For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Raymond_Feng_97's avatar
Raymond_Feng_97
Historic F5 Account
Jul 20, 2006

how to persistant client when using bigip load balance firepass

There is two problem when using bigip load balance firepass:   1> For ADSL client, when user logon the firepass, his adsl line dropped and reconnected adsl, so the client ip address had been change...
BIG-IP Access Policy Manager (APM)
remote access
security
blacksan_10396's avatar
blacksan_10396
Icon for Nimbostratus rankNimbostratus
Dec 08, 2006
We are also migrating our firepass from internal clustering to bigip and have the same issue with roaming SSL VPN users over multiple IP Addresses.

 

 

So with this new I-Rule, how to I setup my persistence settings?

 

 

Local Traffic >> Virtual Server >> Profile

 

Default Persistence Profile: FirePassCookie-http-insert

 

Fallback Persistence Profile: None or Source_Addr?

 

 

I will still like to use source_addr persistence for PDA / cookie less devices but not roaming users.

 

 

So far our experience tells us that Default Persistence cookie is not working at all with the original i-rule from the f5 website. If we set the fallback persistence to none, we get no persistence connection on the statistic table and user traffic hit all firepass nodes.