Forum Discussion
yaoxu_11146
Nimbostratus
Nimbostratushow to write universal ACL iRule
we have a F5 device,which is supporting a lot of VSs, and these VSs require the same ACL, which means these VSs only accept access from our Corp intranet. below is our iRule for certain pool:
...
hoolio
Cirrostratus
CirrostratusYour second rule should work fine to drop any requests which are made from clients not defined in the intranet datagroup. Any other request will be sent to the default pool defined on the virtual server.
If you did want to get the default pool of the VIP without hard coding it, you could use 'set default_pool [LB::server]' before modifying the pool with the pool command. This doesn't look to be necessary in your scenario though.
Aaron
