Forum Discussion

slesh_219299's avatar
slesh_219299
Icon for Cirrus rankCirrus
Feb 23, 2017

irule allow only one IP to VIP

Hi guys I need to allow only one ip to vip and will this help ? when CLIENT_ACCEPTED { if { ( [IP::addr [IP::client_addr] equals "11.22.33.44"] ) } then { Allow } else { DRO...
BIG-IP
iRules
security
  • slesh_219299's avatar
    slesh_219299
    Nov 30, 2017

    Ok I had to go with data group

    when CLIENT_ACCEPTED {
 Check the data group
if { ! ([class match [IP::client_addr] equals allow_2_IP ]) } {
     Not valid client
    drop
}

    }

    works fine but if someone have irule which allow only 2 ips it would be great also 🙂

Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Feb 23, 2017

Should work. You can use drop instead of reject if you don't need to inform the client and just drop silently.