For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_Pipitone's avatar
Joe_Pipitone
Icon for Nimbostratus rankNimbostratus
Feb 08, 2011

Restrict FTP traffic on VIP to IP address or range

We're running BigIP LTM 9.4.7.   I have a contractor who requires FTP access to an FTP server on our network.   We have created a VIP that only allows...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 23, 2011
Hi Omar,

 

 

Sorry, I think you're talking about route domains while I was talking about admin partitions. If you're using the iRule for a non-default route domain, you'd need to handle that specially in the iRule. The class commands do not currently handle non-default route domains. You can use iRule logic like this to do so:

 

 

http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1172490/showtab/groupforums/Default.aspx1173816

 

 

See the last post in that thread for a Request For Enhancement ID documenting the request to handle this natively with the class command.

 

 

Aaron