Forum Discussion
Mariappan_S_156
Nimbostratus
NimbostratusF5 APM CLIENT SECURITY MAC ADDRESS
Our objective was we have list of mac address’s of our corparate systems in a text file lik below.
00:19:DB:DC:3E:8F
00:1D:92:47:75:EF
we need to check the user system mac address at the ti...
-
Which type of data group should be used internal or external?
internal as it is not in file -
In data group how format we enter the data. (00:1D:92:47:75:EF or mac := 00:1D:92:47:75:EF)
Just 00:1D:92:47:75:EF -
In which column String or Value we need to enter Mac address.
Enter the mac address list in column string -
In VPC what is value we need to enter on Custom iRule Event Agent ID
You can use any string as ID.
-
Stanislas_Piro2
Cumulonimbus
CumulonimbusHi,
I wrote this irule to count and close previous session before this feature is included in APM.
when ACCESS_POLICY_AGENT_EVENT {
switch [ACCESS::policy agent_id] {
"close" {
set apm_csid [ ACCESS::session data get session.custom.concurrentid ]
if {$apm_csid != 0} {
log local0. "fin de la session $apm_csid"
ACCESS::session remove -sid $apm_csid
}
}
"user_count" {
set apm_uuid "[PROFILE::access name].[ACCESS::session data get session.logon.last.username]"
set apm_cookie_list [ ACCESS::uuid getsid $apm_uuid ]
if {[llength $apm_cookie_list] != 0} {
set apm_concurentid [ lindex $apm_cookie_list 0 ]
set apm_concurentip [ACCESS::session data get session.user.clientip]
}
else {
set apm_concurentid 0
set apm_concurentip 0
}
ACCESS::session data set session.custom.concurrentnum [llength $apm_cookie_list]
ACCESS::session data set session.custom.concurrentid $apm_concurentid
ACCESS::session data set session.custom.concurrentip $apm_concurentip
log local0. "session concurrente $apm_concurentid"
}
}
}
in this irule policy_id is the event ID of irule event in VPE. the user authenticated on a policy is identified by its uuid :
set apm_uuid "[PROFILE::access name].[ACCESS::session data get session.logon.last.username]"