Forum Discussion

slesh_219299's avatar
slesh_219299
Icon for Cirrus rankCirrus
Feb 23, 2017
Solved

irule allow only one IP to VIP

Hi guys I need to allow only one ip to vip and will this help ?

    when CLIENT_ACCEPTED {
    if { ( [IP::addr [IP::client_addr] equals "11.22.33.44"] )
       } then {
 Allow 
    } else {
 DROP
        reject
    }
}
BIG-IP
iRules
security
  • slesh_219299's avatar
    slesh_219299
    Nov 30, 2017

    Ok I had to go with data group

    when CLIENT_ACCEPTED {
 Check the data group
if { ! ([class match [IP::client_addr] equals allow_2_IP ]) } {
     Not valid client
    drop
}

    }

    works fine but if someone have irule which allow only 2 ips it would be great also 🙂

4 Replies

Sort By
  • Amine_Kadimi's avatar
    Amine_Kadimi
    Icon for MVP rankMVP
    Feb 23, 2017

    Should work. You can use drop instead of reject if you don't need to inform the client and just drop silently.

     

  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Feb 23, 2017

    Or this:

    when CLIENT_ACCEPTED {
    if { !( [IP::addr [IP::client_addr] equals "11.22.33.44"] ) } {
        reject
    }
}
  • DevBabu's avatar
    DevBabu
    Icon for Cirrus rankCirrus
    Feb 23, 2017

    Or this without iRule:

     

    From GUI:

     

    Local Traffic ›› Virtual Servers : Virtual Server List >> my_virtual_server

     

    source : 11.22.33.44/32

     

  • slesh_219299's avatar
    slesh_219299
    Icon for Cirrus rankCirrus
    Nov 30, 2017

    Ok I had to go with data group

    when CLIENT_ACCEPTED {
 Check the data group
if { ! ([class match [IP::client_addr] equals allow_2_IP ]) } {
     Not valid client
    drop
}

    }

    works fine but if someone have irule which allow only 2 ips it would be great also 🙂