I cannot remove the specific connections - v10.2.0

Despite ongoing attempts, the connection is not remove.what command did you use?

Hi Nitass

 

I use the following commands;

 

delete sys connection cs-client-addr 121.254.254.56

 

 

and cheked as follow;

 

sh sys connection cs-client-addr 121.254.254.56 cs-server-addr 211.233.254.24

 

 

I did 10 times quickly but connection is not removed.

 

 

thank you

 

Cha

 

 

I did 10 times quickly but connection is not removed.it is exactly same connection before deleting (i.e. client port is identical), isn't it? i do not have 10.2.0 but it seems working fine in my unit running 10.2.4.

e.g.

root@ve10(Active)(tmos) show sys connection cs-client-addr 172.28.20.17
Sys::Connections
172.28.20.17:39549  172.28.19.252:23  200.200.200.101:23  tcp  0
Total records returned: 1

root@ve10(Active)(tmos) delete sys connection cs-client-addr 172.28.20.17

root@ve10(Active)(tmos) show sys connection cs-client-addr 172.28.20.17
Sys::Connections
Total records returned: 0

I use tmsh to remove connections quite frequently. The display syntax is this (to actually delete, use "delete" instead of "show"):

 

tmsh show /sys connection

 

Without any optional filters, this command will display every connection in the connection table. Use the following filters to isolate the connection(s) you want to delete (there are a couple of additional obscure ones I didn't include):

 

cs-client-addr: Specifies the clientside remote address of the active connections

 

cs-client-port: Specifies the clientside remote port of the active connections

 

cs-server-addr: Specifies the clientside local address of the active connections

 

cs-server-port: Specifies the clientside local port of the active connections

 

ss-server-addr: Specifies the serverside remote address of the active connections

 

ss-server-port: Specifies the serverside remote port of the active connections

 

 

For example, say I had a client with address 10.10.10.200 connecting to a HTTPS VIP with address 172.16.0.100, which is being load-balanced to Pool Member 192.168.3.50:80. To isolate that specific connection, the command would be:

 

 

tmsh show /sys connection cs-client-addr 10.10.10.200 cs-server-addr 172.16.0.100 cs-server-port 443 ss-server-addr 192.168.3.50 ss-server-port 80

 

 

To delete, change "show" to "delete". If you have trouble understanding these filters, let me know and I'll clarify a bit.