Forum Discussion

rachitbiyani_21's avatar
rachitbiyani_21
Icon for Nimbostratus rankNimbostratus
Aug 13, 2015
Solved

Equivalent iRules have different behavior

Hello,   I have configured the following iRule on a Virtual Edition BigIP F5:   when CLIENT_ACCEPTED {snat [clientside {IP::local_addr}]}   and it works as expected - It translates the sourc...
application delivery
BIG-IP Access Policy Manager (APM)
deployment
design
devops
iRules
LTM
security
  • Vernon_97235's avatar
    Vernon_97235
    Aug 13, 2015

    It loads correctly for me (when using 

    tmsh edit ltm rule foo
    and pasting into 
    vi
    under 11.6.0). I suspect this may be a character insertion issue. If, for example, you paste in Windows-style newlines at the end (which will naturally be invisible to you), the iRule parser will not interpret the newlines in the way you expect. Indeed, based on the error, it appears to be compressing the two statements together. Incidentally, the space after the variable name is required.

Vernon_97235's avatar
Vernon_97235
Historic F5 Account

It loads correctly for me (when using 

tmsh edit ltm rule foo
and pasting into 
vi
under 11.6.0). I suspect this may be a character insertion issue. If, for example, you paste in Windows-style newlines at the end (which will naturally be invisible to you), the iRule parser will not interpret the newlines in the way you expect. Indeed, based on the error, it appears to be compressing the two statements together. Incidentally, the space after the variable name is required.

Joe_Pruitt's avatar
Joe_Pruitt
Aug 13, 2015
You need to have the snat line be on a newline after the set.