F5 Sites
  • F5.com
  • F5 Labs
  • MyF5
  • NGINX
  • Partner Central
  • Education Services Portal (ESP)
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Articles
  3. Technical Articles

Select Between Multiple Network Access Resources with the Edge Client

The recent announcements that web browsers will be removing plugin support means that customers will no longer be able to provide Network Access resources to their end users via the APM web top.  Ins...
Published Feb 26, 2015
Version 1.0
BIG-IP Access Policy Manager (APM)
deployment
design
dev
news
security
tech tip
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Joined November 30, 2010
View Profile
hansg1114's avatar
hansg1114
Icon for Nimbostratus rankNimbostratus
Feb 01, 2023

Hello.

Recently, a customer company under deployment has designated three Network Access Resources through a single server and used the Edge Client, so I looked it up.

It was very helpful, and I shared it with you because I had a new plan while thinking about it while looking at the contents.

1. After all the authentication procedures in VPE, Logon Page was created before assigning Network Access Resources,
and the values received here were divided using Branch Rules, and each of them was connected to a different Network Access Resource.
This function worked normally, and there was no problem with the service.

2. This is more complicated than room 1, but I thought that customers who only use Edge Client use Always Connected mode (including Allow-in-Enterprise-LAN function).
The Edge Client for Windows did not support disconnecting in Always Connected mode.
Function 1 requires you to log in again every time you change the Network Access Resource, but you couldn't do it on Windows.
To address this, we have adopted a way of separating network access resources by VS so that can be allocated.
The article below is a detailed description including an example. I don't know if it'll help.

1) Create Virtual Server as many as the number of Network Access Resources
- vpn.test.com:10000 (for internal network use)
- vpn.test.com:20000 (for external networks)
- vpn.test.com:30000 (for composite networks)

2) The Connectivity Profile registers all VSs registered in 1) in the Server List.

3) After all the authentication procedures were completed, the VPE created one Empty before assigning a Network Access Resource,
divided into branches using Branch Rules, and each connected a different Network Access Resource.
* The criteria is specified by the server port based on the Client.

4) 1) Perform the same settings (iRule, Connectivity, Access Profile, SSL certificate, etc.) to the VSs registered in and distinguish only the destination port.

There is no setup capture because there is no equipment to test.
But I'm sure those of you who've seen this know what I'm talking about.
It's written by a translator, but I'm writing it because I want to be of help to one person who has the same concern as me.

Best regard,

Help guide the future of your DevCentral Community!

What tools do you use to collaborate? (1min - anonymous)

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesTraining & Certification

SUPPORT

Manage SubscriptionsProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

©2026 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information