NimbostratusMy scenario here is client ----http----F5----https---server. I want to put a filter in Virtual server to allow certain clients 192.168.1.0/24 instead of any. I can see there is a field name Source in Virtual server configuration. In that field how can I use multiple ip addresses ? also if from specific subnet what would be the syntax ? if someone can describe with an example that would be great.
CirrostratusUse Packet Filtering option In the BIG-IP management GUI, go to Network - Packet Filters. Select the "Enabled" option and then configure appropriately. packet filtering
CirrostratusHi,
In Source Address you can only specify continuous IP range, like 192.168.1.0/24. If you need to specify not continous range it's necessary either to use iRule (probably with Address type Data Group) or use Packet Filter as mentioned in previous reply.
From my experience people are most often using iRule approach but both should work. Packet filter is much more cumbersome to maintain if you have many IPs and ranges to manage. Much easier is to manage Data Group - just my opinion.
Piotr