APM - Visual policy - Combining session variables in one Branche

Got it working.

 

 

==================== Overview of used scripts an made steps ===============

 

Add a new iRule, just give it a name to it:

 

when ACCESS_POLICY_AGENT_EVENT {

 

switch [ACCESS::policy agent_id] {

 

"TRIGGER-STRING-FOR-iRULE EVENT" {

 

set clientinfo "[ACCESS::session data get session.client.mac_address]-[ACCESS::session data get session.client.unique_id]"

 

if { [class match $clientinfo equals macuuid-list-datagroup] } {

 

ACCESS::session data set session.custom.clientfound 1

 

}

 

}

 

}

 

}

 

 

Add a new Data Group List with the name: macuuid-list-datagroup

 

Add a String in the following order: 00:11:22:33:44:55-1234567890123456789012345678901234567890

 

 

Add the iRule in your Virtual Servers (vpntest_vs) > Resources > (point to your created iRule)

 

 

Add in Visual Access Policy a new iRule Event after XxX-Auth > edit the ID with your switch name: TRIGGER-STRING-FOR-iRULE EVENT

 

 

Directly after iRule Event create a Empty Action and add a string within the Branche Rule: expr {[mcget {session.custom.clientfound}] == 1}

 

Place Full Resource Assign at Branch Rule 1 (not fallback, a littlebit confussing actually, you will think when it hit the string in the Branche Rule, it will choose the path: fallback, well it does not.)

 

====================================================

 

 

Afterall, the Data Group List within th WEB GUI isn't very convenient to add many strings (hundreds), i was thinking if I can add strings through the CLI (and where) or doing something with the iFile List.

 

 

Anyway, thank you Kevin for helping me out.

 

 

edit: made more better readable.