Editing Virtual Server in Access

Overview

This document covers editing an Access virtual server. OAM and ADFS setup are supported with this edit workflow.

Version Information

Version : 6.0.0, 6.0.1

Assigning Access Profile

To assign an access profile, RBA and WebSSO plugin must be enabled. The text below explains how to enable the necessary plugins and assign an access profile using REST APIs:

Enable PPP Plugin:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles



{
    enablePppProfile : true
}


Response:

{
"enablePppProfile":true,
"pppProfile":"/Common/ppp",
"partition":"Common",
"name":"ppp",
"id":"07a47bdf1-6708-3cf5-9222-31c69f479666",
"generation":1,
"lastUpdateMicros":1520366299022654,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/07a47bdf1-6708-3cf5-9222-31c69f479666
}


Assign a connectivity profile:


POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles



{
connectivityProfileReference: {
link:https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
            }
}


Response:

{
"connectivityProfileReference":{
"id":"a70007a5-df47-3bd8-6e4f-11ab63871737",
"name":"connectivity_profile1",
"kind":"cm:access:working-config:apm:profile:connectivity:connectivitystate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
},
"partition":"Common",
"name":"connectivity_profile1",
"id":"9719aa73-e02d-357c-ad12218d33b1860d",
"generation":1,
"lastUpdateMicros":1520366299037611,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/9719aa73-e02d-357c-ad12-218d33b1860d
}

Assigning Connectivity Profile

To assign a connectivity profile, PPP must be enabled. The text below explains how to enable the necessary plugins and assign a connectivity profile using REST APIs:

Enable PPP Plugin:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles



{
    enablePppProfile : true
}


Response:

{
"enablePppProfile":true,
"pppProfile":"/Common/ppp",
"partition":"Common",
"name":"ppp",
"id":"07a47bdf1-6708-3cf5-9222-31c69f479666",
"generation":1,
"lastUpdateMicros":1520366299022654,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/07a47bdf1-6708-3cf5-9222-31c69f479666
}


Assign a connectivity profile:


POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles



{
connectivityProfileReference: {
link:https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
            }
}


Response:

{
"connectivityProfileReference":{
"id":"a70007a5-df47-3bd8-6e4f-11ab63871737",
"name":"connectivity_profile1",
"kind":"cm:access:working-config:apm:profile:connectivity:connectivitystate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
},
"partition":"Common",
"name":"connectivity_profile1",
"id":"9719aa73-e02d-357c-ad12218d33b1860d",
"generation":1,
"lastUpdateMicros":1520366299037611,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/9719aa73-e02d-357c-ad12-218d33b1860d
}

Assigning a VDI Profile

To assign a profile to a VDI profile using Rest APIs is displayed below as follows:

Assign VDI Profile:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles


{
    vdiProfileReference : {
        link : "https://localhost/mgmt/cm/access/working-config/apm/profile/vdi/37478e57-6fb7-360a-a251-85d9134962e7"

          }
}


Response:

{
"vdiProfileReference":{
"id":"37478e57-6fb7-360a-a251-85d9134962e7",
"name":"vdi",
"kind":"cm:access:working-config:apm:profile:vdi:vdistate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/vdi/37478e57-6fb7-360a-a251-85d9134962e7
},
"partition":"Common",
"name":"vdi",
"id":"32f758c8-d8be-388d-88d5-a5e160c6e8ad",
"generation":1,
"lastUpdateMicros":1520368836698708,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/32f758c8-d8be-388d-88d5-a5e160c6e8ad
}



Assigning Application Tunnels (Java per app VPN):
To enable Java Tunnels using Rest APIs is displayed as follows:

Assign application tunnels:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles


{
    remoteDesktopProfileReference : {
        “link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95"

           }
}

Response:

{
"remoteDesktopProfileReference":{
"id":"d0bc6019-1eb3-36ea-b400-0effe8e64f95","name":"remotedesktop",
"kind":"cm:access:working-config:apm:profile:remote-desktop:remotedesktopstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95
},
"partition":"Common",
"name":"remotedesktop",
"id":"594e033d-49df-3baf-bb70-d15537eb4f91",
"generation":1,
"lastUpdateMicros":1520373991587180,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/594e033d-49df-3baf-bb70-d15537eb4f91
}

Assigning Application Tunnels (Java per app VPN):

To enable Java Tunnels using Rest APIs is displayed as follows:

Assign application tunnels:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles


{
    remoteDesktopProfileReference : {
        “link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95"

           }
}

Response:

{
"remoteDesktopProfileReference":{
"id":"d0bc6019-1eb3-36ea-b400-0effe8e64f95","name":"remotedesktop",
"kind":"cm:access:working-config:apm:profile:remote-desktop:remotedesktopstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95
},
"partition":"Common",
"name":"remotedesktop",
"id":"594e033d-49df-3baf-bb70-d15537eb4f91",
"generation":1,
"lastUpdateMicros":1520373991587180,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/594e033d-49df-3baf-bb70-d15537eb4f91
}

Assigning Ping Access Profile

To assign profile to PingAccess profile using Rest APIs is displayed below as follows:

Assign Ping Access:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles


{
    “pingAccessProfileReference” : {
    “link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/ping-access/218a20bb-d8c6-3e6f-8fbf-fad259c46d88"

}

Response:

{
"pingAccessProfileReference":{
"id":"218a20bb-d8c6-3e6f-8fbf-fad259c46d88",
"name":"pingaccess",
"kind":"cm:access:working-config:apm:profile:ping-access:pingaccessstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/ping-access/218a20bb-d8c6-3e6f-8fbf-fad259c46d88
},
"partition":"Common",
"name":"pingaccess",
"id":"37847ba3-b74c-3f1f-af6a-f898ca89cf0f",
"generation":1,
"lastUpdateMicros":1520374372673909,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/37847ba3-b74c-3f1f-af6a-f898ca89cf0f
}

Assigning Rewrite Profile

To assign a profile to a rewrite profile using Rest APIs is displayed below as follows:

Assign rewrite profile:

POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles



 {
“rewriteProfilePath”: "/Common/rewrite"
 }


{
"rewriteProfilePath":"/Common/rewrite",
"partition":"Common",
"name":"rewrite",
"id":"6ee28f8d-7fc8-39d8-bca5-db1a8bf363fb",
"generation":1,
"lastUpdateMicros":1520375074957091,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink": https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/6ee28f8d-7fc8-39d8-bca5-db1a8bf363fb
}

Assigning PerFlowRequest access policy

To assign perFlowRequest access policy, set attributes perFlowRequestAccessPolicy and perFlowRequestAccessPolicyReference as follows

{
"perFlowRequestAccessPolicy":"/Common/perRequest_sri",
"perFlowRequestAccessPolicyReference:{
"link":https://localhost/mgmt/cm/access/working-config/apm/policy/access- policy/916076bd-2a2f-37d6-9c07-1fd1790458b4
}
}

Remove any above assigned profile

To remove, if more than one profile or plugins are associated, delete in the reverse order of the creation, otherwise delete the profile. Deletion of a profile with a plugin in the access profile using REST APIs is described below as follows:

DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/28789363-3f1c-36c0-b2f2-2a2b77864056


DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/44625ecf-aa4f-3ac8-9158-9f40c8b2b313


DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/28d6c13e-dcef-3b3f-a437-9299fe2528f5