Forum Discussion
Goldz_180077
Nimbostratus
NimbostratusHow to create an iRules that allowing multiple ports on a single VIP IP address
How to create an iRules that allowing multiple ports on a single VIP IP address. Example i have 1 VIP 10.10.10.10 with port range 50000-60000 for SFTP active, with pool member 20.20.20.20 port: 50000...
Additionally with the same i-rule can you change your VIP to performance layer 4 instead of standard and then check do a tcpdump to see whether the VIP is doing a 3way handshake.
Maneesh_72711
Cirrostratus
CirrostratusYes looks fine.
Goldz_180077but we can access other ports. meaning the irules is not working well.
- Maneesh_72711
You mean you can access the VIP on other port as well ? apart from the specified range 50000 - 60000 ?
Can you paste the tcpdump output when you try connecting it from outside say TCP port 20.
- Goldz_180077
i think, since we are using all ports on the VIP, that's why we can acess all ports.
can you give me the tcpdump command.