Manual Chapter :
Defining Access Policy Items
Applies To:
Show VersionsBIG-IP APM
- 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0
Defining Access Policy Items
About access policy item configuration
An access policy item is a small action, or rule, that serves a specific purpose in an access policy. Access policy items are all added to the access policy in the same way; but in most cases, each access policy item must be configured individually. In Access Policy Manager®, an access policy item is one of five types.
Item type | Configuration details | Examples |
---|---|---|
Blank item | This type of access policy item has no explicit configuration on the configuration page, and can be configured to verify a wide range of conditions with Expression screens. |
|
Preconfigured branch rule item | This type of access policy item has no explicit configuration on the configuration page, and a preconfigured set of rules on the Branch Rules page. |
|
Properties page configuration item | This type of access policy has all standard configuration options on the configuration page, to verify the required information, prompt for information, or another action. |
|
Assignment item | An assignment action allows configuration on the configuration page, and contains a list of available resources of a certain type, and allows you to select one or multiple resources to assign. Some resource assignment actions, such as Webtop, Links and Sections Assign, allow you to assign multiple items of different types. Advanced Resource Assign is a special case that allows you to select and assign multiple resources of different types at once. |
|
Mapping assignment item | A mapping assignment action allows you to assign one variable or resource to the value of another variable or resource. This kind of assign action includes the assignment of resources or variables on a separate page, linked from the main screen. |
|
Adding a blank access policy item to an access policy
Before you start this task, configure an access profile.
Configure a blank item to configure one of several actions that has no explicit configuration
defined.
The access policy is configured with the empty action you have configured.
Click the Apply Access
Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your
requirements, verify the log settings for the access profile.
Adding an access policy item with preconfigured branch rules
Before you start this task, configure an access profile.
Configure an access policy with preconfigured branch rules to add preconfigured settings and
branches to an access policy.
The access policy is saved with the action you have configured.
Click the Apply Access
Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your
requirements, verify the log settings for the access profile.
Adding an access policy item with configurable properties
Before you start this task, configure an access profile.
Configure an access policy with configurable properties to check for specific items or
policies.
The access policy is configured with the empty action you have configured.
Click the Apply Access
Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your
requirements, verify the log settings for the access profile.
Adding an access policy assignment item
Before you can add an access policy assignment item, you need to configure an access
profile.
Configure an access policy with an assignment action to assign a resource, local
traffic pool, ACL, profile, or other item. Each assignment action works differently and
assigns different items.
The access policy is configured with the assignment action you have configured.
Click the Apply Access
Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your
requirements, verify the log settings for the access profile.
Adding an access policy mapping item
Before you start this task, configure an access profile.
Configure an access policy with a mapping action to map resources or variables of
one type to another type or value. Each mapping action works differently and assigns
different items.
The access policy is configured with the assignment action you have configured.
Click the Apply Access
Policy link to apply and activate your changes to this access policy.
Note: To ensure that logging is configured to meet your
requirements, verify the log settings for the access profile.