Forum Discussion

Tham_T__330907's avatar
Tham_T__330907
Icon for Nimbostratus rankNimbostratus
Apr 24, 2018

The "IP::client address" in iRules drop packet from broadcast address or not?

 if ([class match [IP::client_addr] equals DATA_GROUP])
      forward
   }
 else{
      reject
 }


   DATAGROUP = 192.168.1.0/24

As the code above if the request from 192.168.1.255 coming in ... the iRules will reject the packet or forwarding?

 

Thank you

 

application delivery
LTM
  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Altostratus rankAltostratus
    Apr 24, 2018

    The iRule forwards it. Because if clause just check If it is in the specific subnet. The range of the above subnet is 192.168.1.0-192.168.1.255. This means 192.168.1.255 is in the specific subnet, then forward.

     

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Apr 24, 2018
    when CLIENT_ACCEPTED {
if { [class match [IP::client_addr] equals DATA_GROUP] } {
forward
} else reject
}
    forward

    Sets the connection to forward IP packets. This is strict forwarding and will bypass any pool configured on the virtual server.

    The request will be forwarded out the appropriate interface according to the routes in the LTM routing table. No destination address or port translation is performed.

    If the client ip matches if condition, it forwards. In your case the ip comes in the /24 range. If it doesn't match, it rejects.