Forum Discussion
AngryCat_52750
Nimbostratus
Nov 22, 2013iRule - ACL - source ip and port
i am trying to setup an iRule to allow a specific group of IPs and now i need to add access to only a specific port.. what is the command for the port?? the current iRule for ports is below -
this event is triggered when a client - BIG-IP TCP connection is established
when CLIENT_ACCEPTED {
Check if the client IP is not part of the datagroup hosts/networks
if { not ([matchclass [IP::client_addr] equals allowed-servers]) }{
Log dropped requests
log local0. "Denied Access-servers: [IP::client_addr]"
drop the request
discard
}
}
1 Reply
- jgranieri
Nimbostratus
You can also use matchclass for ports as well: something like this:
Check to see if the destination port is allowed if { [class match [TCP::local_port] equals Name_of_Data_group] }{
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects