Nimbostratus
MVPHi Sarath413,
Does this concern all URLs ? if it is that configure the Virtual Server on internal VLAN only.
NimbostratusThanks for the response. No, we want to allow few URLs externally and all URLs internally.
MVPyou can try to set this up :
1 - VS1 /Virtual Server exposed on internal VLAN without URL restrictions
2- VS2 /Virtual Server exposed on external VLAN (with same pool members VS1-) and add the URLs you want blocked in Disallowed URLs List.
NimbostratusSorry for the dumb question as I'm new to F5. Are external and Internal VLANs predefined? Mine is a one-arm deployment.
MVPIn one-arm , you cannot build the above configuration because you are only one VLAN/interface.
Nimbostratusokay. In that case, can I achieve my requirement with IP address exception set to 'never block ' on Internal IPs and add the URLs to blocklist?
EmployeeYes, you can do it in this way. Just define all URLs , which should be available externally as allowed and set "Never Block" for internal IP. Just pay attention, that "Never Block" means don't block any violation from that IP.