For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

2 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    Josh,

    matchclass has been deprecated since v10 so you should use class match. Try this instead.

    N

    when CLIENT_ACCEPTED {
        if { [class match [IP::client_addr] equals "SNAT_IP" ] } {
          snatpool SNATPool_Internal } 
    }
    
  • Not 100% sure here, but either the matchclass is finally and completely deprecated in 11.4, or the $:: naming convention no longer works. Try this:

    when CLIENT_ACCEPTED {     
        if { [class match [IP::client_addr] equals SNAT_IP] } {         
            snatpool SNATPool_Internal             
        }         
    }
    

    where SNAT_IP is presumably the name of your address-based data group.