Editing Virtual Server in Access¶
Overview¶
This document covers editing an Access virtual server. OAM and ADFS setup are supported with this edit workflow.
Version Information¶
Version : 6.0.0, 6.0.1
Assigning Access Profile¶
To assign an access profile, RBA and WebSSO plugin must be enabled. The text below explains how to enable the necessary plugins and assign an access profile using REST APIs:
Enable PPP Plugin:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
enablePppProfile : true
}
Response:
{
"enablePppProfile":true,
"pppProfile":"/Common/ppp",
"partition":"Common",
"name":"ppp",
"id":"07a47bdf1-6708-3cf5-9222-31c69f479666",
"generation":1,
"lastUpdateMicros":1520366299022654,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/07a47bdf1-6708-3cf5-9222-31c69f479666
}
Assign a connectivity profile:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
connectivityProfileReference: {
link:https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
}
}
Response:
{
"connectivityProfileReference":{
"id":"a70007a5-df47-3bd8-6e4f-11ab63871737",
"name":"connectivity_profile1",
"kind":"cm:access:working-config:apm:profile:connectivity:connectivitystate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
},
"partition":"Common",
"name":"connectivity_profile1",
"id":"9719aa73-e02d-357c-ad12218d33b1860d",
"generation":1,
"lastUpdateMicros":1520366299037611,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/9719aa73-e02d-357c-ad12-218d33b1860d
}
Assigning Connectivity Profile¶
To assign a connectivity profile, PPP must be enabled. The text below explains how to enable the necessary plugins and assign a connectivity profile using REST APIs:
Enable PPP Plugin:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
enablePppProfile : true
}
Response:
{
"enablePppProfile":true,
"pppProfile":"/Common/ppp",
"partition":"Common",
"name":"ppp",
"id":"07a47bdf1-6708-3cf5-9222-31c69f479666",
"generation":1,
"lastUpdateMicros":1520366299022654,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/07a47bdf1-6708-3cf5-9222-31c69f479666
}
Assign a connectivity profile:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
connectivityProfileReference: {
link:https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
}
}
Response:
{
"connectivityProfileReference":{
"id":"a70007a5-df47-3bd8-6e4f-11ab63871737",
"name":"connectivity_profile1",
"kind":"cm:access:working-config:apm:profile:connectivity:connectivitystate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/connectivity/a70007a5-df47-3bd8-6e4f-11ab63871737
},
"partition":"Common",
"name":"connectivity_profile1",
"id":"9719aa73-e02d-357c-ad12218d33b1860d",
"generation":1,
"lastUpdateMicros":1520366299037611,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/9719aa73-e02d-357c-ad12-218d33b1860d
}
Assigning a VDI Profile¶
To assign a profile to a VDI profile using Rest APIs is displayed below as follows:
Assign VDI Profile:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
vdiProfileReference : {
link : "https://localhost/mgmt/cm/access/working-config/apm/profile/vdi/37478e57-6fb7-360a-a251-85d9134962e7"
}
}
Response:
{
"vdiProfileReference":{
"id":"37478e57-6fb7-360a-a251-85d9134962e7",
"name":"vdi",
"kind":"cm:access:working-config:apm:profile:vdi:vdistate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/vdi/37478e57-6fb7-360a-a251-85d9134962e7
},
"partition":"Common",
"name":"vdi",
"id":"32f758c8-d8be-388d-88d5-a5e160c6e8ad",
"generation":1,
"lastUpdateMicros":1520368836698708,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/32f758c8-d8be-388d-88d5-a5e160c6e8ad
}
Assigning Application Tunnels (Java per app VPN):
To enable Java Tunnels using Rest APIs is displayed as follows:
Assign application tunnels:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
remoteDesktopProfileReference : {
“link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95"
}
}
Response:
{
"remoteDesktopProfileReference":{
"id":"d0bc6019-1eb3-36ea-b400-0effe8e64f95","name":"remotedesktop",
"kind":"cm:access:working-config:apm:profile:remote-desktop:remotedesktopstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95
},
"partition":"Common",
"name":"remotedesktop",
"id":"594e033d-49df-3baf-bb70-d15537eb4f91",
"generation":1,
"lastUpdateMicros":1520373991587180,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/594e033d-49df-3baf-bb70-d15537eb4f91
}
Assigning Application Tunnels (Java per app VPN):¶
To enable Java Tunnels using Rest APIs is displayed as follows:
Assign application tunnels:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
remoteDesktopProfileReference : {
“link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95"
}
}
Response:
{
"remoteDesktopProfileReference":{
"id":"d0bc6019-1eb3-36ea-b400-0effe8e64f95","name":"remotedesktop",
"kind":"cm:access:working-config:apm:profile:remote-desktop:remotedesktopstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/remote-desktop/d0bc6019-1eb3-36ea-b400-0effe8e64f95
},
"partition":"Common",
"name":"remotedesktop",
"id":"594e033d-49df-3baf-bb70-d15537eb4f91",
"generation":1,
"lastUpdateMicros":1520373991587180,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/594e033d-49df-3baf-bb70-d15537eb4f91
}
Assigning Ping Access Profile¶
To assign profile to PingAccess profile using Rest APIs is displayed below as follows:
Assign Ping Access:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
“pingAccessProfileReference” : {
“link” : "https://localhost/mgmt/cm/access/working-config/apm/profile/ping-access/218a20bb-d8c6-3e6f-8fbf-fad259c46d88"
}
Response:
{
"pingAccessProfileReference":{
"id":"218a20bb-d8c6-3e6f-8fbf-fad259c46d88",
"name":"pingaccess",
"kind":"cm:access:working-config:apm:profile:ping-access:pingaccessstate",
"partition":"Common",
"link":https://localhost/mgmt/cm/access/working-config/apm/profile/ping-access/218a20bb-d8c6-3e6f-8fbf-fad259c46d88
},
"partition":"Common",
"name":"pingaccess",
"id":"37847ba3-b74c-3f1f-af6a-f898ca89cf0f",
"generation":1,
"lastUpdateMicros":1520374372673909,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink":https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/37847ba3-b74c-3f1f-af6a-f898ca89cf0f
}
Assigning Rewrite Profile¶
To assign a profile to a rewrite profile using Rest APIs is displayed below as follows:
Assign rewrite profile:
POST: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles
{
“rewriteProfilePath”: "/Common/rewrite"
}
{
"rewriteProfilePath":"/Common/rewrite",
"partition":"Common",
"name":"rewrite",
"id":"6ee28f8d-7fc8-39d8-bca5-db1a8bf363fb",
"generation":1,
"lastUpdateMicros":1520375074957091,
"kind":"cm:access:working-config:ltm:virtual:profiles:virtualprofilestate",
"selfLink": https://localhost/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/6ee28f8d-7fc8-39d8-bca5-db1a8bf363fb
}
Assigning PerFlowRequest access policy¶
To assign perFlowRequest access policy, set attributes perFlowRequestAccessPolicy and perFlowRequestAccessPolicyReference as follows
{
"perFlowRequestAccessPolicy":"/Common/perRequest_sri",
"perFlowRequestAccessPolicyReference:{
"link":https://localhost/mgmt/cm/access/working-config/apm/policy/access- policy/916076bd-2a2f-37d6-9c07-1fd1790458b4
}
}
Remove any above assigned profile¶
To remove, if more than one profile or plugins are associated, delete in the reverse order of the creation, otherwise delete the profile. Deletion of a profile with a plugin in the access profile using REST APIs is described below as follows:
DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/28789363-3f1c-36c0-b2f2-2a2b77864056
DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/44625ecf-aa4f-3ac8-9158-9f40c8b2b313
DELETE: https://198.51.123.178/mgmt/cm/access/working-config/ltm/virtual/5e9d6138-88b7-360e-8d96-c3b3051319a2/profiles/28d6c13e-dcef-3b3f-a437-9299fe2528f5