For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

teknet7_237497's avatar
teknet7_237497
Icon for Nimbostratus rankNimbostratus
Dec 14, 2015

iRule: persist uie "$var1:$var2"

Hello Team, I have just found i can create persistence entry using two variables example: persist uie "$var1:$var2" But not sure how can later use it. Is it possible to hit it if matching...
application delivery
iRules
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Dec 16, 2015

Hi,

in case the accounting server would return the framed IP it would look as follows (assuming AVP31 represents the calling station ID): 
 rule for RADIUS authentication udp/1812
when LB_SELECTED {
    log local0. "session table entry added: "
    session add uie "persist:[RADIUS::avp 31]" [LB::server addr]
}

 rule for RADIUS accounting udp/1813
when CLIENT_DATA {
   log local0. "session table lookup result: [session lookup uie "persist:[RADIUS::avp 31]"]"
   if {[session lookup uie "persist:[IP::client_addr]"] ne ""} {
       log local0. "lookup match: [session lookup uie "persist:[RADIUS::avp 31]"]"
       node [session lookup uie "persist:[RADIUS::avp 31]"]
   }
}
when SERVER_DATA {
    log local0. "session table entry added: "
    session add uie "persist:[RADIUS::avp 8]" [IP::remote_addr]
}

As initially proposed by cjunior we are using two table entries (keys) pointing to the same real server IP. Thanks, Stephan