Forum Discussion
iRule for source IP addresses
Ok, I need to add more detail to my issue:
This is a connection for a new VMware View 5.1 Environment built on an iApp
This is connecting to an external IP address that is sent the VIP in our DMZ to connect to Security Servers. The security servers proxy the connection into the Internal VIP for the connection servers.
This works fine externally. Where we are having issues is when people are on our Guest wireless network which is another DMZ. When the users connect to the security servers, they can login, but can't connect to the View Desktop. We are thinking that this comes from the fact that we don't allow "hair-pinning" on the firewall, so I am looking at a URL rewrite for the users in the Guest wireless DMZ
So, when a user connects from external, the security servers send a URL for the client to connect to, I need that URL rewritten when sent to the clients.
so the user connects to the Guest network.
Those users are on a 10.0.0.0/20 network
The URL External is 208.1.1.1
The URL Internal is 10.0.0.10
This is what I have been looking at
when HTTP_REQUEST {
if { ({HTTP::host eq "208.1.1.1" and [IP::addr[IP::client_addr] equals 10.0.0.0/20]}{
HTTP::redirect "10.0.0.10"
}}
Does this make sense?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com