hc_andy_35682
Feb 11, 2010Nimbostratus
Connection Mirroring and IRule Problem
Hi All,
New to the wonderful world of F5 and getting this error when trying to run connection mirroring and iRule.
This is the iRule we're using to permit only trusted IP Addresses access to the real and virtual servers. Pretty basic iRule. We apply this to all forwarding VIPS and Virtual Servers.
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals $::trustedAddresses] }{
Uncomment the line below to turn on logging.
log local0. "Valid client IP: [IP::client_addr] - forwarding traffic"
} else {
Uncomment the line below to turn on logging.
log local0. "Invalid client IP: [IP::client_addr] - discarding"
discard
}
}
Here's what happens...
* If iRule is applied to the VIP, we can't enable connection mirroring.
01070734:3: Configuration error: Mirroring is not supported on virtual servers that have cmp disabled and are configured with a fastL4 profile (VMTEST_HTTP)
* If connection mirroring is already enabled on the VIP, we can't add the iRule.
01070734:3: Configuration error: Mirroring is not supported on virtual servers that have cmp disabled and are configured with a fastL4 profile (VMTEST_HTTP)
Appears to be one of the other...why is this so???
Our VIPS are using a fastL4 profile. Not 100% sure about cmp, read what I can find about it but it appears to be some feature that allows the CPU to load share the work load better.
Any help would be appreciated.
Thanks.
Andy