Forum Discussion

Tika_92763's avatar
Tika_92763
Icon for Nimbostratus rankNimbostratus
Jul 30, 2012

Source IP restriction without HTTP profile

Hello,     I have to create a irule or find any other way.     Scenario, I am managing 2 Juniper SA 2500 (SSL VPN) devices in active/active clustering. Each client has their own sub-urls ...
application delivery
dev
devops
iRules
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jul 30, 2012
Tika,

I think I'd create a data group of allowed source ips and then query on this and the URI.

Eg. 
 
when CLIENT_ACCEPTED {
    if { [class match [IP::client_addr] not equals allowed_nets ] and [[HTTP::uri] starts_with "abc" ] } {
        reject
    }
}

Would this work for you?

N