Forum Discussion

sdagar_194989's avatar
sdagar_194989
Icon for Nimbostratus rankNimbostratus
Jul 29, 2015

No HTTP to HTTPS redirection for VPN traffic on basis on client source address also add responed to url if URI not contain any word

Requirment :No HTTP to HTTPS redirection for VPN traffic on basis on client source address also add respond to url if URI not contain any word.   In our setup there are 2 VIP's configured with sam...
design
security
TMOS
TMSH
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 29, 2015

Assuming you can uniquely identify the VPN clients by their lease pool source addresses, you could create an address-based datagroup that contains this subnet. The following iRule would be used in the HTTP VIP:

when HTTP_REQUEST {
    if { [class match [IP::client_addr] equals my_vpn_datagroup] } {
        if { [HTTP::uri] equals "/" } {
            HTTP::redirect "http://client.test.net/xx/yy"
        }
    } else {
        HTTP::redirect "https://client.test.net/xx/yy"
    }
}