For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 31, 2014

Not 100% sure here, but either the matchclass is finally and completely deprecated in 11.4, or the $:: naming convention no longer works. Try this:

when CLIENT_ACCEPTED {     
    if { [class match [IP::client_addr] equals SNAT_IP] } {         
        snatpool SNATPool_Internal             
    }         
}

where SNAT_IP is presumably the name of your address-based data group.