For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CMR-NYC_176898's avatar
CMR-NYC_176898
Icon for Nimbostratus rankNimbostratus
Sep 21, 2016

APM Datagrouo

I would like to reference a data group which has multiple strings and values, example.

 

Datagroup1

 

domain = "mydomain.com domain1 = "mydomain.com domain2 = "yourdoamin.com domain3 = "hisdomain.com

 

The logic should be something like below I'm just unsure of the syntax.

 

If domain data group contains "domain" Then set userdomain session.last.username set session.last.domin.

 

How can I sent the domain var based on the username's value referencing the datagroups string value.

 

application delivery
BIG-IP Access Policy Manager (APM)
iRules

1 Reply

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Sep 21, 2016

    Hi Chris,

     

    to use the class command (or any other iRule specific TCL syntax) within an APM policy evaluation, you have to use an iRule Policy Action within VPE.

    VPE iRule Action:

    • Name: DomainDataGroupCall
    • ID: DomainDataGroupCall

    iRule Code:

     

    when ACCESS_POLICY_AGENT_EVENT { 
    if { [ACCESS::policy agent_id] eq "DomainDataGroupCall" } then {
        set orig_domain [ACCESS::session data get "session.logon.last.domain"]
        if { [set resolved_domain [class match -value $orig_domain equals DG_APM_DOMAIN_LOOKUP]] ne "" } then {
            log local0.debug "Resolved Domain: $resolved_domain"
            ACCESS::session data set "session.logon.last.domain" $resolved_domain
        }
    }
}

     

    Cheers, Kai