Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

iRule to mimic Cisco ACL for Forwarding VIP

Hi All,     Can somebody please help me write an iRule that will permit/deny the outside world from accessing the real servers behind the F5???     For example I have an inside_v...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 09, 2010
Hi Andy,

 

 

You can use IP::addr to compare a single IP or subnet against another single IP or subnet. Or you can use matchclass to compare a single IP or subnet against an address type datagroup of IP addresses or subnets.

 

 

Here are a few related links:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/ip__addr

 

http://devcentral.f5.com/wiki/default.aspx/iRules/matchclass

 

http://devcentral.f5.com/wiki/default.aspx/iRules/AccessControlBasedOnIP.html

 

http://devcentral.f5.com/wiki/default.aspx/iRules/AccessControlBasedOnNetworkOrHost.html

 

 

Aaron