Forum Discussion
Goldz_180077
Nimbostratus
NimbostratusHow to create an iRules that allowing multiple ports on a single VIP IP address
How to create an iRules that allowing multiple ports on a single VIP IP address. Example i have 1 VIP 10.10.10.10 with port range 50000-60000 for SFTP active, with pool member 20.20.20.20 port: 50000...
Additionally with the same i-rule can you change your VIP to performance layer 4 instead of standard and then check do a tcpdump to see whether the VIP is doing a 3way handshake.
It might be worthwhile to invert your logic and drop the "not" statement, to verify everything is working, then work towards flipping it back.
This is untested:
if{([TCP::local_port] > 50000 and [TCP::local_port] < 60000)} {
permit
elseif {[TCP::local_port] == 22 }{
permit
} else {
Drop request
drop
}
