Manual Chapter : Network access resource configuration variables and attributes

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.0.0
Manual Chapter

Network access resource configuration variables and attributes

This table includes network access resource configuration variables and attributes.
Network access resource property
Type
Attribute value format
leasepool_name
string
The attribute value is the name of a leasepool that exists on Access Policy Manager.
snat_type
integer
The attribute value is 0, 2, or 3.
  • 0 - None (no SNAT)
  • 2 - SNAT pool (assigned with the variable snatpool_name)
  • 3 - Automap
snatpool_name
string
The attribute value is the name of an SNAT pool. The SNAT pool must be configured on the Access Policy Manager.
compression
int
The attribute value is 0 or 1.
  • 0 = disable compression
  • 1 = enable compression
client_proxy_settings
  • Bool
  • String
  • IPAddress
  • Number
  • Bool
  • Vector(String)
The attribute is XML, formatted as follows:
< client_proxy_settings >
<client_proxy>1</client_proxy>
<client_proxy_script>proxy_script
</client_proxy_script>
<client_proxy_address>proxyaddress</ client_proxy_address>
<client_proxy_port>proxyport</client_proxy_port>
<client_proxy_local_bypass>1</client_proxy_local_bypass>
<client_proxy_exclusion_list>
<item>exclusion_list_item1</item>
<item>exclusion_list_item2</item>
</client_proxy_exclusion_list>
</client_proxy_settings>
Note:
For Windows, <client_proxy> should have the value
1
for the other settings to be effective, otherwise all other settings from <client_proxy_settings> are ignored. For MacOS, <client_proxy> should have the string
'yes'
for the other settings to be effective.
Important:
Assigning proxy info using session variables varies for Windows and Mac. See
Client proxy settings examples
after table.
drive_mapping
Vector (Struct)
The attribute is XML, formatted as follows:
<drive_mapping>
<item>
<description> description</description>
<path>drive_path</path>
<drive>drive_letter</drive>
</item>
</drive_mapping>
Note that the drive letter range is from D to Z.
session_update_threshold
int
The attribute value is the session update threshold, in seconds.
session_update_window
int
The attribute value is the session update window, in seconds.
address_space_include_dns_name
Vector (string)
The attribute is XML, formatted as follows:
<address_space_include_dns_name>
<item><dnsname> dnsname1 </dnsname>
</item>
<item><dnsname> dnsname2 </dnsname>
</item>
</address_space_include_dns_name>
address_space_include_subnet
Vector (network)
The attribute value is a space-separated list of subnets. For example:
192.168.30.0/255.255.255.0
172.30.11.0/255.255.255.0
address_space_exclude_subnet
Vector(network)
The attribute value is a space-separated list of subnets. For example:
192.168.30.0/255.255.255.0
172.30.11.0/255.255.255.0
address_space_protect
Bool
The attribute value is 0 or 1.
0 = disable address space protection
1 = enable address space protection
address_space_local_subnets_excluded
Bool
The attribute value is 0 or 1.
0 = disable address space local subnet exclusion
1 = enable address space local subnet exclusion
address_space_dhcp_requests_excluded
Bool
The attribute value is 0 or 1.
0 = disable address space DHCP requestexclusion
1 = enable address space DHCP requestexclusion
split_tunneling
Bool
The attribute value is 0 or 1.
0 = disable split tunneling
1 = enable split tunneling
Note: If split_tunneling is set to 0 then you must set the following variables:
address_space_exclude_subnet = "" address_space_include_subnet = "128.0.0.0/128.0.0.0 0.0.0.0/128.0.0.0"
address_space_include_dns_name = "*"
dns
String
The attribute is XML, formatted as follows:
<dns>
<dns_primary>IPAddress</ dns_primary><dns_secondary>IPAddress</ dns_secondary></dns>
dns_suffix
String
The DNS Default Domain Suffix. For example, siterequest.com.
wins
String
The attribute is XML, formatted as follows:
<wins>
<wins_primary >IPAddress</ wins_primary ><wins_secondary>IPAddress</ wins_secondary></wins>
static_host
Vector(staticHost)
The attribute is XML, formatted as follows:
<static_host>
<item>
<hostname>hostname</hostname>
<address>IPAddress</address>
</item>
</static_host>
client_interface_speed
int
The number for the client interface speed value in the network access resource, in bytes.
client_ip_filter_engine
Bool
The attribute value is 0 or 1.
0 = disable integrated IP filtering engine
1 = enable integrated IP filtering engine
client_power_management
Bool
The attribute value is 0 or 1.
0 = disable client power management
1 = enable client power management
microsoft_network_client
Bool
The attribute value is 0 or 1.
0 = disable the Client for Microsoft Networks option
1 = enable the Client for Microsoft Networks
warn_before_application_launch
Bool
The attribute value is 0 or 1.
0 = disable the Display warning before launching applications option
1 = enable the Display warning before launching applications option
application_launch
Vector(AppLaunch)
The attribute is XML, formatted as follows:
<application_launch>
<item><path>path</path>
<parameter>string</parameter>
<os_type>os_type</os_type>
</item>
</application_launch>
For the <os_type> value, type WINDOWS, MAC, or IOS. This field is case sensitive.
provide_client_cert
Bool
The attribute value is 0 or 1.
0 = disable the Provide client certificate on Network Access connection when requested option
1 = enable the Provide client certificate on Network Access connection when requested option
tunnel_port_dtls
int
The attribute is the DTLS port, for example 4433.
Note: setting this to any number other than 0 enables DTLS in the network access resource, and sets the number you specify as the DTLS port.

Client proxy settings examples

Assigning proxy information using session variables is different for Windows and Mac.
For Windows:
<client_proxy_settings><client_proxy>1</client_proxy> <client_proxy_address>192.168.100.101</client_proxy_address> <client_proxy_port>8080</client_proxy_port></client_proxy_settings>
For MacOS:
<client_proxy_settings><client_proxy>yes</client_proxy></client_proxy_settings> <client_proxy_script></client_proxy_script><client_proxy_address>10.10.10.4 </client_proxy_address><client_proxy_port>3128</client_proxy_port> <client_proxy_local_bypass>1</client_proxy_local_bypass> <client_proxy_exclusion_list></client_proxy_exclusion_list></client_proxy_settings>