Forum Discussion
genseek_32178
Jul 11, 2012Nimbostratus
matchclass
Hi,
We ve a external src 10.10.10.52..trying to access dst 10.210.0.10 ( vlan - X )
dst has its gwy as bigip and bigip has following iRule associated with wild card CS WVS1.
Vlan X is enabled on the wild card WVS1
virtual WVS1
pool WSpool
destn any:any
mask 0.0.0.0
rule R1
profiles PF1
vlan X
iRule is attached.
Question is - If the src 120.10.10.52 wants to access (ICMP) dst 10.210.0.10...
does the src network 120.x need to be part of the match class or not?
thnx-gensk
6 Replies
Sort By
- Question is - If the src 120.10.10.52 wants to access (ICMP) dst 10.210.0.10...icmp request is coming from vlan X, isn't it?
- NO........icmp request is coming from the external client 10.10.10.52...to dst 10.210.0.10
- does it mean....dst IP in the outgoing IP packet..outgoing from..Vlan X.( 10.210.0.x) ..which is part of the match class.i think it could be this one since virtual WVS1 is enabled on vlan X.
- i think you had better forget matchclass/irule first.
- but destination address of icmp reply is NOT part of the iRule matchclass, rather it is some remote client.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects