CirrusDataGroups - Route Domains - iRules
When I create a new datagroup to be used in I-Rules that use the new route domain "1", do I need to %1 after all IP addresses I use in the groups?
The reason I ask is because each time I assign this I-Rule "pay-sys-snat-rule" to forwarding VIP it disconnects all connectivity on the payp vlan32.
----------------------------------------
class class1
{ host 10.133.137.151%1 }
!
class snat-list { {
host 64.94.118.33
host 151.151.65.214
host 199.200.26.170
network 206.253.184.0/24
host 207.241.10.136 } }
!
snatpool snat-pool { members 165.79.4.6%1 }
!
rule pay-sys-snat-rule
SNAT 'class1' if these matches 'snat-list' to 'snat-pool'
when CLIENT_ACCEPTED {
if { ([matchclass [IP::local_addr] equals $::snat-list ] ) and
( [matchclass [IP::remote_addr] equals $::class1 ] ) } {
use snatpool snat-pool
}
}
END
----------------------------------------
