Forum Discussion
4 Replies
- nitassEmployeeDespite ongoing attempts, the connection is not remove.what command did you use?
- Mia_27938Nimbostratus
Hi Nitass
I use the following commands;
delete sys connection cs-client-addr 121.254.254.56
and cheked as follow;
sh sys connection cs-client-addr 121.254.254.56 cs-server-addr 211.233.254.24
I did 10 times quickly but connection is not removed.
thank you
Cha
- nitassEmployeeI did 10 times quickly but connection is not removed.it is exactly same connection before deleting (i.e. client port is identical), isn't it? i do not have 10.2.0 but it seems working fine in my unit running 10.2.4.
root@ve10(Active)(tmos) show sys connection cs-client-addr 172.28.20.17 Sys::Connections 172.28.20.17:39549 172.28.19.252:23 200.200.200.101:23 tcp 0 Total records returned: 1 root@ve10(Active)(tmos) delete sys connection cs-client-addr 172.28.20.17 root@ve10(Active)(tmos) show sys connection cs-client-addr 172.28.20.17 Sys::Connections Total records returned: 0
- smp_86112Cirrostratus
I use tmsh to remove connections quite frequently. The display syntax is this (to actually delete, use "delete" instead of "show"):
tmsh show /sys connection
Without any optional filters, this command will display every connection in the connection table. Use the following filters to isolate the connection(s) you want to delete (there are a couple of additional obscure ones I didn't include):
cs-client-addr: Specifies the clientside remote address of the active connections
cs-client-port: Specifies the clientside remote port of the active connections
cs-server-addr: Specifies the clientside local address of the active connections
cs-server-port: Specifies the clientside local port of the active connections
ss-server-addr: Specifies the serverside remote address of the active connections
ss-server-port: Specifies the serverside remote port of the active connections
For example, say I had a client with address 10.10.10.200 connecting to a HTTPS VIP with address 172.16.0.100, which is being load-balanced to Pool Member 192.168.3.50:80. To isolate that specific connection, the command would be:
tmsh show /sys connection cs-client-addr 10.10.10.200 cs-server-addr 172.16.0.100 cs-server-port 443 ss-server-addr 192.168.3.50 ss-server-port 80
To delete, change "show" to "delete". If you have trouble understanding these filters, let me know and I'll clarify a bit.