Forum Discussion
Stanislas_Piro2
Apr 20, 2016Cumulonimbus
APM Activesync iRule and PROFILE_RESTRICT_SINGLE_IP variable
Hi,
When configuring APM to authenticate Activesync connections, there are 2 solutions:
- enable irule _sys_APM_ExchangeSupport_main or _sys_APM_ExchangeSupport_main
- configure exchange profile which enable one of these irule (or another one...)
In these irule, there is the following code:
if { ! [ info exists PROFILE_POLICY_TIMEOUT ] } {
set PROFILE_POLICY_TIMEOUT [PROFILE::access access_policy_timeout]
}
if { ! [ info exists PROFILE_MAX_SESS_TIMEOUT ] } {
set PROFILE_MAX_SESS_TIMEOUT [PROFILE::access max_session_timeout]
}
if { ! [ info exists PROFILE_RESTRICT_SINGLE_IP ] } {
set PROFILE_RESTRICT_SINGLE_IP 1
}
Why the irule does not retrieve PROFILE_RESTRICT_SINGLE_IP from [PROFILE::access restrict_to_single_client_ip] instead of setting it to 1 which create lots of active sync sessions from several different IPs?
to set the variable before , I created the following irule:
when HTTP_REQUEST priority 1 {
if { ! [ info exists PROFILE_RESTRICT_SINGLE_IP ] } {
set PROFILE_RESTRICT_SINGLE_IP [PROFILE::access restrict_to_single_client_ip]
}
}
Is there best solution?
Hi Stanislas,
since
is set. How about...priority 1
when HTTP_REQUEST priority 1 { set PROFILE_RESTRICT_SINGLE_IP [PROFILE::access restrict_to_single_client_ip] }
Cheers, Kai 😉
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects