Forum Discussion

m1978_295079's avatar
m1978_295079
Icon for Nimbostratus rankNimbostratus
May 15, 2017

Cofiguring source in virtual server

My scenario here is client ----http----F5----https---server. I want to put a filter in Virtual server to allow certain clients 192.168.1.0/24 instead of any. I can see there is a field name Source in Virtual server configuration. In that field how can I use multiple ip addresses ? also if from specific subnet what would be the syntax ? if someone can describe with an example that would be great.

 

BIG-IP
devops
  • Anesh's avatar
    Anesh
    Icon for Cirrostratus rankCirrostratus
    May 15, 2017

    Use Packet Filtering option In the BIG-IP management GUI, go to Network - Packet Filters. Select the "Enabled" option and then configure appropriately. packet filtering

     

  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    May 15, 2017

    Hi,

     

    In Source Address you can only specify continuous IP range, like 192.168.1.0/24. If you need to specify not continous range it's necessary either to use iRule (probably with Address type Data Group) or use Packet Filter as mentioned in previous reply.

     

    From my experience people are most often using iRule approach but both should work. Packet filter is much more cumbersome to maintain if you have many IPs and ranges to manage. Much easier is to manage Data Group - just my opinion.

     

    Piotr