Forum Discussion
mhtech_212580
Jul 23, 2015Nimbostratus
Multiple CIDR ranges in virtual server
I have created a new Virtual Server to listen on port 25. I want just two IP ranges to be allowed through. In the Source Address field, I can add one of the ranges (x.x.x.x/x) but when I try to enter...
Kevin_Stewart
Jul 23, 2015Employee
Two options:
-
Create a 0.0.0.0/0 source and use an iRule to control access:
when CLIENT_ACCEPTED { if { ( [IP::addr [IP::client_addr] equals x.x.x.x/x] ) or ( [IP::addr [IP::client_addr] equals y.y.y.y/y] ) } { return } else { reject } }
or you can use a datagroup:
when CLIENT_ACCEPTED { if { [class match [IP::client_addr] equals my_ip_datagroup] } { return } else { reject } }
-
Create the same 0.0.0.0/0 source and use a system-level IP filter to control source range access.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects