Forum Discussion
nitass
Jan 13, 2018Employee
does below iRule works as is?
it looks okay to me.
- swjo_264656Jan 13, 2018Cirrostratus
I`ve using that kinds of rule.
you should check before apply to VS.
In that data-group list, should contain client side and server side IP or network.
take care.
- swjo_264656Jan 13, 2018Cirrostratus
I`m using two rules, for forwarding and VIP service.
rule forward_allow when CLIENT_ACCEPTED { if {[class match [IP::client_addr] equals forward_white_list]}{
} else { reject log local0. "[IP::remote_addr]:[TCP::remote_port] Dst [IP::local_addr]:[TCP::local_port] -> Denied" } }
rule vip_allow when CLIENT_ACCEPTED { if {[class match [IP::remote_addr] equals vip_white_list]}{
LB::server pool } else { reject log local0. "[IP::remote_addr]:[TCP::remote_port] Dst [IP::local_addr]:[TCP::local_port] -> Denied" } }
please refer to it.