For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

uni's avatar
uni
Icon for Altocumulus rankAltocumulus
Sep 09, 2015

APM policy sets pool in second virtual

I have encountered some behaviour I don't understand. I've not done much with APM until recently, so am curious to know whether I misunderstand the behaviour and there is perhaps a bug.

 

I have two virtual servers (vs1 & vs2) with two Access Profiles (ap1 and ap2), sharing the same AAA server profile, SSO profile and domain cookie. ap1 may set the pool in the policy, ap2 never does.

 

If a user accesses and authenticates via vs1 and the pool is set, then accesses vs2, vs2 sends traffic to the pool set in vs1.

 

Is this expected behaviour? I can't imagine how this could be the case.

 

BIG-IP Access Policy Manager (APM)
security

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 09, 2015

    Hi,

     

    do you need to assign pool in VPE instead of Local traffic policy or irule?

     

    Pool assignment form Access policy is shared if session is shared between VS.

     

    If you want to assign pool based on user group, you can assign a cookie in ACCESS_POLICY_COMPLETED event containing a group ID and manage pool assignment based on this cookie.