DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How to capture the IP address in the AAA

    Posted Tue December 22, 2020 11:48 AM

    I have a FTP Front handler with a AAA policy. And the AAA policy has the following:

    Identity Extraction : Processing metadata, extracting username and SSL certificate DN

    Authentication : Custom XSL

    I further need to do some more validations on the IP address of the client in the custom xslt, but I'm unable to capture the IP address.

    Kindly let me know, how to capture the IP address in the AAA policy.



    #DataPower
    #Support
    #SupportMigration


  • 2.  RE: How to capture the IP address in the AAA

    Posted Tue December 22, 2020 02:41 PM

    Try dp:client-ip-addr():

    https://www.ibm.com/support/knowledgecenter/SS9H2Y_7.7.0/com.ibm.dp.doc/client-ip-addr_metadatafunction.html



    #DataPower
    #Support
    #SupportMigration


  • 3.  RE: How to capture the IP address in the AAA

    Posted Tue December 22, 2020 05:35 PM

    I get an error : {http://www.datapower.com/extensions}client-ip-addr not valid in this context



    #DataPower
    #Support
    #SupportMigration


  • 4.  RE: How to capture the IP address in the AAA

    Posted Tue December 22, 2020 07:37 PM

    You can also get the IP from service variable var://service/URL-in .

    If you have FTP poller as FSH, I'd guess that the client-ip isn't probably valid in this context as there is no client that is connecting DataPower. But if you have FTP server FSH, then there should be a client ip....

    --HP



    #DataPower
    #Support
    #SupportMigration


  • 5.  RE: How to capture the IP address in the AAA

    Posted Wed December 23, 2020 09:05 AM

    It is FTP server FSH and I do get an error.



    #DataPower
    #Support
    #SupportMigration


  • 6.  RE: How to capture the IP address in the AAA

    Posted Wed December 23, 2020 12:54 PM

    Have you heard about https://www.mintme.com/ It's a site where you can trade tokens, trade cryptocurrencies, create your own token, an a bunch of more things. Version 1.4 has just released and it's great!



    #DataPower
    #Support
    #SupportMigration


  • 7.  RE: How to capture the IP address in the AAA

    Posted Tue January 19, 2021 01:30 PM

    Hi Karan Thakur,

    Could you spot the header name used for the FTP client to carry the IP? - Show Probe in the Headers section could be a good idea-

    Then do a AAA action - Processing Metadata using the header name you identified.

    Write us what happens.



    #DataPower
    #Support
    #SupportMigration