Forum Discussion
Multiple Layered Virtual Servers - Each different SSO method
Dear all, I have configured layered virtual servers to have SSO for full network access users coming in from mobile devices. A webtop is not feasible in my deployment scenario.
The layered virtual server has source = 10.1.152.0/24 destination = 10.0.0.0/8 This virtual server has an SSO access policy profile configured for ntlm SSO.
However, there is a particular site that uses HTTP Basic. So I'd created another layered VS: source = 10.1.152.0/24 destination = 10.x.x.x/32
Traffic will ALWAYS flow through virtual server configured with NTLM SSO even if I browse to that HTTP Basic site.
Is there a way to have multiple layered VS and each has a different SSO?
Thank you!
- Stanislas_Piro2Cumulonimbus
Hi,
The VS with greater mask length must match and not the other one. there may be a configuration error.
you can also change SSO profile with an irule :
when ACCESS_ACL_ALLOWED { if {([IP::addr [IP::local_addr]/32 equals 10.1.2.3])} { WEBSSO::select /Common/sso_basic } }
- RecontuerSG_258Historic F5 Account
Thanks Kevin and Stanislas. Source 10.1.152.0/24 is an internal IP pool used to assigned to authenticated mobile users via the APM login page.
- Stanislas_Piro2Cumulonimbus
Just above destination...
You can create multiple vs with same destination but with different sources.
- Kevin_Davies_40Nacreous
What does "source" mean in the description above? Where are you configuring this on the virtual server.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com