Adding vlan and selfip to F5 LTM in HA
We have 2 F5 LTM i2600 series physical devices running v13.1.3.2. We have an internal and external vlan. We now need to add an additional vlan for our internal Web servers. Lets call it WebVLAN My question has to do with the fact that we currently have a route added to the F5 for the subnet where these Web Servers live. I would like to know the proper way to switch this subnet from a static route to a VLAN with a corresponding self ip, without any downtime. From my understanding the steps are: Create a Vlan. Tag it to the proper Interface Specify the action as "failover" Create a unique SelfIP on each node and a Floating HA ip Save. Will there be an issue at this point?? Remove the existing static route for this specific Vlan I am not sure however of the order or If I have missed anything. Any advice is appreciated.
iRule to remove HTTP Headers like SamAccountName
We are using the following iRule to include SamAccountName header: when ACCESS_ACL_ALLOWED { #Add Username as a Session Variable to be called below if { [ACCESS::session data get session.saml.last.result] == 1 } { set name [ACCESS::session data get "session.saml.last.attr.name.SamAccountName"] HTTP::header insert SamAccountName "$name" HTTP::header insert WL-Proxy-Client-IP [IP::client_addr] } Application owners have discovered the SamAccountName can be modified in the header and the user logging in will be different. We are looking for a solution to write an iRule that would strip out the initial SamAccountName header information and replace it.