Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Apr 22, 2020

get client mac address through header in irule.

I would like to restrict access to portal through client mac address using i rule, i tried with [LINK::lasthop] but does not work since it retrieve the vlan mac address not the physical mac address ...
dev
devops
irules
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Apr 23, 2020

If you don't want the lasthop MAC address then what do you want?

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Apr 23, 2020

I want the physical mac address of client (pc mac address), cuz i noticed that [LINK::lasthop] retrieve the mac address of router not pc mac address.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Apr 29, 2020

    that is not possible for a regular TCP / UDP request. the client MAC address is only known locally at the client (and its layer 2 network).

     

    with a BIG-IP Edge client i do believe you can get it. but on regular TCP / UDP no way.

  • THE_BLUE's avatar
    THE_BLUE
    Icon for Cirrostratus rankCirrostratus
    Apr 29, 2020

    Noted, Thank you