Forum Discussion
enlowb_27270
Nimbostratus
Mar 17, 2009Need help with irule conversion 4x to 9x
I have a version 4.x irule and was wondering if someone could help convert it to version 9x. Thanks in advance...
Version 4.x irule below:
if (server_addr == one of snat_to_me and client_addr == one of snat_from_me) {
use snatpool trans_addr
use pool single_sign_on_pool
}
else {
use pool single_sign_on_pool
}
- The_Bhattman
Nimbostratus
You could set the default pool on the LTM GUI to single_sign_on_pool and then add the following untested iRulewhen CLIENT_ACCEPTED { if { ( [IP::addr [IP::server_addr] equals 192.168.1.100] ) and ( [IP::addr [IP::client_addr] equals 192.168.2.100] } { snatpool trans_addr } }
- enlowb_27270
Nimbostratus
snat_to_me = 172.27.17.50 but snat_from_me = 172.27.18.101, 172.27.18.102, 172.27.18.111 and 172.27.18.112. I am not sure but I think I need to use classes in order to do this... Thanks though... - The_Bhattman
Nimbostratus
If you have multiple addresses then you can use matchclasseswhen CLIENT_ACCEPTED { if { ( [matchclass [IP::server_addr] equals $::Servers] ) and ( [matchclass [IP::client_addr] equals $::Clients] } { snatpool trans_addr } }
- enlowb_27270
Nimbostratus
So when I try to add the irule I get: - The_Bhattman
Nimbostratus
It was missing a parethesiswhen CLIENT_ACCEPTED { if { ([matchclass [IP::server_addr] equals $::Servers]) &&( [matchclass [IP::client_addr] equals $::Clients] )} { } }
- enlowb_27270
Nimbostratus
Thanks a bunch.. I think I got it now... I do have a question pertaining to the irule I posted. What does use snatpool trans_addr do? I do not have a snatpool called tran_addr on the 4.x box. Could this be the 4.x default or auto snat pool or is it just a config error? Thanks again for all the help... - enlowb_27270
Nimbostratus
I have version 4.x below:
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects