Forum Discussion
meena_60183
Nimbostratus
Nov 05, 2009deleting current active connections on a BigIP
Hi All,
I am trying to find a way to kill (terminate) a user's connection based on an IP address. I used the following command
config b conn client 10.27.9.113 show
10.27.9.113:2867 <-> 10.29.225.6:https <-> 10.22.132.41:http tcp 1/0
config b conn client 10.27.9.113 delete
But it is not terminating the connection. How can I terminate a user based on the source IP?
Meena
17 Replies
- Kleython_Kell_5
Nimbostratus
i did delete only the ssh connection with the command:
b conn client 10.10.4.30 server 10.10.4.31:22 delete
but one question with the VE 10.1 trial
i open a conection with the vs 10.10.4.100 port 443 and with source persist
the persist work 100%, but in the cli with the command b conn client 10.10.4.30 or b conn server 10.10.4.100 some time i see the conenction and sometimes not
is there one limitation of trial ?
thanks - nitass
Employee
the persist work 100%, but in the cli with the command b conn client 10.10.4.30 or b conn server 10.10.4.100 some time i see the conenction and sometimes not
is there one limitation of trial ? i think connection is already closed before you run b conn. i do not think it is the limitation. - Kleython_Kell_5
Nimbostratus
I ruin the command: b conn client 10.10.4.30
just this, just to only show de connections about the client. I dont run the b conn to remove than
example
i from machine 10.10.4.30 access the VS https://10.10.4.100 , with source persist.
Works fine
In cli i use: b conn client 10.10.4.30
sometime appers the https conections, but sometimes not.
there is a persistence with many seconds,, it still apers on bconn ? i think yes.
Or not ? - nitass
Employee
connection table and persistence table are maintained separately. connection table entry will be deleted when connection is closed.
e.g./var/log/ltm Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule : [root@ve10:Active] config b conn client 172.28.19.251 172.28.19.251:32887 <-> 172.28.19.79:443 <-> 200.200.200.101:80 6 1/0 /var/log/ltm Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule : [root@ve10:Active] config b conn client 172.28.19.251 No Conns were found. - Kleython_Kell_5
Nimbostratus
exactly, I was confusing active connections with persistence.
Thank you for the information.
Att - Techgeeeg
Nimbostratus
Hi everyone,
To kill the connection from a particular IP currently this feature is only avaliable via command line not in the GUI m i correct??? - hoolio
Cirrostratus
That's correct Techgeeeg.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
