Forum Discussion
mjb109
Jan 20, 2023Nimbostratus
APM custom address space by client IP?
Hi all: Strange client requirement, but figured I'd ask as a thought experiment. What we'd like to do is use different split-tunnel address spaces depending on a client's location/IP. For example, i...
- Jan 24, 2023
Juergen_Mang is spot on, it's pretty straightforward. You'd create:
- Two or more Network Access Lists that comply with your desired connectivity properties
- Create an *empty* item in a per-session access policy, name it "check client IP" or something
- Add branch rules to check the client IP. The Expression Builder has these built-in already.
- Branch to an Advanced Resource Assign that assigns the appropriate resource
Leslie_Hubertus
Jan 24, 2023Ret. Employee
Lucas_Thompson - here's one in your wheelhouse. 🙂
- Lucas_ThompsonJan 24, 2023Employee
Juergen_Mang is spot on, it's pretty straightforward. You'd create:
- Two or more Network Access Lists that comply with your desired connectivity properties
- Create an *empty* item in a per-session access policy, name it "check client IP" or something
- Add branch rules to check the client IP. The Expression Builder has these built-in already.
- Branch to an Advanced Resource Assign that assigns the appropriate resource
- mjb109Jan 24, 2023Nimbostratus
This looks like it will work nicely. Thanks to all!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects