Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

iRule to mimic Cisco ACL for Forwarding VIP

Hi All,     Can somebody please help me write an iRule that will permit/deny the outside world from accessing the real servers behind the F5???     For example I have an inside_v...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 10, 2010
Can you make a copy of the iRule to use just for the port 80 VIP and remove the forward command from that version?

 

 

Requests from untrusted clients will be dropped and all others will go to the VIP's default pool. The forward command stops LTM from doing destination address translation and sends the request out according to the routing table.

 

 

You can check the /var/log/ltm log file for output from iRules logging to local0. 'tail -f /var/log/ltm' allows you to watch the end of the ltm log file. Type Ctrl+c to stop the tail command from running.

 

 

Aaron