Forum Discussion
awan_m
Cirrostratus
CirrostratusSSH proxy implementation
Hi , my scenario is - users need to connect to sftp server - via F5 - F5 has snat so sftp server cannot see real ip of users . i need to implement an allow list of username + client ip on F5 . ...
Hi,
You can restrict commands per username in the SSH proxy: SSH-Proxy
But it is not possible to restrict a client ip/username combination.
I think you best chance is with an irule and data group, see this example: irule-to-pass-original-client-ip-in-ssh-proxy
Cheers,
Kees
