Forum Discussion

Abed_AL-R's avatar
Abed_AL-R
Icon for Cirrostratus rankCirrostratus
Mar 22, 2021

replacing irule with policy

Hello guys I'm trying to replace this iRule with policy:   when CLIENT_ACCEPTED { set allowed 0 if { [class match -- [whereis [IP::client_addr] country] equals country_list] or [class m...
application delivery
BIG-IP
iRules
policy
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP

This looks more like an error in the UI than a missing/feature. In my lab (15.1.2.1) I could select in datagroup from the dropdown.

 

I'd check the usual stuff. Different browser. If you have a BIG-IP cluster, check if the same behaviour exists on the second cluster node.

Abed_AL-R's avatar
Abed_AL-R
Icon for Cirrostratus rankCirrostratus
Mar 23, 2021

It is not a browser issue, since i checked with ff and chrome, same results

 

I have another F5-VE 15.1.2 and there I can select 'in datagroup' only if I select 'is'

When I choose 'is not' the option for 'in datagroup' is gone

 

 

  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Mar 23, 2021

    Uh, my bad. I didn't pay attention the very important is and is not. You are right, this doesn't seem to be possible - datagroup is not available any longer.

    So your datagroup is actually sort of an allow list. If my country code is in the datagroup my connection won't be reset.

     

    I don't have an idea to solve this one.