Forum Discussion

Antonio_Varni's avatar
Antonio_Varni
Icon for Nimbostratus rankNimbostratus
Mar 31, 2015

local traffic policy operand for source ip address?

11.5.1 HF7.

 

Only licensed for LTM... am I missing something here?

 

Just want to whitelist a small list of networks and block access to the rest for a specific vip. Yes I know I can use an irule, an irule with a data group, or a packet filter. http class seemed to be an easy way to do this in a more structured, easy to edit for those less experienced way. Those gave way to local traffic policies, but I can't seem to find an operand for that.

 

Do I need to upgrade, or is this sort of thing moved into a different module now? Or are my choices irules or packet filters?

 

thanks!

 

application delivery
local traffic policy
LTM

2 Replies

  • Stewart's avatar
    Stewart
    Icon for Altostratus rankAltostratus
    Mar 31, 2015

    Hi Antonio,

     

    You should be able to put the source addresses into the source field in the Virtual Server.

     

    Thanks, Stewart.

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Apr 03, 2015

    I don't think this is possible with a local traffic policy. There are no IP-based operands. I see that the TCP operand has an "address" selector (v11.6) but there is no documentation on it's use and I recieved an error attempting to configure it with an IP address. It's down to packet filter, iRule, or AFM if you're licensed for that.