Forum Discussion
awan_m
Cirrostratus
CirrostratusDatagroup with address and value
Hi - want to do a check on F5 when ssl handshake - extract OU from certificate and validate it against client IP . so i created a data group with address and value Question how would i match the...
zamroni777
MVP
MVPyou can add logic to verify whether the client ip address belongs to address range.
awan_mCirrostratus
Cirrostratusthanks for the reply -
i want to match both ip and OU
meaning - ip client IP and extracted ou match the address and value in the datagroup
records {
10.10.10.0/24 {
data Prod
}
- zamroni777
you need to do in 2 steps:
1. determine which address range that the client ip address belongs to (using the above IP:addr .....; loop the address ranges until matching one)
2. check whether the ou matches the address range (using the data group)
