Forum Discussion

Pihu_294516's avatar
Pihu_294516
Icon for Altostratus rankAltostratus
May 31, 2018

Looking for a CLI command for a specific VIP configuration

Hello All,   I have been looking for a CLI command which shows the configuration for a single VIP rather than all VIPs, also can we get every details of all the parameters configured for that part...
application delivery
LTM
TMSH
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
May 31, 2018

I have been looking for a CLI command which shows the configuration for a single VIP rather than all VIPs, also can we get every details of all the parameters configured for that particular VIP. 

    tmsh list ltm virtual  all-properties

Additionally, I am told to look for the ssl handshake failure that is caused due to /Common/serverssl and /PARTITION_NAME/VIP_NAME/VIP_NAME_server-ssl.

    tmsh show ltm profile client-ssl  raw  --> client-ssl
    tmsh show ltm profile server-ssl  raw  --> Server-ssl

These command will give more inside of ssl-handsake Accepted/Rejected session.

Hope it makes sense.

  • Anju's avatar
    Anju
    Icon for Altostratus rankAltostratus
    Jun 01, 2018

    Thank you for your reply f5_rock. I did try the commands mentioned above but, it is not working for me, especially when I have to look for ADFS which is created through iApp.

     

    And the command for ssl is not working for any of the profiles we have. I tried most of it. It says - 'The requested Server SSL was not found. Can we look for the list of available profiles we have on F5? then select from there?

     

    The command that is working for me is - list ltm profile client-ssl which depicts all the client-ssl profiles but not the handshake failures which I am looking for.

     

    Thanks!

     

  • Microgag_61404's avatar
    Microgag_61404
    Icon for Nimbostratus rankNimbostratus
    Jun 04, 2018

    Hi Pihu,

     

    I guessing you trying to query the profile on different parition and its created by iapp?

     

    The command below only show Common partition

     

    tmsh show ltm profile client-ssl

    Try instead:

     

    tmsh show ltm profile client-ssl /// raw
  • Anju's avatar
    Anju
    Icon for Altostratus rankAltostratus
    Jun 04, 2018

    Thank you for the reply Microgag. For few its working. For others its not. And regarding iApp created profile, we only have ADFS created through iAPP. It is not working for the same, so that should not be the case. It should work for other profiles too. I am still struggling to get the right commands to check for the ssl handshake failures for the profiles we have. Any input will greatly help.

     

    Thanks in advance.

     

  • Anju's avatar
    Anju
    Icon for Altostratus rankAltostratus
    Jun 04, 2018

    Also, forgot to mention,for one of the profile, it gives me the output as mentioned below (part of the output mentioned here) for the command in use - show ltm profile client-ssl /abc partition/xyz profile

     

    Failures Premature Disconnects 0 Handshake Failures 147 Renegotiations Rejected 0 Aggregate Renegotiations Rejected 0 Fatal Alerts 26 Active Handshakes Rejected 0

     

    how to address these handshake failures and Fatal alerts?