Forum Discussion

Vincent_95925's avatar
Vincent_95925
Icon for Nimbostratus rankNimbostratus
Aug 26, 2012

Irule to filter access to VIP -- F5 V.9.4.7

Hi Guys,     I am very new to implementing irules and I need your expert advices. We're trying to implement an irule that will filter access to Virtual Servers. We have a list of subnets (app...
application delivery
dev
devops
iRules
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Aug 27, 2012
If you're using v10 or later, I'd change the matchless to use the (Newer) [class ...] syntax. That'll get rid of your $:: namespace problems and enable CMP mode.

The syntax would be somethign like 


when CLIENT_ACCEPTED {
    if { [class lookup [IP::client_addr] "Drop_Subnet_Class"] }{
      discard
    }  
}

H