cancel
Showing results for 
Search instead for 
Did you mean: 

Two URL Landing pages for APM

Angela
Nimbostratus
Nimbostratus

Hi, 

Hoping someone can confirm for me. I have configured my APM with two different policies 

  • PolicyA
  • PolicyB

I want to have two URLs for users to go to and then download the client. 

Right now, policyA is policya.vpn.company.com.au and when they go there, it opens the login page, and they can download the Edge client and it's prefilled with all the correct settings 

How can I add a new address of policyb.vpn.company.com.au and have the same setup/config and it connects to a different Edge client with different settings? Is this possible? 

Thanks

1 ACCEPTED SOLUTION

PSFletchTheTek
Cirrocumulus
Cirrocumulus

Hi,

So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!

View solution in original post

4 REPLIES 4

Why not just copy the Access policy copy it to a new virtual server and modify the Webtop hosting the file to your new file maybe also use a new connect profile attached to a VS to generate your new file with the new Edge client settings:

 

---------------------------

 

 

Associating hosted content with access profiles
A user can access hosted content that is associated with that user's access profile. Each access profile that requires hosted content access must be associated with the entire hosted content repository.
  • On the Main tab, click
    Access
    Webtops
    Hosted Content
    Manage Files.
    The Manage Files screen opens.
  • On the
    Uploadbutton, click the right-side arrow to select
    Manage Accessfrom the list.
    The Access Settings popup screen opens.
  • Select the access profiles to associate with hosted content, then click
    OK.
    A user must belong to an associated access profile to access hosted content.
    View the hosted content list, and verify that the access policy association was successful.
  •  
  •  

PSFletchTheTek
Cirrocumulus
Cirrocumulus

Hi,

So in true engineering system "it depends", its more than doable its just how!
My first question is how are you managing your DNS, and do you expect one policy to one virtual server IP.
so two DNS names, linked to two VS IP's. Linked to two APM policies. Job done!
Or have you got any constraints?
Like only having 1 IP? (Look up VIP targetting VIP, and the use of LTP - I can help there if needed done it a couple of times)
You don't have access or granual access to your DNS to make the subdomains.
Or something else i can't think of at the moment!

If you have F5 DNS/GTM you can give different DNS responses based on the source IP of the LDNS/GEOLOCATION Etc.

 

https://techdocs.f5.com/kb/en-us/products/big-ip-dns/manuals/product/bigip-dns-load-balancing-13-1-0...

 

Also I do not know if it work for you but also see the article for APM with F5 DNS/GTM and how they work together and even without the DNS/GTM module F5 offeres F5 DNS cloud load balancer service that is similar so you could ask your DNS team to just delegate to it the DNS resoluton for couple of subdomains:

 

https://support.f5.com/csp/article/K70300789

https://clouddocs.f5.com/training/community/dns/html/class6/lab/lab4.html

 

Edit:

https://f5cloudservices.zendesk.com/hc/en-us/articles/360053827113-How-do-I-configure-DNS-Load-Balan...

 

Edit:

 

If you want to play around you may use the EDNS option and give some clients a specific DNS reply to an F5 VS with the APM policy than others with an iRule 🙂 but for the DNS cloud better ask or check if this is supported

 

https://community.f5.com/t5/technical-articles/using-client-subnet-in-dns-requests/ta-p/282196

 

https://clouddocs.f5.com/api/irules/DNS__edns0.html

 

Thanks - we had a few constraints - originally I was trying to service it behind a single IP (which was my difficulty in how to manage it), but we ended up changing our subnet to give us more IP addresses to play with. 

Setup went as follows: 

  • Two DNS Entries > Two VIPs > Two Policies 

Solution is working and in place. 

Thanks for your assistance