For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

done_23947's avatar
done_23947
Icon for Nimbostratus rankNimbostratus
May 05, 2015

iRule help w/ no snat for public DMZ

I've been using a irule for several yrs and believe it works as intended. I don't change or snat public DMZ networks (neiu_dmz_subnets). I need to add another DMZ public network (ATT_DMZ) that I don'...
application delivery
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
May 06, 2015

ATT_DMZ data grp is 12.239.13.193/255.255.255.192.

i think it should be 12.239.13.192/255.255.255.192.

root@(ve11c)(cfg-sync In Sync)(Active)(/Common)(tmos) create ltm data-group internal ATT_DMZATT_DMZ type ip records add { 12.239.13.193/255.255.255.192 }
01070655:3: Invalid address and mask 12.239.13.193 and 255.255.255.192. Address must equal address & mask.
root@(ve11c)(cfg-sync In Sync)(Active)(/Common)(tmos)
root@(ve11c)(cfg-sync In Sync)(Active)(/Common)(tmos)
root@(ve11c)(cfg-sync In Sync)(Active)(/Common)(tmos) create ltm data-group internal ATT_DMZATT_DMZ type ip records add { 12.239.13.192/255.255.255.192 }
root@(ve11c)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm data-group internal ATT_DMZATT_DMZ
ltm data-group internal ATT_DMZATT_DMZ {
    records {
        12.239.13.192/26 { }
    }
    type ip
}