For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aschi's avatar
aschi
Icon for Nimbostratus rankNimbostratus
Dec 01, 2015

Assign a Pool regarding to the Destination Port.

I need to assign a Pool regarding to the Destination Port. I found different Solutions and would like to ask what the best solution would be.   Solution1:   when CLIENT_ACCEPTED {   i...
application delivery
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 02, 2015

Hi Aschi,

using ">30000 or <30050" will cause every single port to trigger, since port :1 would be lower than :30050 and port :65535 would be higher than 30000. The problem is caused by the "OR" operator which requires "at least one" of the expression to be "true" to trigger the desired action...

The right snipped for your task would make use of an "AND" operator...

if { ( [TCP::local_port] > 30000 ) and ( [TCP::local_port] < 30050 ) } then {
    pool poola
} elseif { [TCP::local_port] == 22 } then {
    pool poolb
} else {
    drop
}

By doing so, the port must be above :30000 AND below :30050 to trigger the desired action. Furthermore "elseif" is your friend to chain several independent expressions in a single "If" command.

Cheers, Kai