Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Dec 04, 2013

Injecting additional routes on the client

Can I inject additional routes on the client side with APM during login?

 

In addition to the routes provided by the split tunnel I want to dynamically create routes into the ppp adapter on the client side based on information they give on the login page. Routing domains do not carry the flexibility I need as this is per user.

 

BIG-IP Access Policy Manager (APM)
management
routing
security
split tunnel
  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Dec 05, 2013

    Hey Kevin,

    I have dug into this a little and from what I can see it cannot be configured to dynamically assign extra routes. I didn't see a session variable that would work for this and when doing a tcpdump and ssldump and looking at the output you will see XML generated and embedded into a response which I assume the uses the components to start the PPP adapter with the settings in the XML...

    1
192.168.0.0/255.255.255.0

    This was part of the XML file and that is the IP address I added to the split tunnel config.

    I would suggest opening a case with F5 and requesting an RFE or seeing if they can find a way to accommodate this configuration. (you could obviously setup a separate network access resource for each user but I assume you have way to many users for this to not be a nightmare).

    Regards,

    Seth Cooper