For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Teerarat's avatar
Teerarat
Icon for Cirrostratus rankCirrostratus
Mar 21, 2025

Can i apply ddos profile on virtual server using port range

Hi Everyone,

 

Can i apply ddos profile on virtual server that using shared object port range, I try to test and found error below,

 

01b40026:3: Configuration error: Virtual server (/Common/vs-ddos-5000-5010) with TMC or security ACL/NAT/IPI/DoS/Eviction/Scrubber/Blacklist Publisher configured cannot co-exist between them.

DDOS profile
security

2 Replies

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Mar 26, 2025

    Hi Teerarat,

    tmsh modify sys db afm.allowtmcvirtuals value true


    After v15.1, if the virtual server uses port list, the dos profile can be assigned by changing the DB key. However, there is a warning in the related article.
    Important: Use of TMC virtual servers with ASM/AWAF is not fully supported at this time, so enabling afm.allowtmcvirtuals should be considered experimental.

    REF: https://my.f5.com/manage/s/article/K28358628