how to persistant client when using bigip load balance firepass

We are also migrating our firepass from internal clustering to bigip and have the same issue with roaming SSL VPN users over multiple IP Addresses.

 

 

So with this new I-Rule, how to I setup my persistence settings?

 

 

Local Traffic >> Virtual Server >> Profile

 

Default Persistence Profile: FirePassCookie-http-insert

 

Fallback Persistence Profile: None or Source_Addr?

 

 

I will still like to use source_addr persistence for PDA / cookie less devices but not roaming users.

 

 

So far our experience tells us that Default Persistence cookie is not working at all with the original i-rule from the f5 website. If we set the fallback persistence to none, we get no persistence connection on the statistic table and user traffic hit all firepass nodes.