Forum Discussion

Rene_C_'s avatar
Rene_C_
Icon for Nimbostratus rankNimbostratus
May 19, 2015

APM Dynamic ACL - multiple variables

Hi,

 

i am trying to assign a Dynamic ACL in a policy. Lets for now say that i have 2 variables filled with ACL information in F5 format (session.acl.custom1 and session.acl.custom2).

 

I put both variables into the Dynamic ACL list with the same properties (Source: Custom, ACL: /Common/testacl, Format: f5).

 

If both variables are correctly filled, everything works as expected. If the variable that is last (order-wise) is empty, the whole ACL stays empty then, effectively granting me access everywhere instead of restricting the access as specified in the top variable.

 

Is this potentially a bug or works-as-designed?

 

Thanks in advance for your help, Rene

 

acl
BIG-IP Access Policy Manager (APM)
security

4 Replies

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    May 19, 2015

    Hi Rene,

     

    Your best bet is to open a case with support. Make sure to include the exact steps to reproduce the problem along with a qkview.

     

    Seth

     

  • Rene_C_'s avatar
    Rene_C_
    Icon for Nimbostratus rankNimbostratus
    May 21, 2015

    Seems as i just had a wrong assumption.

     

    What i tried was to have 2 variables put ACLs in the same Dynamic ACL Object; If you are doing this, the last one wins (it does a "set" and not an "append to existing values").

     

    What i did to solve this issue is to write an iRule that reads both values and puts it into a new single variable.

     

    Cheers, Rene