For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amit585731's avatar
Amit585731
Icon for Nimbostratus rankNimbostratus
Feb 22, 2016

Capturing Client IP address for LDAP, FastL4 etc VS

Hi Team,   Is there a possibility we can capture client IP address on server side for LDAP, Fast L4 VS? Those which are not utilizing HTTP profile.   When I think at LTM side we can write irule...
application delivery
client ip
logging
LTM
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Feb 22, 2016

Yes, on the LTM you can use an iRule to log the client IP address.You could also use an iRule to log the selected server/pool member IP address for each connection.

 

On the server side for a non-HTTP-server it is not that easy if you are using a SNAT/AutoMap (in which case your LDAP/FastL4 server will always see the egress self-IP of F5 as the client address).

 

If you configure your LDAP server to have the F5 selfIP address as the default gateway you don't need to use the SNAT and your LDAP server will see the original client IP.