Manual Chapter : Network access resource configuration variables and attributes

Applies To:

  • BIG-IP APM

    15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0

Network access resource configuration variables and attributes

This table includes network access resource configuration variables and attributes.

Network access resource property

Type

Attribute value format

leasepool_name

string

The attribute value is the name of a leasepool that exists on Access Policy Manager.

proxy_arp

Bool

The attribute value is 0 or 1. - 0 = disable the Proxy ARP option

  • 1 = enable the Proxy ARP option

compression

int

The attribute value is 0 or 1. - 0 = disable compression

  • 1 = enable compression

client_proxy_settings

  • Bool
  • String
  • IPAddress
  • Number
  • Bool
  • Vector(String)

The attribute is XML, formatted as follows: < client_proxy_settings >

<client_proxy>1</client_proxy>

<client_proxy_script>proxy_script

</client_proxy_script>

<client_proxy_address>proxyaddress</ client_proxy_address>

<client_proxy_port>proxyport</client_proxy_port>

<client_proxy_local_bypass>1</client_proxy_local_bypass>

<client_proxy_exclusion_list>

<item>exclusion_list_item1</item>

<item>exclusion_list_item2</item>

</client_proxy_exclusion_list>

</client_proxy_settings>

Note: For Windows, <client_proxy> should have the value 1 for the other settings to be effective, otherwise all other settings from <client_proxy_settings> are ignored. For MacOS, <client_proxy> should have the string 'yes' for the other settings to be effective. Important: Assigning proxy info using session variables varies for Windows and Mac. See Client proxy settings examples after table.

drive_mapping

Vector (Struct)

The attribute is XML, formatted as follows: <drive_mapping>

<item>

<description> description</description>

<path>drive_path</path>

<drive>drive_letter</drive>

</item>

</drive_mapping>

Note that the drive letter range is from D to Z.

session_update_threshold

int

The attribute value is the session update threshold, in seconds.

session_update_window

int

The attribute value is the session update window, in seconds.

address_space_include_dns_name

Vector (string)

The attribute is XML, formatted as follows: <address_space_include_dns_name>

<item><dnsname> dnsname1 </dnsname>

</item>

<item><dnsname> dnsname2 </dnsname>

</item>

</address_space_include_dns_name>

address_space_include_subnet

Vector (network)

The attribute value is a space-separated list of subnets. For example: 192.168.30.0/255.255.255.0

172.30.11.0/255.255.255.0

address_space_exclude_subnet

Vector(network)

The attribute value is a space-separated list of subnets. For example: 192.168.30.0/255.255.255.0

172.30.11.0/255.255.255.0

address_space_protect

Bool

The attribute value is 0 or 1. 0 = disable address space protection

1 = enable address space protection

address_space_local_subnets_excluded

Bool

The attribute value is 0 or 1. 0 = disable address space local subnet exclusion

1 = enable address space local subnet exclusion

address_space_dhcp_requests_excluded

Bool

The attribute value is 0 or 1. 0 = disable address space DHCP requestexclusion

1 = enable address space DHCP requestexclusion

split_tunneling

Bool

The attribute value is 0 or 1. 0 = disable split tunneling

1 = enable split tunneling

Note: If split_tunneling is set to 0 then you must set the following variables:

address_space_exclude_subnet = "" address_space_include_subnet = “128.0.0.0/128.0.0.0 0.0.0.0/128.0.0.0”

address_space_include_dns_name = “*”

dns

String

The attribute is XML, formatted as follows: <dns>

<dns_primary>IPAddress</ dns_primary><dns_secondary>IPAddress</ dns_secondary></dns>

dns_suffix

String

The DNS Default Domain Suffix. For example, siterequest.com.

wins

String

The attribute is XML, formatted as follows: <wins>

<wins_primary >IPAddress</ wins_primary ><wins_secondary>IPAddress</ wins_secondary></wins>

static_host

Vector(staticHost)

The attribute is XML, formatted as follows: <static_host>

<item>

<hostname>hostname</hostname>

<address>IPAddress</address>

</item>

</static_host>

client_interface_speed

int

The number for the client interface speed value in the network access resource, in bytes.

client_ip_filter_engine

Bool

The attribute value is 0 or 1. 0 = disable integrated IP filtering engine

1 = enable integrated IP filtering engine

client_power_management

Bool

The attribute value is 0 or 1. 0 = disable client power management

1 = enable client power management

microsoft_network_client

Bool

The attribute value is 0 or 1. 0 = disable the Client for Microsoft Networks option

1 = enable the Client for Microsoft Networks

warn_before_application_launch

Bool

The attribute value is 0 or 1. 0 = disable the Display warning before launching applications option

1 = enable the Display warning before launching applications option

application_launch

Vector(AppLaunch)

The attribute is XML, formatted as follows: <application_launch>

<item><path>path</path>

<parameter>string</parameter>

<os_type>os_type</os_type>

</item>

</application_launch>

For the <os_type> value, type WINDOWS, MAC, or IOS. This field is case sensitive.

provide_client_cert

Bool

The attribute value is 0 or 1. 0 = disable the Provide client certificate on Network Access connection when requested option

1 = enable the Provide client certificate on Network Access connection when requested option

tunnel_port_dtls

int

The attribute is the DTLS port, for example 4433. Note: setting this to any number other than 0 enables DTLS in the network access resource, and sets the number you specify as the DTLS port.

Assigning proxy information using session variables is different for Windows and Mac.

For Windows:


   <client_proxy_settings><client_proxy>1</client_proxy>
   <client_proxy_address>192.168.100.101</client_proxy_address>
   <client_proxy_port>8080</client_proxy_port></client_proxy_settings>

For MacOS:


   <client_proxy_settings><client_proxy>yes</client_proxy></client_proxy_settings>
   <client_proxy_script></client_proxy_script><client_proxy_address>10.10.10.4
   </client_proxy_address><client_proxy_port>3128</client_proxy_port>
   <client_proxy_local_bypass>1</client_proxy_local_bypass>
   <client_proxy_exclusion_list></client_proxy_exclusion_list></client_proxy_settings>