For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sarlindo's avatar
sarlindo
Icon for Altostratus rankAltostratus
Jan 27, 2021
Solved

F5 APM/LTM Ansible module - which to use for changing apm access profile attached to VS?

I would like to use the ansible f5 modules to basically remove or add an access policy attached to a virtual server list. Which ansible f5 module would I use for that?     Would it be the bigi...
  • Dario_Garrido's avatar
    Dario_Garrido
    Jan 29, 2021

    Hello Sarlindo.

    As I said in my previous response :-), 'profiles' option is a 'replace-all-with' action, so you have to introduce a complete list of profiles to assign on the VS.

    In the documentation states this:

    "List of profiles (HTTP, ClientSSL, ServerSSL, etc) to apply to both sides of the connection (client-side and server-side) ... If you want to remove a profile from the list of profiles currently active on the virtual, simply remove it from the profiles list".

    Conclusion:

    • With AP profile: {{ tcp http myaccess-prof }}
    • Without AP profile: {{ tcp http }}

    So, your variable "ans_f5_access_profile" should be a complete list with all the profiles assigned to the VS.

    If this was helpful, I will appreciate if you mark my answer as 'the best' to help other people to find it ;-).

     

    Regards,

    Dario.