Forum Discussion

mzac's avatar
mzac
Icon for Nimbostratus rankNimbostratus
Oct 08, 2020
Solved

Matching Cisco Anyconnect TCP/UDP Traffic for DTLS to pool member

Since COVID hit, we had to scale up our Cisco ASA VPN infrastructure. We use Cisco Anyconnect and we are trying to get more clients to use DTLS (UDP 443) as it performs better for speed. The issue ...
application delivery
BIG-IP
iRules
  • Jason_Chiu's avatar
    Jason_Chiu
    Jun 30, 2021

    Hi, mzac. I'm not sure if you figured this one out already, but here is the solution for the record.

     

    Assuming the same pool members for both virtual servers and both virtual servers using the same virtual address, you can use the "Match Across Services" option in a Source Address persistence profile to meet your requirement. See https://support.f5.com/csp/article/K5837 for more details.

Jason_Chiu's avatar
Jason_Chiu
Icon for Employee rankEmployee
Jun 30, 2021

Hi, mzac. I'm not sure if you figured this one out already, but here is the solution for the record.

 

Assuming the same pool members for both virtual servers and both virtual servers using the same virtual address, you can use the "Match Across Services" option in a Source Address persistence profile to meet your requirement. See https://support.f5.com/csp/article/K5837 for more details.