For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 11, 2010

Connection Mirroring and IRule Problem

Hi All,     New to the wonderful world of F5 and getting this error when trying to run connection mirroring and iRule.     This is the iRule we're using to permit only trusted IP...
config
design
spark_86682's avatar
spark_86682
Historic F5 Account
Feb 11, 2010
I'm not sure why mirroring and a cmp disabled virtual server are incompatible. However, the easy and obvious fix is to change: 

 
  if { [matchclass [IP::client_addr] equals $::trustedAddresses] }{

to 

 
  if { [matchclass [IP::client_addr] equals trustedAddresses] }{

Usually, the "$::" prefix refers to a global variable, which is not compatible with CMP. On recent versions (9.4.2 (I think) and later) removing the "$::" will allow the matchclass command to work, while not making the system think you are using a global variable. This will also allow your virtual server to run on all processors, not just one (this is what CMP is), which can have a significant performance impact.