Forum Discussion

SH_F5_381212's avatar
SH_F5_381212
Icon for Nimbostratus rankNimbostratus
Jan 24, 2019

AFM and APM conflict ?

Can anybody explain how AFM is configured and shown in VPE ? Does ACLs in AFM and APM for same resources have any conflicting results using the virtual server.

 

Example "

 

APM Config: Virtual server : 172.16.1.200 lease pool : 192.168.1.1 - 5 resource : 172.16.15.150, 172.16.15.140

 

AFM rules: source :any Destination : 172.16.15.150 , 172.16.15.140 port : tcp 80 action : default (Deny)/Accept

 

Without AFM configuration I am able to have work APM just fine(client gets the ip from the pool and successfully log in into resource). Will there be impact if I configured a deny rule on AFM using policy rule and applied to the virtual server.

 

1 Reply

  • Where is assigned the AFM POLICY? On the global context or on the virtual server?

     

    If it is on the virtual server, AFM won’t block this traffic!

     

    If global context, which is not recommended, It may be blocked!