18-Aug-2022 17:53
Hi,
Hoping someone can confirm for me. I have configured my APM with two different policies
I want to have two URLs for users to go to and then download the client.
Right now, policyA is policya.vpn.company.com.au and when they go there, it opens the login page, and they can download the Edge client and it's prefilled with all the correct settings
How can I add a new address of policyb.vpn.company.com.au and have the same setup/config and it connects to a different Edge client with different settings? Is this possible?
Thanks
Solved! Go to Solution.
19-Aug-2022 07:54 - edited 19-Aug-2022 07:56
Why not just copy the Access policy copy it to a new virtual server and modify the Webtop hosting the file to your new file maybe also use a new connect profile attached to a VS to generate your new file with the new Edge client settings:
---------------------------
19-Aug-2022 08:11
Hi,
So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!
19-Aug-2022 07:54 - edited 19-Aug-2022 07:56
Why not just copy the Access policy copy it to a new virtual server and modify the Webtop hosting the file to your new file maybe also use a new connect profile attached to a VS to generate your new file with the new Edge client settings:
---------------------------
19-Aug-2022 08:11
Hi,
So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!
19-Aug-2022 08:18 - edited 19-Aug-2022 10:25
If you have F5 DNS/GTM you can give different DNS responses based on the source IP of the LDNS/GEOLOCATION Etc.
Also I do not know if it work for you but also see the article for APM with F5 DNS/GTM and how they work together and even without the DNS/GTM module F5 offeres F5 DNS cloud load balancer service that is similar so you could ask your DNS team to just delegate to it the DNS resoluton for couple of subdomains:
https://support.f5.com/csp/article/K70300789
https://clouddocs.f5.com/training/community/dns/html/class6/lab/lab4.html
Edit:
Edit:
If you want to play around you may use the EDNS option and give some clients a specific DNS reply to an F5 VS with the APM policy than others with an iRule 🙂 but for the DNS cloud better ask or check if this is supported
https://community.f5.com/t5/technical-articles/using-client-subnet-in-dns-requests/ta-p/282196
https://clouddocs.f5.com/api/irules/DNS__edns0.html
08-Sep-2022 15:54
Thanks - we had a few constraints - originally I was trying to service it behind a single IP (which was my difficulty in how to manage it), but we ended up changing our subnet to give us more IP addresses to play with.
Setup went as follows:
Solution is working and in place.
Thanks for your assistance
13-Oct-2022 13:35
If you managed to get the needed answers, please flag the question as answered.