Forum Discussion

TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Apr 04, 2013

matching two classes - iRule 10.2.4

I have the iRule working below with just CLASS-1. I am simply trying to say CLASS-1 OR CLASS-2, but having trouble getting F5 to take it. Do I need to set a variable or something like an elseif?   ...
application delivery
dev
devops
iRules
TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Apr 09, 2013

I got this to work using the following:

set X509_subject [substr [X509::subject [SSL::cert 0]] 3 ","]
log local0. "X509-subject-CN:$X509_subject"
if { ! ( [class match $X509_subject equals CLASS-1 ] || [class match $X509_subject equals CLASS-2] ) } {
log local0. "Client dropped :$X509_subject"
drop