Forum Discussion
xiaolin_chen_99
Nimbostratus
Jan 19, 2010pass traffic based on client source IPs
Hello,
i have a simple question. we want to pass traffic based on client source ip. i have below irule.
when CLIENT_ACCEPTED {
if { [IP::addr [client_addr] equals 192.168.217.0/24] } {
pool pool-1
} elseif { [IP::addr [client_addr] equals 192.179.217.0/24] } {
pool pool-1
} elseif { [IP::addr [client_addr] equals 192.179.10.0/24] } {
pool pool-1
} else {
pool pool-2
}
}
My question is:
1. if IP::addr [client_addr] equals 192.168.217.0/24 means client address belong to this /24 subnet, or must equal ? because we have a lot source ips in these three subnets, we do not want list all the /32 source ip on irule.
Thanks in advance.
xiaolin
3 Replies
- The_Bhattman
Nimbostratus
Hi Xiaolin,
Yes it means that it falls within /24 subnet.
Bhattman - iondro_38707
Nimbostratus
Hello,
I'm new with this product and I will like to find a symple irule to Allow source for a IP and port.
My question is, i need to only accept an Ip and port for one Virtual Server, but the question is, i need to make a irule or there are an easier solution, and if u know the script, u can save my time to help me
thnaks - The_Bhattman
Nimbostratus
Posted By iondro on 01/28/2010 2:29 AM
Hello,
I'm new with this product and I will like to find a symple irule to Allow source for a IP and port.
My question is, i need to only accept an Ip and port for one Virtual Server, but the question is, i need to make a irule or there are an easier solution, and if u know the script, u can save my time to help me
thnaks
So I if I am reading this correctly you want inspect the source address as it comes into a Virtual Server and then allow it or deny it based on the source address?
Thanks,
Bhattman
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
