Forum Discussion
Faintly_Lucky
Mar 17, 2011Nimbostratus
iRule not triggered on target VIP after using the virtual iRule command to direct traffic to it
My company has a pair of 1600s (9.4.8 HF4) that accept and load balance all of the syslog traffic generated by our devices to several syslog pools.
Recently, we had a requirement come dow...
hooleylist
Mar 23, 2011Cirrostratus
Can you add the return command and some debug logging and then reproduce the issue?
rule syslog-pool-select-v5 {
when CLIENT_ACCEPTED {
switch [IP::client_addr] {
xxx.xxx.xxx.xxx -
xxx.xxx.xxx.xxx { virtual seim-syslog-tacacs; return }
}
if { [matchclass [IP::client_addr] starts_with syslog_chan1_string] }
{ pool syslog_pool_Channel_1 }
elseif { [matchclass [IP::client_addr] starts_with syslog_chan2_string] }
{ pool syslog_pool_Channel_2 }
}
when LB_SELECTED {
log local0. "[IP::client_addr]:[UDP_::client_port]: selected: [LB::server]"
}
when SERVER_CONNECTED {
log local0. "[IP::client_addr]:[UDP_::client_port]: Connected: [IP::server_addr]:[UDP::server_port]"
}
}
rule syslog-tacacs-pool-select-v2 {
when CLIENT_DATA {
set paddr [findstr [UDP::payload] Address 8 ,]
log local0.info "address $paddr"
if { [matchclass $paddr starts_with $::xxxxxsubnetstring] } { set ::xxxxx 1
log local0.info "I matched the xxxxx pool, YAY!.....addr $paddr" }
else { set ::xxxxx 0
log local0.info "selected syslog channel 1" }
}
when LB_SELECTED {
set paddr [findstr [UDP::payload] Address 8 ,]
switch $::xxxxx {
1 { LB::reselect pool syslog_pool_xxxxx
log local0.info "I selected the xxxxx pool, YAY!.....addr $paddr"
}
}
}
when LB_SELECTED priority 501 {
log local0. "[IP::client_addr]:[UDP_::client_port]: selected: [LB::server]"
}
when SERVER_CONNECTED {
log local0. "[IP::client_addr]:[UDP_::client_port]: Connected: [IP::server_addr]:[UDP::server_port]"
}
}
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects