Redirect based on list of source IP ranges

Hi everyone
We are looking for a way to 302 redirect a client to an alternate url based on their source IP address. If they do not match the source IP, the request will be load balanced to a farm.
The list of matching IP ranges is quite large though - there are upwards of 5000.
Is there a way to do this on the ACE 4710 efficiently?
Thanks
A

Yes, you can use an HTTP class-map
Scimitar1/User1(config)# class-map type http loadbalance redirect_clients
Scimitar1/User1(config-cmap-http-lb)# match source-address ?
Enter client source address to match
Then you can use this class-map in your policy-map to use different serverfarm
Scimitar1/User1(config)# policy-map type load first-match WEB
Scimitar1/User1(config-pmap-lb)# class ?
class-default Specify actions for default class-map
redirect_clients
Scimitar1/User1(config-pmap-lb)# class redirect_clients
Scimitar1/User1(config-pmap-lb-c)#
<.....add your redirect serverfarm here ......>
Scimitar1/User1(config-pmap-lb-c)# ex
Scimitar1/User1(config-pmap-lb)# class class-default
Scimitar1/User1(config-pmap-lb-c)#
<.... add your loadbalancing serverfarm here .....>
This is going to be a bit tedious to configure your 5000 client ip addresses.
Maybe you could script it ?
Gilles.

Similar Messages

HTTP Redirect based upon SRC IP Address

Is there a way to perform an http redirect based upon user's source IP address on the CSM/GSS environment?
Logic:
IF < src ip address is within exception list > THEN
http redirect to URL2
ELSE
http to URL1
END

Is there a version of this solution (redirect by client source IP) for the CSS?
I'm attempting to redirect clients from a few specific networks (source IP's) to the VIP of a second CSS using a service-type redirect and "prefer " ACL commands:
clause 10 permit any 1.1.1.0 255.255.252.0 destination content owner/content-rule prefer service-type-redirect
There is an "any any destination any" last clause in the ACL for the remaining source IPs. The ACL is applied to the incoming circuits leading to the webservers.
A show of the ACL's shows all responses - no matter the client source IP - being caught by the permit any clause at the end of the ACL.
Extra points: this is a one-arm design with source group destination applied (to return server traffic to the CSS) and traffic is https with SSL terminating at the servers (no SSL module). Content rules are set to be sticky for srcip. Both CSSs are answering content-based DNS queries for the same URL with their local VIP address (but controlling which DNS server clients query isn't readily possible, so static proximity using DNS didn't provide the answer).
Each CSS is in a different data center: the idea is to keep traffic local by redirecting non-local traffic to its "local" (the other) CSS if services are active (and to keep traffic on the first CSS if the services at the redirected-to CSS are down).
Don't want too much, do I? ;-)
Thanks for everyone's time -
-K.

Open Interface for Approved Supplier Lists and Sourcing Rules

Hi All,
Is there an open interface or an API available for Appeoved Supplier Lists and Sourcing Rules.
Thanks and Regards,
MPH

Hi sandeep,
I prefer to use the API mentioned.
However this is in Oracle Manufactirung and we dont use that module instead I want to define them in Oracle Purchasing.
can I still do it in Purchasing using the same API.
Further as per the document there are 3 entities
01) Sourcing Rule/Bill of Distribution
02) Receiving Organization
03) Shipping Organization
Do I need to define all 3 in order to make it work?
Thanks and Regards,
MPH

Enhancement to bypass "Source not included in list despite source list req"

Dear Experts,
When the indicator source list requirement is maintained in the material master, the system will only allow creation of a purchase order if the source is maintained in the source list (t-code ME01). If its missing we will get an error message when creating or chaging PO with message :"Source not included in list despite source list req".
Is there a enhancement through which we can influence the error message for PO's of type stock transfter order? I tried searching for one but couldn't find a appropriate one.
Had look at ME_PROCESS_PO_CUST & ME_PROCESS_PO also but they were not much useful.
Thank You.
Best Regards,
SP

>
User General wrote:
> Hi thank you very much for your useful reply. My requirement is slightly different though.
>
> I have to avoid the error message not for entire plant but the plant and material number combination.Is there any customizing for achieving this.
>
> In this case if the same plant and material number is used but for different PO type like standard PO(type NB) it should still show an error message as standard.But if the PO type is stock transfer order(Y2UB) then error message to be avoided.
so what you actually want is: source list is obligatory for a combination of plant / purchase order type / material number.
there's no customizing this.
actually, i have difficulties in accepting your search for an exit/enhancement because the configuration of your system does not match your business process = why do you want to avoid an error message in case of a STO scenario where the source list entry is missing?? either you have defined source lists obligatory on plant level - then see to it, that the source lists are maintained in the plant (you can mass generate it using ME05) or it is not ... in which case you will have to train your users accordingly ...
please do not take offense - none is intended - but i wonder why one would make a thing mandatory, only to circumvent the obligation by (intransparent) programming.

"Supplier list" in PO and "Invitation List" in Sourcing

Hi,
Is it possible to use "Supplier list" in PO as "Invitation List" in Sourcing ?
Regards.

Hi,
Supplier List and Invitation List are entirely different even though they use same suppliers.
Supplier List cannot be used as Invitation List in Oracle Sourcing.
Thanks
-Arif.

Repost: Oracle VM Manager (IndexError: list index out of range) error

The Oracle VM Manager software will not import a server side created VM for management purposes. It is giving an index-out-of-range error when trying to retrieve the Memory Size from the jumpbox.xen file (I created a symbolic link to this file called vm.cfg).
Here is the log for the index-out-of-range error:
ovs_root.log
"2008-08-20 02:03:26" INFO=> utl_list_dir: directory('/OVS/running_pool') => pro
jectweb/,infinesse-web/
"2008-08-20 02:03:26" INFO=> list_dir: directory('/OVS/running_pool') => project
web/,infinesse-web/
"2008-08-20 02:03:26" INFO=> utl_get_vm_size: vm('/OVS/running_pool/infinesse-we
b') => 12020
"2008-08-20 02:03:26" INFO=> get_vm_size:vm('/OVS/running_pool/infinesse-web') =
success:size=12020"2008-08-20 02:03:26" ERROR=> xen_get_memory:vm('/OVS/running_pool/infinesse-web
')=><IndexError: list index out of range>
"2008-08-20 02:03:26" INFO=> get_vm_memory: vm('/OVS/running_pool/infinesse-web'
) scope=cfg rs=failed:<IndexError: list index out of range>
and my vm.cfg file:
# -- mode: python; --
# This JumpBox requires Hardware Support otherwise known as Xen's HVM mode.
# To test your Xen installation if it supports this mode, issue the following
# command:
# sudo xm info | grep xen_caps
# it should return a capabilities line like:
# xen_caps : xen-3.0-x86_32 hvm-3.0-x86_32
# as long as there is an hvm entry as shown above it should work.
## If starting Xen fails you may need to set a custom path
## for your kernel or device model files. Uncommant the following
## variables and put in the appropriate paths
## Uncomment and set your custom hvm loader path here
# hvm_path = ""
## Uncomment and set your custom device model loader path here
# devmodel_path = ""
# You will probably want to uncomment the following VNC variables so you
# can see the JumpBox console over VNC. Make sure to set the vncpassword to
# something unique. Also, if you run multiple JumpBoxes on the same host, you
# may want to leave vncdisplay unset and use the domid for the display numbers
#vnc=1 # enable VNC library for graphics, default = 1
#vnclisten="0.0.0.0" # address that should be listened on for the VNC server if vnc is set.
#vncdisplay=1 # set VNC display number, default = domid
#vncconsole=1 # enable spawning vncviewer for domain's console
#vncpasswd='password' # set password for domain's VNC console
memory = '256'
vfb = ['type=vnc,vncunused=1,vnclisten=0.0.0.0']
########### You shouldn't have to edit anything below here ##############
import os
import sys
# Assemble the basepath
file = os.getcwd() + '/' + sys.argv[2]
basepath = os.path.dirname(os.path.abspath(file))
datatarball = basepath + '/disks/data/data.xen.tgz'
builder = "hvm"
hvmfiles = [
'/usr/lib/xen/boot/hvmloader',
'/usr/lib/xen-ioemu-3.0/boot/hvmloader'
devfiles = [
'/usr/lib/xen/bin/qemu-dm',
'/usr/lib/xen-ioemu-3.0/bin/qemu-dm'
# Check to see if the user has assigned custom HVM or device_model paths
try:
hvmfiles.insert(hvm_path,0)
except NameError:
pass
try:
devfiles.insert(devmodel_path,0)
except NameError:
pass
# Choose the appropriate HVM Loader
for i in hvmfiles:
if os.path.exists(i):
kernel = i
break
# Choose the appropriate Device Models
for i in devfiles:
if os.path.exists(i):
device_model = i
break
# Need to test if device_model and kernel are set, if not return with error.
# If this is the first time this has run, extract the data disk tarball
# then remove the tarball
if os.path.exists(datatarball):
os.chdir(basepath + '/disks/data')
os.system("tar -zxpf " + datatarball)
os.remove(datatarball)
# Continue normal configuration
name = "joomla15"
vif = ['type=ioemu, mac=00:16:3E:2B:1F:04, bridge=xenbr0']
disk = ['file:' + basepath + '/disks/root/root.hdd,hda,w','file:' + basepath + '/disks/data/data.xen,hdb,w']
root = "/dev/hda1 ro"
extra = "4"

Hi Ravi,
the error is due to the componet JAVA(TM) 7 which is not supported.
Better to run JAVA 6, I'm running the update 33, you can download it from http://www.oracle.com/technetwork/java/javase/downloads/jre6-downloads-1637595.html
Remeber to remove JAVA &
Go to control panel --> add remove programs and remove JAVA (TM) 7.
It will solve the problem.
Ciao,
Massimo

Flash builder ,Toggle break point ,get error:Error getting list of source files

In Flash builder ,debug a Web Application, when try to toggle a break point , flash builder prompts:
Error getting list of source files
flash.tools.debugger.InProgressException
at flash.tools.debugger.concrete.DSwfInfo.swdLoaded(DSwfInfo.java:156)
at flash.tools.debugger.concrete.DSwfInfo.getSourceList(DSwfInfo.java:131)
at flash.tools.debugger.threadsafe.ThreadSafeSwfInfo.getSourceList(ThreadSafeSwfInfo.java:78 )
at com.adobe.flexbuilder.debug.breakpoints.FlexLineBreakpoint.findSourceFiles(FlexLineBreakp oint.java:512)
at com.adobe.flexbuilder.debug.breakpoints.FlexLineBreakpoint.instantiate(FlexLineBreakpoint .java:577)
at com.adobe.flexbuilder.debug.model.FlexDebugTarget.instantiateBreakpoint(FlexDebugTarget.j ava:525)
at com.adobe.flexbuilder.debug.model.FlexDebugTarget$1.run(FlexDebugTarget.java:568)
at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)

who can answer this?

Redirect based on user_level or user_id or session

I am on a mission to find the
technote or adobe
support file that explains how to redirect based on
user_level or user_id or session
I have searched using:
"redirect"
"user level"
and even:
"redirect based on user"
I know it exists (
I read it) I just can't find it, Please can someone help me
find it.
Cheers

MM_redirectLoginSuccess = $row_rsUser['destination_page'];
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"forumsza" <[email protected]> wrote in
message
news:gpiimv$pma$[email protected]..
> Based on this article: (which only supports, ASP and
JSP)
>
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_15881&sliceId=1
>
> Do I just add my PHP like this:
>
> MM_redirectLoginSuccess =
> CStr(MM_rsUser.Fields.Item("destination_page").Value)
>
> The same as ASP?
>

Drop down list in sourcing missing

Hi
When looking at work list in sourcing there is a drop down list where you can choose a certain product category. I have a user where this list is empty. If I move him to a different purchasing group the list is populated. The only difference between the two purchasing groups is which users groups they are responsible for. What could be wrong?
Sincerely
Anders

Hi Jock.
They are responsible for the same products.
Sincerely

PerformancePoint - 2010 Scorecard filter based on two data sources (Actual - OLAP/Target - Sharepoint List)

Hi
I have KPI's for tasks performed by specific groups within our organization, the actuals are determined by an MDX tuple formula against an AS OLAP data source:
([Change Task Assignment Group].[Group Subtype].&[GDC PM], [Measures].[Average task duration - m]) /1440
The Task Name is provided by a filter, also looking at the AS OLAP data source.
This woks well and allows us to have a single scorecard for the team, providing actuals depending on the task selected from the filter. The problem comes in setting targets for the KPI's! I can only set one target for each KPI and this is
the same for which ever task is selected via the filter. The target is stored in a SharePoint list.
Is it possible to have targets for the different tasks driven by the same filter? Can a single filter be configured to return values from two data sources to both the Actual KPI value and the Target value?
Thanks

A good solution. Liked it very much. Can you please make it a technet blog for others.
[email protected]

Range from columns based on list of values

Hi,
I have a table that has a key_code and a alt_code like this
with values like so.. (has 2 million records in 8.1.7 Database)
KEY_CODE ALT_CODE
0001     AA
0001          AB
0001          AF
0001          G4
0001          G5
0001          G6
0200          BB
0200 BC
0200 BD
0200 Bx
I'm struggling with the concept of how to create a range of these values.
There is one problem I'm running into.
The alt code must be in a valid code list to have a break in the range
An example would be
VALID ALT_CODES TABLE
B1
B2
ZA
ZB
ZC
ZH
ZJ
ZK
WHAT I'M LOOKING FOR IS THE OUTPUT TO BE
KEY_CODE          BEGRANGE               ENDRANGE
10               B1                    B2
10               ZA                    ZK
20               ZA                    ZJ
WHAT I'VE GOT SO FAR IS
SOMETHING THAT LOOKS LIKE
THE PROBLEM IS THAT THE VALID ALT_CODE LIST IS NOT SEQUENTIAL AND THERE ARE GAPS.
SO IF, FOR EXAMPLE THERE IS NO CODE ZD IT WILL BREAK A RANGE ON IT THE VALUE BETWEEN ZC AND ZH
WHEN I DON'T WANT IT TO.
KEY_CODE          BEGRANGE               ENDRANGE
10               B1                    B2
10               ZA                    ZC
10               ZH                    ZH
10               ZJ                    ZK
20               ZA                    ZC
20               ZH                    ZH
20               ZJ                    ZJ
I'd be most grateful for your input.

Ditto.
And where the hell does this row come from (not to mention the 10s and 20s being totally different key codes from the first table)?
KEY_CODE BEGRANGE ENDRANGE
10 B1 B2
10 ZA ZK
20 ZA ZJ <-- ??

Redirect based on source IP address????

I have a site that I don't want our competitors to view! By
tracking code, I have managed to obtain their source IP addresses.
After looking around, there is a .php solution to my problem
but my host is not well suited to .php files (although it does some
processing).
My pages are in .shtml (to process css drop-down menus
correctly) and I understand that this attached code, if put at the
top of the page before anything else, will work.
I have managed to get one working
http://www.donbur.co.uk/gb/newindex.php
but am having difficulty getting this code to work elsewhere.
The problem is, when I try to put this code into either a
template or as an include, it won't process correctly or the page
won't render at all.
Do I have to use .php files or can I insert php script into
an .shtml document.
Getting really confused now.... HELP

Thanks for the constructive advice...
quote:
>After looking around, there is a .php solution to my
problem but my host is not well
>suited to .php files (although it does some processing).
What does this mean? Does your hosting plan include php
support or not?
You can't just put a php script into any page. It needs to be
a .php page or you need to reconfigure the server to parse other
pages for php. But if your hosting plan doesn't support php then it
won't work in any case.
My host is BT Internet and they claim not to process .php
files which is why our main .php site is hosted elsewhere; however,
it seems that, although it has difficulty (to clarify: doesn't
render) with main full scripts, it does seem to process simple
<?php echo commands for example.
It has been suggested on another forum that the .shtml files
are set to be recognised by .php in the cpanel but our host will
not do this...
Our competitors are not particularly smart or up-to-date and
this would have been reasonably effective; however, I bow to better
judgement and close this topic.

Filter/Redirect based on file extension and path

Posted this earlier on the NSAPI list, didn't get a response. Can some
one help?
Thanks
Immanuel
I am attempting to write a filter/redirector based on file extension
and
the path of the file - some thing like:
http:\\www.wombat.com\filetpye1\file1.abc
gets redirected to server http:\\foo.com\file1.abc
http:\\www.wombat.com\filetpye2\file2.xyz
gets redirected to server http:\\bar.com\file2.xyz
Can some one tell me
a. Is this possible using NSAPI and conf file changes
b. Pointer (and source if available) to implment this
Regards
Immanuel

You need to use Client tages and redirect and other SAFs. More info in :
http://docs.sun.com/source/817-1834-10/crobjsaf.html#wp18074
http://docs.sun.com/app/docs/doc/820-1643/abvaq?l=en&a=view&q=Client+tags

SNOTE (Note Assistant) list expected "source code corrections" of a note?

Is it possible, in current versions of SNOTE, to print the "source code corrections" that the note is supposed to contain?
This was possible in "good old OSS" and also, I think, in early versions of SNOTE.
Why do I ask?
Sometimes you have a note that SNOTE cannot handle by itself. You must then open the "splitscreen editor" and guide SNOTE through the process.
In such cases I like to have a listing, on paper, of the expected changes, so that I keep some overview and that I can check the corrections as I go through them.

I have found a second possibility - the following little program based on some code found in the 4.6C implementation of SNOTE.
report zztmp_snote_displ line-size 080.
type-pools bcwbn.
parameter p_note like cwbnthead-numm.
data gs_note type bcwbn_note.
start-of-selection.
clear gs_note.
select numm versno
    from cwbnthead
    into (gs_note-key-numm,gs_note-key-versno)
         where numm        = p_note
         and    incomplete = space
         order by primary key.
endselect.
if not ( gs_note-key is initial ) .
    call function 'SCWB_NOTE_READ'
      exporting
        iv_read_attributes                = 'X'
        iv_read_short_text                = 'X'
        iv_read_all_texts                 = 'X'
        iv_read_validity                  = 'X'
        iv_read_corr_instructions         = 'X'
        iv_read_customer_logfile          = 'X'
        iv_use_fallback_languages         = 'X'
        iv_read_loghndl                   = 'X'
        iv_read_fixes                     = 'X'
        iv_read_customer_attributes       = 'X'
*   IV_READ_READ_BY_USER              = ' '
*   IV_READ_SOL_MGR_REFERENCE         = ' '
*   IV_READ_SAP_STATUS                = ' '
      changing
        cs_note                           = gs_note
      exceptions
        note_not_found                    = 1
        language_not_found                = 2
        unreadable_text_format            = 3
        corr_instruction_not_found        = 4
        others                            = 5
    if sy-subrc eq 0.
      call function 'SCWB_NOTE_DISPLAY'
        changing
          cs_note = gs_note.
    endif.
endif.

HTTP redirect based on client IP

Hello,
Is anyone aware of a method to redirect an HTTP request based on the Client IP using ICM/Web Dispatcher?
The "icm/HTTP/redirect_" parameter doesn't appear to allow you to use the client IP as a criteria for the redirect, and I have not been able to find any other indication of how this might be accomplished on SMP, SDN, or Online Help.
The goal of this is to perform a protocol switch and redirect all HTTP requests from a specific IP range to HTTPS.
thanks!
John

Just a thought:
Have two instances of Web Dispatcher, listening on different ports.
Split incoming connections to different ports, whichever way is available:
1. Ask you network team to forward request from one subnet to one port and another subnet to another port.
2. On Windows server use RRAS
3. On any server use software routing;
4. Setup routing appliance before the server.
Not too elegant, but should work...
Regards,
Slava

Redirect based on list of source IP ranges

Similar Messages

Maybe you are looking for