For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sbadea_81872's avatar
sbadea_81872
Icon for Nimbostratus rankNimbostratus
Feb 03, 2009

Restricting access using irule

Is it possible to create an irule to restrict access to a certain ip range/hosts? I created a data group list containing a number of hosts ip addresses; need some help to create the irule. Can it look...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 04, 2009
Hi there,

That would work fine. Just make sure to use an address type datagroup (called a class in the bigip.conf). 

 
 when CLIENT_ACCEPTED { 
    if { [matchclass [IP::remote_addr] equals $::mylist] } { 
       pool my_pool 
    } else { 
       discard 
    } 
 }

Aaron