Forum Discussion

Reginald_Sible1's avatar
Reginald_Sible1
Icon for Nimbostratus rankNimbostratus
Nov 15, 2013

Is the packet filter on the F5 LTM version 11 the same as a CSS ACL? (See below example)

How would these Cisco Content Services Switch(CSS) ACL's be added to an F5 LTM running Version 11..

 

permit udp 10.95.196.100 255.255.255.255 destination any eq 161 permit any 10.0.0.0 255.0.0.0 destination 205.157.112.13 sourcegroup chat permit any 10.0.0.0 255.0.0.0 destination 205.157.112.1

 

Would these be configured as packet filters on the F5?

 

APM
application delivery
availability
devops
iRules
security
TMSH

1 Reply

Sort By
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 15, 2013

    You've a few options;

     

    1) Yes, a packet filter could do this and it could be assigned to one or more VLANs but without AFM (see 3) you won't be able to use object groups in your filters

     

    2) An iRule applied to one or more Virtual Servers could also be used

     

    3) You could use AFM but this is probably overkill

     

    I wonder, is this for service traffic or required for management traffic?