Forum Discussion
IP Inteligence availability
Hello, I am using iRule to log IP Inteligence reputation of clients. After upgrade F5 I had problem with availability of this check. There was not the db until update.
Log:
TCL error: /Common/IPInteligence_xxx - IP Reputation database (/var/IpRep/F5IpRep.dat) not loaded (line 4) invoked from within "IP::reputation $cip"
And the clients were rejected.
Is there any possibility to check if the IP Inteligence is avaliable or not. And let the clients use the service without rejecting? Thanks, Filip
2 Replies
- Vitaliy_Savrans
Nacreous
Hi,
you can check IP Reputation Database Status:
(tmos) show sys iprep-status - Filip_Mikulík
Altostratus
I had problem how to parse result of show sys iprep-status to iRule. I resolved this by edit user_alert.conf:
alert IPInteligence_[xx]-DOWN "TCL error: /Common/IPInteligence_[xx]" { exec command="tmsh modify ltm virtual [xx-vs] rules none"; exec command="logger -p local0.warning IPInteligence_[xx]-DOWN" }So after the iRule logs the error to the LTM log, user alert removes the iRule and writes the warning to the log.
Filip
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com