Forum Discussion
CirrusDataGroups - Route Domains - iRules
When I create a new datagroup to be used in I-Rules that use the new route domain "1", do I need to %1 after all IP addresses I use in the groups?
The reason I ask is because each time I assign this I-Rule "pay-sys-snat-rule" to forwarding VIP it disconnects all connectivity on the payp vlan32.
----------------------------------------
class class1
{ host 10.133.137.151%1 }
!
class snat-list { {
host 64.94.118.33
host 151.151.65.214
host 199.200.26.170
network 206.253.184.0/24
host 207.241.10.136 } }
!
snatpool snat-pool { members 165.79.4.6%1 }
!
rule pay-sys-snat-rule
SNAT 'class1' if these matches 'snat-list' to 'snat-pool'
when CLIENT_ACCEPTED {
if { ([matchclass [IP::local_addr] equals $::snat-list ] ) and
( [matchclass [IP::remote_addr] equals $::class1 ] ) } {
use snatpool snat-pool
}
}
END
----------------------------------------
3 Replies
hoolioCirrostratus
Check this post for status and a few workarounds for using route domains with a iRule and address datagroup:
IP-address based classes support routing domains in v10.1?
http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1172490/showtab/groupforums/Default.aspx1173816
Aaron
TJ_VreugdenhilThanks again Aaron - Using the two SOL's below fixed the issue:
sol12301: The 'class' iRule command does not honor route domain specifications within an IP class
sol10745: iRule syntax requirement for Data Group names containing special characters
Will I see you at the F5 Agility Conference in July, Mr. MVP?
TJ- hoolioThanks for pointing out SOL12301. I'm not sure that's a great solution though as it only supports hosts--not networks.
Will I see you at the F5 Agility Conference in July, Mr. MVP?
If my manager and my boss (my wife) let me :)
Aaron
