For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AlexJ's avatar
AlexJ
Icon for Nimbostratus rankNimbostratus
Nov 18, 2009

Port ACL

Hello all,     I am having an issue with Port ACL Irules:     Issue: We have 6 internet links and hundreds of virtual servers running on multiple ports.     As we are...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 18, 2009
The short answer is not with a VIP configuration change or iRule. If you define a virtual server LTM will answer a TCP handshake on the defined port. If the port is 0, then LTM will answer a TCP handshake on all ports.

 

 

If you need to prevent a TCP handshake on specific ports or allow one only on specific ports, you should be able to use packet filters or an upstream firewall. It's always a good practice to have a firewall between LTM and any untrusted network.

 

 

Aaron