Forum Discussion

hpr_220139's avatar
hpr_220139
Icon for Nimbostratus rankNimbostratus
Oct 16, 2018

LTM: Multiple Source IP Addresses / Masks vor virtual server?

Dear community,   I'm trying to limit access to a virtual server to two subnets. Is there any chance for this? I tried in vain the values "10.10.10.0/24 10.10.20.0/24" and same with comma, semicol...
application delivery
LTM
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 16, 2018

You can't do this in the source address field of the VIP itself. You'd need either an iRule, CPM policy, or packet filter rule. Here's an example iRule using an address-type data group:

when CLIENT_ACCEPTED {
    if { not ([class match [IP::client_addr] equals "localusers_dg"]) } {
        reject
    }
}