Forum Discussion

Joseph_Goyette_'s avatar
Joseph_Goyette_
Icon for Nimbostratus rankNimbostratus
Mar 16, 2005

matchclass and syntax errors

I've got a simle iRule below based on the example in the Writing iRules section of the LTM guide.

In a nutshell, I am attempting to direct requests to specific urls based on the client's ip address. I've copied the matchclass syntax directly from the manual yet I keep getting a syntax error:

Line 10: [parse error: PARSE syntax 264 {syntax error in expression "[IP::remote_addr] eq matchclass Esc-External-Networks ": variable references require preceding $}] [{[IP::remote_addr] eq matchclass Esc-External-Networks }]

Substituting the generic "aol" data group name produces the same error. 

   
 when HTTP_REQUEST  
 {  
    if {[HTTP::uri] starts_with "/all/"} {  
       use pool ALL-POOL  
    }  
    elseif {[HTTP::uri] starts_with "/CustomerA/"} {  
       use pool POOL-A  
    }  
    elseif {[HTTP::uri] starts_with "/CustomerB/"} {  
       if {[IP::remote_addr] eq matchclass Esc-External-Networks } {  
          use pool POOL-B  
       } else {  
          HTTP::redirect "http://www.escription.com/"  
       }  
    }  
 }

What am I missing here ?

Thanks !

Joe

application delivery
dev
devops
iRules

4 Replies

Sort By
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Mar 18, 2005
    I believe the syntax in your matchclass usage is wrong. Try this instead: 

     
 if {[matchclass [IP::remote_addr] eq $::Esc-External-Networks] } { 
    use pool POOL-B 
 } else { 
    HTTP::redirect "http://www.escription.com/" 
 }
  • James_Thomson's avatar
    James_Thomson
    Icon for Employee rankEmployee
    Apr 25, 2005
    What if you wanted to not specify the pool, but deny everything outside of the matchclass, how would you do a "does not equal". Something like this: 

     
 when CLIENT_ACCEPTED { 
    if {[matchclass [IP::remote_addr] !eq $::allowed-group] } { 
      discard 
    } 
 }

    It doesn't like the !eq section. Any ideas how to do this?
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Apr 26, 2005
    Try this: 

     
 when CLIENT_ACCEPTED { 
    if {not [matchclass [IP::remote_addr] eq $::allowed-group] } { 
       discard 
    } 
 }