to be allowed to access VIP 172.30.1.1
other users (10.0.0.0/8, 192.168.1.0/24 , 172.16.0.0/16) should not be allowed to access the VIP
how can i achieve this ??
I have search and found that some people are using iRules ( i am new to iRules) if i configure iRule for 900 IP address to be allowed does it affect BigIP performance ??
thankssssssssssssssssssssssssssssssssss
13 Replies
What_Lies_Bene1Cirrostratus
A packet filter would be my preferred option normally but will probably be impossible to manage with so many IPs; I'd be concerned I'd break something everytime I made a change. At least this way you just have to manage and modify the Data Group which would be rather hard to make a mistake with.
al_kabeer_2905thxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx- What_Lies_Bene1Anytime.
