For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sysadmin_2015_2's avatar
sysadmin_2015_2
Icon for Nimbostratus rankNimbostratus
Sep 08, 2017

Virtual Server - Block IP

Hello,   We need to block a several subnets for a particular virtual server. Is the best way to use an iRule? And can you please send me an example of an iRule we can use?   Thank you for the...
application delivery
BIG-IP
devops
iRules
Faruk_AYDIN's avatar
Faruk_AYDIN
Icon for Altostratus rankAltostratus
Sep 14, 2017

You can use switch command, like this

when CLIENT_ACCEPTED {
  switch [IP::client_addr] {   
        "10.0.0.0/8" -
        "192.168.10.0/24" {
            log local0.  "client IP: [IP::client_addr] - discarded"
            discard
        }
}