Forum Discussion

riverj30_77570's avatar
riverj30_77570
Icon for Nimbostratus rankNimbostratus
Oct 06, 2014

Access Policy Timeout irule

Good morning,

 

I wondering if there is a way to change the Access Policy Timeout value via an irule. I would like to change this value based on specific IP address.

 

I have the following irule to customize the inactivity value, but would like to do the same for "Access policy timeout"

 

when ACCESS_SESSION_STARTED { set citrixip [ACCESS::session data get session.user.clientip] set citrixtm [ACCESS::session data get session.inactivity_timeout] if { $citrixip equals "X.X.X.X"} { ACCESS::session data set session.inactivity_timeout 60 log local0. "timeout value is: $citrixtm" log local0. "citrix ip is: $citrixip" } }

 

3 Replies

  • R_Eastman_13667's avatar
    R_Eastman_13667
    Historic F5 Account

    Try this:

    set newSID ACCESS::session data set session create -timeout 60 -lifetime 8600

    ACCESS::session create

    In versions prior to v11.4, the timeout and lifetime values are indicated directly following the command.
    In v11.4+, the flags -timeout and -lifetime are supplied, and control the idle timeout and total session lifetime, respectively. Supplying them with a value of 0 (zero) disables that timeout check. The command will return the created SID.
    
  • The solution proposed by R Eastman gives me a syntax error (I'm using 12.1.3 release).

    error: ["invalid argument create"][ACCESS::session data set session create -timeout 60 -lifetime 8600]

    I have also tried with syntax like here with similar problems.

    Any idea of how to modify lifetime & timeout values during access profile evaluation? Any example?

    KR, Dario.

  • Hi,

    You can change the variables in the VPE. The variables are:

    session.max_session_timeout
    session.inactivity_timeout
    

    Cheers,

    Kees