Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

F5 Networks 301b Exam - Topic 8 Question 115 Discussion

Which iRule will reject any connection originating from a 10.0.0.0/8 network?
C) when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { '10.0.0.0' { reject } '11.0.0.0' { pool pool_http1} default { pool http_pool } } }
A) when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::remote_addr] mask 8] switch $remote_ip { '10.0.0.0' { reject } '11.0.0.0' { pool pool_http1} default { pool http_pool } } }
B) when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 8] switch $remote_ip { '10.0.0.0' { reject } '11.0.0.0' { pool pool_http1} default { pool http_pool } } }
D) when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0] switch $remote_ip { '10.0.0.0' { reject } '11.0.0.0' { pool pool_http1} default { pool http_pool } } }

F5 Networks 301b Exam - Topic 8 Question 115 Discussion

Actual exam question for F5 Networks's 301b exam
Question #: 115
Topic #: 8
[All 301b Questions]

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Kelvin at Jul 31, 2025, 04:05 AM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Royal
7 months ago
I agree with C, it makes the most sense!
upvoted 0 times
...
Reynalda
7 months ago
Wait, can you really use local_addr like that?
upvoted 0 times
...
Shawana
7 months ago
I think A is the right choice.
upvoted 0 times
...
Stefania
8 months ago
Definitely not B, that one's off.
upvoted 0 times
...
Genevieve
8 months ago
Option C looks correct to me.
upvoted 0 times
...
Ira
8 months ago
I'm leaning towards option D, but I remember something about using IP::client_addr instead of IP::local_addr for rejecting connections.
upvoted 0 times
...
Percy
8 months ago
I feel like option C is the right choice since it uses the correct mask for the 10.0.0.0/8 network, but I might be mixing it up with another question.
upvoted 0 times
...
Paz
9 months ago
I remember practicing a similar question where we had to reject specific IP ranges, but I can't recall the exact syntax for the mask.
upvoted 0 times
...
Francis
9 months ago
I think option A is wrong because it uses IP::local_addr instead of IP::remote_addr, but I'm not completely sure.
upvoted 0 times
...
Justine
9 months ago
Ah, I see what's going on here. The key is to use the correct IP address - the remote client's IP, not the local address. I think option A is the way to go, but I'll verify the details one more time to be sure.
upvoted 0 times
...
Socorro
9 months ago
This is a tricky one. I'm not super familiar with iRules, so I'll need to take my time and really analyze each option to make sure I understand how the IP address is being handled. Hopefully, I can eliminate the incorrect choices and land on the right answer.
upvoted 0 times
...
Viola
9 months ago
Okay, let me think this through step-by-step. I need to find the option that uses the remote client's IP address and checks if it's in the 10.0.0.0/8 network. I think that's option A, but I'll double-check the details.
upvoted 0 times
...
Emerson
9 months ago
Hmm, I'm a bit unsure about this one. I need to carefully review the options and make sure I understand how the IP address is being extracted and compared in each case.
upvoted 0 times
...
Shaquana
10 months ago
This looks like a straightforward iRule question. I think I can handle this one - the key is to identify the correct IP address to check against the 10.0.0.0/8 network.
upvoted 0 times
...
Brock
10 months ago
I'm not sure, but I think B could also be a possible answer.
upvoted 0 times
...
Lachelle
10 months ago
I disagree, I believe the correct answer is C.
upvoted 0 times
...
Vince
10 months ago
Ha! Imagine if the correct answer was 'D' and it was checking the local IP address instead of the remote one. That would be a real head-scratcher!
upvoted 0 times
...
Ocie
10 months ago
I'm not sure about using [IP::addr] to get the remote IP address. Wouldn't it be better to use [IP::client_addr] instead?
upvoted 0 times
Heidy
6 months ago
It can be, but [IP::client_addr] is preferred for clarity.
upvoted 0 times
...
Larue
6 months ago
But isn't [IP::addr] still valid in some cases?
upvoted 0 times
...
Elmira
7 months ago
True, it targets the right address.
upvoted 0 times
...
King
7 months ago
I think [IP::client_addr] is more accurate for client connections.
upvoted 0 times
...
...
Adell
11 months ago
Option A looks good, it's checking the remote IP address and rejecting connections from the 10.0.0.0/8 network.
upvoted 0 times
Rosendo
10 months ago
User 1: Option A looks good, it's checking the remote IP address and rejecting connections from the 10.0.0.0/8 network.
upvoted 0 times
...
...
Kattie
11 months ago
I think the answer is A.
upvoted 0 times
...

Save Cancel