Forum Discussion

Nimbostratus

Apr 06, 2020

Redirect when the client address is not equal to the networks in datagroup

Trying to redirect to the site when the client address is not equal to the datagroup but it's not working. Any help appreciated. when HTTP_REQUEST { if { not [matchclass [IP::client_addr] equals XY...

Noctilucent

Apr 06, 2020

Hello Santhosh.

Try this code instead:

if { not [class match [IP::client_addr] contains XYZ_group] } {
    HTTP::respond 301 Location "http://rextrum.com/xyz"
}

KR,

Dario.

Santhosh
Nimbostratus
Apr 06, 2020
for some reason it's not liking the contains with in that. So I used equals but it's failing on redirection where it's throwing a error page.
- Dario_Garrido
  Noctilucent
  Apr 06, 2020
  Sure, equals is OK.
  when HTTP_REQUEST { if { not [class match [IP::client_addr] equals XYZ_group] } { HTTP::respond 301 Location "http://example.com/xyz" } }
  Test it from my lab and it's working fine.
  I think your issue is in your data-group. Could you share the next command output (from TMSH)?
  list ltm data-group internal XYZ_group
  KR,
  Dario.
- Santhosh
  Nimbostratus
  Apr 07, 2020
  ltm data-group internal XYZ_group {
    records {
      10.0.0.0/8 { }
    }
    type ip
  }
- Santhosh
  Nimbostratus
  Apr 07, 2020
  Dario,
  one more thing I forgot to mention is the Virtual server is a HTTPS on and the redirection site is HTTP. Does that causes any issue?