Forum Discussion

Chause1's avatar
Chause1
Icon for Cirrus rankCirrus
Mar 27, 2023

Policy to forward to a range of ports

Good day, We require a configuration that sends as an example ports 7001 - 7999 to a pool of backends servers. The idea is to create a wildcard VIP (client ssl) and pool. Allow only those ports to ...
application delivery
LTM
policy
  • Daniel_Wolf's avatar
    Daniel_Wolf
    Mar 27, 2023

    Hi Chause1,

    as an alternative you could use a Port List. Simply create on in Shared Objects ›› Port Lists.

    And assign it to the virtual server.

    KR
    Daniel

     

  • Chause1's avatar
    Chause1
    Mar 28, 2023

    Thanks Daniel,

    Will give it a go

     

Chause1's avatar
Chause1
Icon for Cirrus rankCirrus
Mar 27, 2023

Hi,

Thanks for the response.

I will test, I would like to deny the rest of the ports within the same policy. 

When I apply the following it seems to stop working 

  • Sebastiansierra's avatar
    Sebastiansierra
    Icon for MVP rankMVP
    Mar 28, 2023

    Hi Chause1 ,

    You have to modify policy 1 and change Apply to traffic: local for both rules:

    Hope it´s work.

    • Chause1's avatar
      Chause1
      Icon for Cirrus rankCirrus
      Mar 28, 2023

      Thanks,

      Would a client SSL profile have any influance on the traffic?

      We receive traffic encypted and need to decrypt to backends. I think this is causing my headace at the moment

      • Sebastiansierra's avatar
        Sebastiansierra
        Icon for MVP rankMVP
        Mar 28, 2023

        Hi Chause1 ,

        Yes, you have to load the certificates to decrypt the traffic, because if you apply an HTTP profile without SSL certificates it gonna fail.