Forum Discussion

Marco_Kamner's avatar
Marco_Kamner
Icon for Altostratus rankAltostratus
Jun 02, 2021
Solved

/32 IPs in Datagroup class match not matching

Hello everyone, maybe someone had a similar issue before and can guide me in the right direction as I can't find anything regarding this on the whole of the internet. Lets assume a simple iRule...
  • Marco_Kamner's avatar
    Jun 07, 2021

    Thanks to the suggestion of using a external data group by  we did dig in to this again.

    Before going into how we solved this I just want to say that we are going to look into filing a issue about this and some of my technical understanding of the cause may be flawed.

    The root of the issue lies expression:

    [class match [IP::client_addr] equals ipv4_monitoring]

    The internal datagroup ipv4_monitoring was created with this content:

    • 198.51.100.0/24
    • 203.0.113.2/32

    And, looking at bigip.conf, we can verify that this gets persisted into configuration.

    But, whatever we add with /32 it will not match -> This is where we will look into filing a issue with F5, I will update this thread as applicable.

    Now we remove and recreate the data group using a external data group containing this:

    network 198.51.100.0/24,
    host 203.0.113.2,

    And now we get a match in the expression in question and can live happily ever after