Martin_Kaiser_1
May 25, 2011Nimbostratus
iRule error in F5's MS Exchange 2010 deployment guide V2.1?
hi guys,
I'm struggling with MS Exchange 2010 load balancing, especially with authentication issues. The f5 provided deployment guide (which is currently being updated every few days) isn't quite helpful at all, especially since they decided to have include only instructions on how to use those pesky wizards in the LTM web GUI...
http://www.f5.com/pdf/deployment-guides/f5-exchange-2010-dg.pdf
However, the newest version includes an iRule for turning off oneconnect transformations during autodiscovery. The instructions concerning that iRule read as follows:
Single virtual server
If you chose a single virtual server, you must add the a small iRule to the secure Autodiscover virtual server created by the template that removes the OneConnect profile only from relevant service. You must first create the iRule and then associate it with the Autodiscover virtual server. To create the iRule
1. On the Main tab, expand Local Traffic and then click iRules.
2. Click the Create button.
3. In the Name box, type a name. In our example, we type autodiscover-irule.
4. In the Definition section, copy the following iRule
when HTTP_RESPONSE {
if { [HTTP::header values WWW-Authenticate] contains "Negotiate" } { ONECONNECT::detach disable }
}
Now, as I understand ONECONNECT::detach, in order to achieve the de-activation of oneconnect, that line should read ONECONNECT::detach ENable instead of DISable. Do you agree?
Regards
Martin