For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Oct 01, 2012

IP Forwading VIP - Access List

Hi, I've put together the following iRule to prevent two subnets communicating via the virtual forwarding VIP. We have several VLANS behind the LTM and two of which cannot communicate with ea...
application delivery
dev
devops
iRules
Mohamed_Lrhazi's avatar
Mohamed_Lrhazi
Icon for Altocumulus rankAltocumulus
Oct 01, 2012
Your iRule looks good. I would use it, instead of packet filters on BIGIP (I never used them or seen anyone use them).

 

 

I also dont understand what you are saying about SNAT.. I dont see how SNAT is an alternative solution to "prevent x and y from talking to each other"...

 

 

Thanks,

 

Mohamed.