Forum Discussion

A__Gotink_33511's avatar
A__Gotink_33511
Icon for Nimbostratus rankNimbostratus
Jun 20, 2013

How to add multiple ipadresses as source voor VIP

I want to restrict our SMTP server that is offered through BigIP LTM 11.3

 

I only want a list of 20 servers (ipaddresses) to be able to use SMTP (relaying)

 

I cannot restrict it on our Exchange servers because they only see te loadbalancer IP address.

 

In the source field of the VIP i only can enter 1 subnet.

 

that subnet can containt 1 server or several servers on that particular subnet.

 

How can I enter a list? iRules?

 

config
design

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jun 20, 2013
    There's at least two good ways to do it, if not more.

    1. Packet filter configuration - under Network settings, this allows you to define a TCPDUMP-like filter of allowable source and destination addresses.

    2. An iRule and a data group - the easier option, create an address-based data group and enter your desired source IPs or IP subnets. Then create an iRule similar to this one: 

    
when CLIENT_ACCEPTED {
if { not [class match [IP::client_addr] equals test_iplist_datagroup] } {
reject
}
}