Forum Discussion
dogg_dogg_23774
Nimbostratus
May 15, 2006analyzing tcp or udp port info in ip forwarding mode
Hi,
There is a requirement from customers that they want to forward ip packets only if the packets are icmp or the port number is greater than 1024.
However, when attempting to associat...
JRahm
Admin
Jun 07, 2006Set up one network virtual server (0.0.0.0/0) with protocol TCP, binding only to your internal vlan:
virtual tcp_test-std_vip {
destination any:any
ip protocol tcp
vlans internal enable
rule tcp_forward-rule
}And another for UDP:
virtual udp_test-std_vip {
destination any:any
ip protocol udp
vlans internal enable
rule udp_forward-rule
}Now setup a network forwarding virtual server (0.0.0.0/0) with protocol 1 (ICMP), binding only to your internal vlan:
virtual icmp_test-fwd_vip {
destination any:any
ip forward
ip protocol icmp
vlans internal enable
}And of course, the rules for the TCP/UDP forwarding:
rule tcp_forward-rule {
when CLIENT_ACCEPTED {
if { [TCP::client_port] > 1024 } {
forward
} else { discard }
}
}
rule udp_forward-rule {
when CLIENT_ACCEPTED {
if { [UDP::client_port] > 1024 } {
forward
} else { discard }
}
}Standard disclaimer...Untested!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
