Forum Discussion

kgaigl's avatar
kgaigl
Icon for Cirrocumulus rankCirrocumulus
Nov 25, 2020
Solved

IRule: Access-List

Hello,

we've got on a VS with ASM-Policy a IRule, that activates for external access only a maintenance-page, it looks like this:

when HTTP_REQUEST {
    if {!([class match [IP::client_addr] equals private_net])} {
    switch [HTTP::uri] {

    "/mylogo-bvk.png" {HTTP::respond 200 content [ifile get "mylogo-bvk.png"]}

    default {HTTP::respond 200 content {

(thanks to the community!)

Now there should take place a pen-test of an external consultant, and I've got to add there IP-Ranges (like 11.22.33.44/26 and 12.13.14.15/28)

All other external access should get the maintenance-page.

Could you give me some help, how to insert ip-range?

thanks a lot.

Karl

  • Hi Karl,

     

    Create a new datagroup.

    Add private and common IP addresses.

    Change datagroup name in iRule.