Sep 2026 - DevCentral will be set to Read-Only on Sep 14th for a platform update. Details: DevCentral is Evolving.

Forum Discussion

kimhenriksen's avatar
kimhenriksen
Icon for Cirrocumulus rankCirrocumulus
Apr 22, 2021

irule for identifying corporate network..

I am setting up an always on machine tunnel solution using edge client.. but as the dns location isn´t working with the tunnel service I want to create an irule to use in the vpe that would check if ...
application delivery
BIG-IP Access Policy Manager (APM)
irules
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Apr 22, 2021

You can use the "ACCESS_POLICY_AGENT_EVENT" so that one time during the policy check before the network resource is assigned you can check the client IP address and set a custom variable after that use an General purpose “empty” object and make a branch rule to check if for example "expr { [mcget {session.vpn.private}] == "1" }" and make so that if the customer is in the private IP range then to not assign a "Network_access" object.

 

https://clouddocs.f5.com/api/irules/ACCESS_POLICY_AGENT_EVENT.html