Forum Discussion

Kevin_Davies_40's avatar
Dec 04, 2013

Injecting additional routes on the client

Can I inject additional routes on the client side with APM during login?

 

In addition to the routes provided by the split tunnel I want to dynamically create routes into the ppp adapter on the client side based on information they give on the login page. Routing domains do not carry the flexibility I need as this is per user.

 

  • Hey Kevin,

    I have dug into this a little and from what I can see it cannot be configured to dynamically assign extra routes. I didn't see a session variable that would work for this and when doing a tcpdump and ssldump and looking at the output you will see XML generated and embedded into a response which I assume the uses the components to start the PPP adapter with the settings in the XML...

    1
    192.168.0.0/255.255.255.0 
    

    This was part of the XML file and that is the IP address I added to the split tunnel config.

    I would suggest opening a case with F5 and requesting an RFE or seeing if they can find a way to accommodate this configuration. (you could obviously setup a separate network access resource for each user but I assume you have way to many users for this to not be a nightmare).

    Regards,

    Seth Cooper