For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DevBabu_174449's avatar
Feb 02, 2015
Solved

Can I use rdsh from tmos

I am trying to use rdsh for route domains. But when I enter rdsh ID it sends me to tmos shell. When I try telnet to IP and port I receive message Connection refused. But when I try with rdexec from bash it works fine.

 

[bash-linux@f5:Standby:In Sync] ~ rdexec 20 telnet 10.10.10.5 879 Trying 10.10.10.5... Connected to 10.10.10.5. Escape character is '^]'. Connection closed by foreign host.

 

[bash-linux@f5:Standby:In Sync] ~ rdsh 20

 

Sends me to tmos.

 

bash-linux@f5:Standby:In Sync(cfg-sync In Sync)(Standby)(/Common)(tmos) run util telnet 10.10.10.5 879

 

Trying 10.10.10.5... telnet: connect to address 10.10.10.5: Connection refused

 

  • Update:

    I found that this works:

    Leo@(bigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) bash    
    [Leo@bigIP:Active:In Sync] ~  rdexec 2 bash    
    [Leo@bigIP:Active:In Sync:%2] ~ 
    

    In other words, instead of calling "rdsh [id]", use "rdexec [id] bash".

8 Replies

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus

    You are in the "/Common" partition after "rdsh 20". Is this the right partition to use to connect to 10.10.10.5?

     

  • when i do rdsh from the normal shell i just stay in that shell. you have first exited from tmsh via a run or such?

     

    can't you exit tmsh again? which version of TMOS are you running?

     

  • Same here.

    Leo@(bigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) bash
    [Leo@bigIP:Active:In Sync] ~  rdsh 1
    Leo@(bigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) bash
    [Leo@bigIP:Active:In Sync:%0] ~ 
    

    Notice the prompt says we are at the default route domain (%0) instead of the intended (%1). (I modified bashrc file to add the route domain to the prompt)

    When logging with root, I end up directly in the Bash shell, and rdsh works normally.

    Since I am using Radius to login, and with Radius I cannot configure the remote accounts to log in directly in Bash, I am afraid that rdsh is not available to me 😞

    I am right? Using 11.4.1

    • eneR's avatar
      eneR
      Icon for Cirrostratus rankCirrostratus
      What have you added to the .bashrc file to display the route domain?
    • Leo_Rodrigues_1's avatar
      Leo_Rodrigues_1
      Icon for Altocumulus rankAltocumulus
      Actually it was on /etc/bashrc: https://devcentral.f5.com/s/feed/0D51T00006i7QIhSAM Cheers.
  • Update:

    I found that this works:

    Leo@(bigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) bash    
    [Leo@bigIP:Active:In Sync] ~  rdexec 2 bash    
    [Leo@bigIP:Active:In Sync:%2] ~ 
    

    In other words, instead of calling "rdsh [id]", use "rdexec [id] bash".