Forum Discussion

toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

mysql ip access control

I would like to do the ip access control by using a irule. However, I failed in the following way. pool-allowhost-01 have kept some mysql. when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_a...
application delivery
devops
iRules
toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 31, 2013

doesn't it return false when client is from 192.168.1.0/24?

What about the syntax of the following 

when CLIENT_ACCEPTED { 
    if { [IP::addr [IP::client_addr] equals 172.20.1.262] }
        log local0. "Allowing client VIP: [IP::client_addr]"
        pool pool-allowhost-01  or forward
   
    } elseif {[IP::addr [IP::client_addr] equals 192.168.1.0/24] } { 
        log local0. "Allowing client: [IP::client_addr]"
        pool pool-allowhost-01  or forward
   
    } else {
        log local0. "Rejecting client: [IP::client_addr]"
        reject
    }
}