For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

slesh_219299's avatar
slesh_219299
Icon for Cirrus rankCirrus
Feb 23, 2017
Solved

irule allow only one IP to VIP

Hi guys I need to allow only one ip to vip and will this help ? when CLIENT_ACCEPTED { if { ( [IP::addr [IP::client_addr] equals "11.22.33.44"] ) } then { Allow } else { DRO...
BIG-IP
iRules
security
  • slesh_219299's avatar
    slesh_219299
    Nov 30, 2017

    Ok I had to go with data group

    when CLIENT_ACCEPTED {
 Check the data group
if { ! ([class match [IP::client_addr] equals allow_2_IP ]) } {
     Not valid client
    drop
}

    }

    works fine but if someone have irule which allow only 2 ips it would be great also 🙂

Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Feb 23, 2017

Or this:

when CLIENT_ACCEPTED {
    if { !( [IP::addr [IP::client_addr] equals "11.22.33.44"] ) } {
        reject
    }
}