Forum Discussion
hung_37471
Nimbostratus
Sep 26, 2011How to config PBR
hi all
can you help me , how to config PBR on the BIg Ip ?
on the web GUI , i can't see anywhere to config PBR
thanks all
78 Replies
- Michael_Yates
Nimbostratus
Can you tell us what PBR is? I have no idea what you are referring to. - Steve_Brown_882Historic F5 AccountPBR typically refers to "Policy Based Routing" not surehow the origninal poster was looking to employ PBR but I could see using an irule with a forwarding virtual server to accomplish some sort of PBR.
- Hamish
Cirrocumulus
You can accomplish simple PBR using VS's... And tie them to explicit inbound vlans...
More complex will require an iRule... But the world is your oyster there... Just be aware that you probably won't get any acceleration if you're using iRules on a VS...
H - The_Bhattman
Nimbostratus
Hi Hung,
Creating a PBR is very similar to creating a vip and pool along with an iRule.
1. You would create a wildcard virtual forwarding server.
2. Then you would create a pool with the IP address of the next hops that will be chosen based on your conditions.
Example Irulewhen CLIENT_ACCEPTED { if { [IP::addr [IP::local_addr] equals 10.0.0.1/24 ]}{ pool pool_hop_1 } elseif { [IP::addr [IP::client_addr] equals 192.168.1.0/24]}{ pool pool_hop_2 } else { pool pool_hop_3 } }
I hope this is a good start
Bhattman - Nathan_Houck_65
Nimbostratus
This may be possible using Acces Policy Manager - Can you tell us exactly what' you're trying to accomplish?
- Parinya_Ekparin
Nimbostratus
I'm new to F5 products and try to figure out the same thing, how to config policy based routing, so please don't mind me if I'm going to continue this thread.
From Bhattman reply, my understanding is wildcard virtual server will process every packets come to F5 and iRule associated with that wildcard virtual server will choose appropriate pool for those packets according to the sequence.
But what I still don't understand is since command 'pool' has been used, wouldn't F5 modified dst ip of packets to next hop ip address of a member selected? What we want is just to send it out the way we want but not to alter its dst ip.
Could someone explain to me and apologize for a newbie question. Thank you in advanced.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects