LDAP traffic

To perform comparison of client IP address with a list of addresses or subnets in a Data Group List (class), define your class as type "Address", then use matchclass instead of findclass.

First define these classes as type "Address":

class LDAP_GroupA {
  "network 10.16.13.0/26"
  "host 10.10.10.1"
}
class myPoolB{
  "network 10.16.13.64/26"
  "host 10.10.10.2"
}

Then this iRule will distribute the traffic:

when RULE_INIT {
  set ::defaultPool myPool
}
when CLIENT_ACCEPTED {
  TCP::collect
}
when CLIENT_DATA {
  set LoginIP [findstr [TCP::payload] LOGIN-IP 9 "MSISDN"]
  if {$LoginIP != ""}{
    if { [matchclass $LoginIP equals $::LDAP_GroupA]}{
      pool PoolA
    } elseif { [matchclass $LoginIP equals $::LDAP_GroupB]}{
      pool PoolA
    }
  } else {
    pool $::defaultPool
  }
  TCP::release
}

Any request with no LOGIN-IP value or an address not in either class will go to the default pool.

HTH

/deb