Forum Discussion
genseek_32178
Nimbostratus
Nimbostratusmatchclass
Hi,
We ve a external src 10.10.10.52..trying to access dst 10.210.0.10 ( vlan - X )
dst has its gwy as bigip and bigip has following iRule associated with wild card CS WVS1.
...
nitass
Employee
Employeei think you had better forget matchclass/irule first.
starting at virtual WVS1 setting. since the virtual is enabled on vlan X, only packet which coming from vlan X will be handled by the virtual. as you said, icmp request from 10.10.10.52 is not coming from vlan X, so it won't be accepted by the virtual.
for icmp reply from 10.210.0.10, it is coming from vlan X, so it will hit the virtual and irule will be triggered.
in the irule, since client_accepted event is client-side context, ip::local_addr is destination address of icmp reply packet.
hope this helps.
