Forum Discussion

Kevin_Thomas_29's avatar
Kevin_Thomas_29
Icon for Nimbostratus rankNimbostratus
Sep 27, 2018

APM RADIUS specify multiple source IP

Using Active Directory and Radius Authentication for APM deployment. Presently the authentication communication uses the local self-IP for the source. I want to be able to specify different source IPs for different virtual servers.

 

Are there plans to have this configurable.

 

Using the method of SNAT/forwarding(IP) only allows for changing the source once for a specific authentication server. I want to specify the source depending on how the user comes in.

 

APM
application delivery
LTM
security

3 Replies

Sort By
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Sep 27, 2018

    The best way for you to request that is via F5 support. Open a case saying you want to create an RFE, they will send you a template, and they will look that after. They may also provide an RFE number if someone had already requested that, and add your case number to the request list. More people asking, bigger the probability to get done. :P

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 27, 2018

    You can create multiple virtual servers with same pool members : radius server. For each virtual servers, use different snat pool.

     

    Then, create radius auth servers with IP address virtual server you created previously...

     

    In your access policies, use these radius auth servers

     

    This will allow to manage source ip for each policy

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 04, 2018

    In my lab, I use a virtual server as radius server without issue.

     

    The virtual server ip is in the same network as self ip.

     

    Do you use route domains?