Forum Discussion
Two URL Landing pages for APM
Hi,
Hoping someone can confirm for me. I have configured my APM with two different policies
- PolicyA
- PolicyB
I want to have two URLs for users to go to and then download the client.
Right now, policyA is policya.vpn.company.com.au and when they go there, it opens the login page, and they can download the Edge client and it's prefilled with all the correct settings
How can I add a new address of policyb.vpn.company.com.au and have the same setup/config and it connects to a different Edge client with different settings? Is this possible?
Thanks
Why not just copy the Access policy copy it to a new virtual server and modify the Webtop hosting the file to your new file maybe also use a new connect profile attached to a VS to generate your new file with the new Edge client settings:
---------------------------
Associating hosted content with access profilesA user can access hosted content that is associated with that user's access profile. Each access profile that requires hosted content access must be associated with the entire hosted content repository.-
On the Main tab, clickAccessWebtopsHosted ContentManage Files.The Manage Files screen opens.
-
On theUploadbutton, click the right-side arrow to selectManage Accessfrom the list.The Access Settings popup screen opens.
-
Select the access profiles to associate with hosted content, then clickOK.A user must belong to an associated access profile to access hosted content.View the hosted content list, and verify that the access policy association was successful.
-
-
-
Hi,
So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!
Why not just copy the Access policy copy it to a new virtual server and modify the Webtop hosting the file to your new file maybe also use a new connect profile attached to a VS to generate your new file with the new Edge client settings:
---------------------------
Associating hosted content with access profilesA user can access hosted content that is associated with that user's access profile. Each access profile that requires hosted content access must be associated with the entire hosted content repository.-
On the Main tab, clickAccessWebtopsHosted ContentManage Files.The Manage Files screen opens.
-
On theUploadbutton, click the right-side arrow to selectManage Accessfrom the list.The Access Settings popup screen opens.
-
Select the access profiles to associate with hosted content, then clickOK.A user must belong to an associated access profile to access hosted content.View the hosted content list, and verify that the access policy association was successful.
-
-
-
Hi,
So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!If you have F5 DNS/GTM you can give different DNS responses based on the source IP of the LDNS/GEOLOCATION Etc.
Also I do not know if it work for you but also see the article for APM with F5 DNS/GTM and how they work together and even without the DNS/GTM module F5 offeres F5 DNS cloud load balancer service that is similar so you could ask your DNS team to just delegate to it the DNS resoluton for couple of subdomains:
https://support.f5.com/csp/article/K70300789
https://clouddocs.f5.com/training/community/dns/html/class6/lab/lab4.html
Edit:
Edit:
If you want to play around you may use the EDNS option and give some clients a specific DNS reply to an F5 VS with the APM policy than others with an iRule 🙂 but for the DNS cloud better ask or check if this is supported
https://community.f5.com/t5/technical-articles/using-client-subnet-in-dns-requests/ta-p/282196
https://clouddocs.f5.com/api/irules/DNS__edns0.html
- AngelaNimbostratus
Thanks - we had a few constraints - originally I was trying to service it behind a single IP (which was my difficulty in how to manage it), but we ended up changing our subnet to give us more IP addresses to play with.
Setup went as follows:
- Two DNS Entries > Two VIPs > Two Policies
Solution is working and in place.
Thanks for your assistance
If you managed to get the needed answers, please flag the question as answered.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com