Forum Discussion
mjb109
Jan 20, 2023Nimbostratus
APM custom address space by client IP?
Hi all: Strange client requirement, but figured I'd ask as a thought experiment. What we'd like to do is use different split-tunnel address spaces depending on a client's location/IP. For example, i...
- Jan 24, 2023
Juergen_Mang is spot on, it's pretty straightforward. You'd create:
- Two or more Network Access Lists that comply with your desired connectivity properties
- Create an *empty* item in a per-session access policy, name it "check client IP" or something
- Add branch rules to check the client IP. The Expression Builder has these built-in already.
- Branch to an Advanced Resource Assign that assigns the appropriate resource
Lucas_Thompson
Employee
Juergen_Mang is spot on, it's pretty straightforward. You'd create:
- Two or more Network Access Lists that comply with your desired connectivity properties
- Create an *empty* item in a per-session access policy, name it "check client IP" or something
- Add branch rules to check the client IP. The Expression Builder has these built-in already.
- Branch to an Advanced Resource Assign that assigns the appropriate resource
mjb109
Jan 24, 2023Nimbostratus
This looks like it will work nicely. Thanks to all!
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects