Forum Discussion
Source IP details accessing TLSv1
Hello All,
can you please let me know how to identify Source ip or end user IP (External ) accessing TLSv1 on the VIP ? Please let me know if there is any irule that can be configured and tested.
6 Replies
- youssef1
Cumulonimbus
Hi.
Can you tell me in which version you are ?
- vvskaladhar_488
Nimbostratus
Hi bellow is the version and hotfix BIG-IP 11.5.1 Build 10.0.180 Hotfix HF10
- youssef1
Cumulonimbus
Can you try:
when CLIENTSSL_CLIENTHELLO { set userip [IP::client_addr] set SSL_version [SSL::cipher name] set SSL_PROTOCOL [SSL::cipher version] if {$SSL_PROTOCOL == "TLSv1"} { log local0. "Warning: $userip - $SSL_version - $SSL_PROTOCOL" } }
Keep me in touch...
- vvskaladhar_488
Nimbostratus
Hi ,
I have added this irule and i will be tagging this to a required VIP. will it save logs to any specific folder or do i need to collect all the logs form filter them form var/log folder ?
log local0. "Warning: $userip - $SSL_version - $SSL_PROTOCOL"
- youssef1
Cumulonimbus
This logs are saved in /var/log/ltm.
You can also send logs in a syslog server. It's more simple for search or filter some logs...
How I can help you
- vvskaladhar_488
Nimbostratus
This worked , thank you so much for the help.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com