How one can see relation between virtual server and lease pool in the cli configuration while configuring APM for the ssl vpn ?

Hello Sanjay,

It is generally best to make configuration changes in the GUI instead of the CLI when it comes to APM. In my experience running APM configuration straight from the CLI usually results in one mistake or another, as settings are forgotten or misconfigured.

That being said, it is pretty simple to view your APM configuration using 'list.' Here are some basic commands to figure out how your leasepools, VPNs, and servers are related, and to prove how they have been configured. Run:

tmsh list apm resource leasepool

to view information about all your leasepools, and

tmsh list apm resource network-access

to view configuration information about your VPNs.

This should give you some very basic information about their configuration, all of which can also be viewed from the GUI. Since leasepools and VPNs are assigned to an Access Policy/Profile, which is then attached to a virtual server, viewing the server and your policy individually would likely be the best way to show a relationship between the two.

To view information about your virtual server, use

tmsh list ltm virtual 

In the output for that command, there will be a profiles section. You will see your Access Profile listed there. And to view your specific Access Policy and Access Profile, use:

tmsh list apm policy access-policy 

and

tmsh list apm profile access 

With all of these together, you can prove that your VPN and lease pool have been assigned to your Access Profile, and that your Access Profile has been assigned to your virtual server.

I hope this helps you figure out the relationship between your VPN and your Virtual Server. Feel free to ask if you have any follow-up questions,

Austin