Forum Discussion
Terry_77423
Altostratus
Altostratususerid to ip mapping - F5 APM
I have been wrestling with how I can share user to ip mappings for VPN connections with internal security devices(namely palo alto firewalls). I found a few great suggestions on here regarding lever...
Ryan_M_362715
Altocumulus
AltocumulusSorry to bring this thread up from the dead, but I've run into the exact same issue. Our iRule works perfectly for regular TLS connections, but I'm unable to apply the iRule to the DTLS virtual server due to the fact that I can't apply an HTTP profile to a UDP based server. I get the following error when trying to apply the iRule:
01071912:3: HTTP_REQUEST event in rule (/Common/VPN_UserID) requires an associated HTTP or FASTHTTP profile on the virtual-server (/Common/VPN-POC-DTLS).
To get around this, I tried using "ACCESS_POLICY_COMPLETED", but receive this:
01071912:3: ACCESS_POLICY_COMPLETED event in rule (/Common/VPN_UserID_DTLS) requires an associated ACCESS profile on the virtual-server (/Common/VPN-POC-DTLS).
Again, I'm unable to associate an access profile to the virtual server due to it being UDP.
Does anyone know if something has changed recently that would disallow this config or am I possibly missing something? We are running 13.1.1.3.
Ryan_M_362715Altocumulus
AltocumulusEdit... disregard. The iRule has to stay on the TCP/443 virtual server. My issue was that DTLS does not use the "/myvpn?sess=" URL. Changed to "/vdesk/timeoutagent-i.php" as mentioned by Terry and we are good to go.