Forum Discussion
hpr_220139
Nimbostratus
Oct 16, 2018LTM: Multiple Source IP Addresses / Masks vor virtual server?
Dear community,
I'm trying to limit access to a virtual server to two subnets. Is there any chance for this? I tried in vain the values "10.10.10.0/24 10.10.20.0/24" and same with comma, semicolon and several others. But I always get the "Error parsing IP address" message.
Thanks for any help HP.
- hpr_220139
Nimbostratus
Sorry, I forgot: Running BigIP 13.1.1 .
- Kevin_Stewart
Employee
You can't do this in the source address field of the VIP itself. You'd need either an iRule, CPM policy, or packet filter rule. Here's an example iRule using an address-type data group:
when CLIENT_ACCEPTED { if { not ([class match [IP::client_addr] equals "localusers_dg"]) } { reject } }
- puluck
Cirrus
- hpr_220139
Nimbostratus
Thanks guys! :)
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects