cancel
Showing results for 
Search instead for 
Did you mean: 

PEM Policy Rule - Custom Syntax

dudster83
Nimbostratus
Nimbostratus

Hello

I want to change a PEM policy rule.

Instead of adding source or destination IPs in the flow section, I want to use the custom option to point to a data group of the IP addresses.

This is due to the fact I have lots of IP addresses in the source\dst and some repetitive rules that the protocol and action differentiate one from another, so pointing to a shared data group of IP addresses from a single point makes sense to me, to avoid mistakes.

The thing is, I couldn't find anywhere the syntax of pointing to a data group

 

Thanks in advanced for any help.

1 REPLY 1

I admit that I have not worked so much with PEM but you can see (sections Creating Custom Classifications and Configuring PEM with Local Traffic Policies😞

 

 

AskF5 | Manual: BIG-IP Policy Enforcement Manager: Implementations

 

 

 

As you can use data groups in irules and local traffic policies and if possible do what you want from there:

 

 

class (f5.com)

 

AskF5 | Manual Chapter: Introducing Local Traffic Policies