For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chause1's avatar
Chause1
Icon for Cirrus rankCirrus
Mar 27, 2023
Solved

Policy to forward to a range of ports

Good day, We require a configuration that sends as an example ports 7001 - 7999 to a pool of backends servers. The idea is to create a wildcard VIP (client ssl) and pool. Allow only those ports to ...
application delivery
LTM
policy
  • Daniel_Wolf's avatar
    Daniel_Wolf
    Mar 27, 2023

    Hi Chause1,

    as an alternative you could use a Port List. Simply create on in Shared Objects ›› Port Lists.

    And assign it to the virtual server.

    KR
    Daniel

     

  • Chause1's avatar
    Chause1
    Mar 28, 2023

    Thanks Daniel,

    Will give it a go

     

Chause1's avatar
Chause1
Icon for Cirrus rankCirrus
Mar 27, 2023

Hi,

Thanks for the response.

I will test, I would like to deny the rest of the ports within the same policy. 

When I apply the following it seems to stop working 

  • Sebastiansierra's avatar
    Sebastiansierra
    Icon for MVP rankMVP
    Mar 28, 2023

    Hi Chause1 ,

    You have to modify policy 1 and change Apply to traffic: local for both rules:

    Hope it´s work.

    • Chause1's avatar
      Chause1
      Icon for Cirrus rankCirrus
      Mar 28, 2023

      Thanks,

      Would a client SSL profile have any influance on the traffic?

      We receive traffic encypted and need to decrypt to backends. I think this is causing my headace at the moment

      • Sebastiansierra's avatar
        Sebastiansierra
        Icon for MVP rankMVP
        Mar 28, 2023

        Hi Chause1 ,

        Yes, you have to load the certificates to decrypt the traffic, because if you apply an HTTP profile without SSL certificates it gonna fail.