Forum Discussion
MichaelJordan_1
Nimbostratus
NimbostratusNetwork Access without SNAT
Hi
We are using an APM policy to reach our local resources. After clients connected, we can reach their machines to help them to solve IT related issues via RDP or MSRA. Here is the my question;...
In order to get iRules to fire on traffic traversing SSLVPN, you need to use "Related iRules" configuration from the main APM virtual. You can't do this in the GUI, you have to use tmsh.
like: tmsh modify ltm virtual xxxx related-rules { yyyy }
where xxxx is your virtual server and yyyy is the irule name you want.
This function is pretty new, and I haven't personally tested very much with it. But what happens is that the irule you've specified in "related-rules" gets automatically pushed into the special Network Access listener virtual servers. It's avilable in:
- 11.4.1 hf9+
- 12.0
- 11.6.0 hf6+
- 11.5.3 hf2+
I think also that the system may need to be restarted for these changes to take effect (bigstart restart or reboot).
In order to get iRules to fire on traffic traversing SSLVPN, you need to use "Related iRules" configuration from the main APM virtual. You can't do this in the GUI, you have to use tmsh.
like: tmsh modify ltm virtual xxxx related-rules { yyyy }
where xxxx is your virtual server and yyyy is the irule name you want.
This function is pretty new, and I haven't personally tested very much with it. But what happens is that the irule you've specified in "related-rules" gets automatically pushed into the special Network Access listener virtual servers. It's avilable in:
- 11.4.1 hf9+
- 12.0
- 11.6.0 hf6+
- 11.5.3 hf2+
I think also that the system may need to be restarted for these changes to take effect (bigstart restart or reboot).