For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_Schmit_'s avatar
Richard_Schmit_
Icon for Nimbostratus rankNimbostratus
Apr 22, 2013

Load Balance Cisco ISE servers

Trying to load Balance several Cisco ISE servers. For persistence, Cisco recommends using Calling-Station-ID and Framed-IP-address...Session-ID is recommended if load balancer is capable of it. I h...
application delivery
dev
devops
iRules
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Jun 18, 2013
e.g. 

[root@ve10:Active] config  b virtual bar list
virtual bar {
   snat automap
   pool foo
   destination 172.28.19.252:1812
   ip protocol 17
   rules myrule
   profiles udp_gtm_dns {}
}
[root@ve10:Active] config  b pool foo list
pool foo {
   members 200.200.200.101:1812 {}
}
[root@ve10:Active] config  b rule myrule list
rule myrule {
   when CLIENT_ACCEPTED {
  log local0. "\[RADIUS::avp CALLING-STATION-ID\] [RADIUS::avp CALLING-STATION-ID]"
  log local0. "\[RADIUS::avp FRAMED-IP-ADDRESS\] [RADIUS::avp FRAMED-IP-ADDRESS]"
  persist uie "[RADIUS::avp CALLING-STATION-ID]:[RADIUS::avp FRAMED-IP-ADDRESS]"
}
}

[root@ve10:Active] config  tail -f /var/log/ltm
Jun 18 18:57:44 local/tmm info tmm[4950]: Rule myrule : [RADIUS::avp CALLING-STATION-ID] 123456
Jun 18 18:57:44 local/tmm info tmm[4950]: Rule myrule : [RADIUS::avp FRAMED-IP-ADDRESS] 1.1.1.1

[root@ve10:Active] config  b persist show all
PERSISTENT CONNECTIONS
|     Mode universal   Value 123456:1.1.1.1
|        virtual 172.28.19.252:1812   node 200.200.200.101:1812   age 14sec
Nick_Ehlers_132's avatar
Nick_Ehlers_132
Icon for Nimbostratus rankNimbostratus
Dec 09, 2013
Working iRule: when CLIENT_ACCEPTED { set framed_ip [RADIUS::avp 8 ip4] set calling_station_id [RADIUS::avp 31 "string"] log local0. "request from $calling_station_id:$framed_ip" persist uie "$calling_station_id:$framed_ip" }