For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ejf5_26582's avatar
ejf5_26582
Icon for Nimbostratus rankNimbostratus
Jun 15, 2013

Microsoft "network location server" local on LTM?

Hi,

 

For our Microsoft UAG (Universal Access Gateway) implementation we need to set up a service called "network location server" (http://technet.microsoft.com/en-us/...57360.aspx). This basically is a https service with the only purpose of being "up" and accessible only to clients on the local LAN.

 

Since there's no logic/nodes/pools behind this service I thought about implementing it locally on the F5 (LTM).

 

So here are my questions:

 

  • Is it possible to set up a virtual server (https) that runs locally on the F5, i.e. without any pools/nodes etc. "behind"?
  • Is it possible to filter client requests so that only clients out of a certain IP range can connect to this service?

Thanks much in advance for your help.

 

-ejf5

 

config
design

1 Reply

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jun 17, 2013
    Is it possible to set up a virtual server (https) that runs locally on the F5, i.e. without any pools/nodes etc. "behind"?yes, you can use HTTP::respond to respond client request.

     

     

    HTTP::respond wiki

     

    https://devcentral.f5.com/wiki/irules.HTTP__respond.ashx

     

     

    Is it possible to filter client requests so that only clients out of a certain IP range can connect to this service?yes, you can check client ip and take action whatever you want e.g. drop, reject, HTTP::respond.

     

     

    IP::addr wiki

     

    https://devcentral.f5.com/wiki/irules.ip__addr.ashx