Forum Discussion

Pihu_294516's avatar
Pihu_294516
Icon for Altostratus rankAltostratus
May 31, 2018

Looking for a CLI command for a specific VIP configuration

Hello All,

 

I have been looking for a CLI command which shows the configuration for a single VIP rather than all VIPs, also can we get every details of all the parameters configured for that particular VIP.

 

Additionally, I am told to look for the ssl handshake failure that is caused due to /Common/serverssl and /PARTITION_NAME/VIP_NAME/VIP_NAME_server-ssl. Can anyone help me with those commands?

 

  • I have been looking for a CLI command which shows the configuration for a single VIP rather than all VIPs, also can we get every details of all the parameters configured for that particular VIP.

        tmsh list ltm virtual  all-properties
    

    Additionally, I am told to look for the ssl handshake failure that is caused due to /Common/serverssl and /PARTITION_NAME/VIP_NAME/VIP_NAME_server-ssl.

        tmsh show ltm profile client-ssl  raw  --> client-ssl
        tmsh show ltm profile server-ssl  raw  --> Server-ssl
    

    These command will give more inside of ssl-handsake Accepted/Rejected session.

    Hope it makes sense.

    • Anju's avatar
      Anju
      Icon for Altostratus rankAltostratus

      Thank you for your reply f5_rock. I did try the commands mentioned above but, it is not working for me, especially when I have to look for ADFS which is created through iApp.

       

      And the command for ssl is not working for any of the profiles we have. I tried most of it. It says - 'The requested Server SSL was not found. Can we look for the list of available profiles we have on F5? then select from there?

       

      The command that is working for me is - list ltm profile client-ssl which depicts all the client-ssl profiles but not the handshake failures which I am looking for.

       

      Thanks!

       

    • Microgag_61404's avatar
      Microgag_61404
      Icon for Nimbostratus rankNimbostratus

      Hi Pihu,

       

      I guessing you trying to query the profile on different parition and its created by iapp?

       

      The command below only show Common partition

       

      tmsh show ltm profile client-ssl

      Try instead:

       

      tmsh show ltm profile client-ssl /// raw
    • Anju's avatar
      Anju
      Icon for Altostratus rankAltostratus

      Thank you for the reply Microgag. For few its working. For others its not. And regarding iApp created profile, we only have ADFS created through iAPP. It is not working for the same, so that should not be the case. It should work for other profiles too. I am still struggling to get the right commands to check for the ssl handshake failures for the profiles we have. Any input will greatly help.

       

      Thanks in advance.