Forum Discussion

Julio_Navarro's avatar
Julio_Navarro
Icon for Cirrostratus rankCirrostratus
Jan 22, 2020

show "rule" source/destination port

Hello,

I am trying to find the command that will display the different "rules" based on the VIPs.

For example:

source: 192.168.0.0 destination: 10.10.10.2 port 25

source: 0.0.0.0 destination: 10.10.10.2 port 22

etc, etc

 

(this i believe was a bigpipe command)

 

Thank you

 

application delivery
LTM
  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for MVP rankMVP
    Jan 22, 2020

    Hello Julio.

    I don't know if I understand you correctly, but I think you are looking for a command to get connections table entries base on one specific VIP.

    The command is this (only valid for release 11.0 and higher):

    tmsh show sys connection cs-server-addr <VIP>

    You can find more info here:

    REF - https://support.f5.com/csp/article/K53851362

    KR,

    Dario.

    • Julio_Navarro's avatar
      Julio_Navarro
      Icon for Cirrostratus rankCirrostratus
      Jan 22, 2020

      Thank Dario!

      The table I am looking for is not the one of active connection but more on how the LTM will accept the connections.

      With no VIPs defined, the LTM will not let traffic pass through.

       

      In the example above, if 172.16.0.1 hits 10.10.10.2, it will NEVER go to the first rule (which is port 25) and it will hit the second rule (which is port 22)

       

      I know I have seen (long time ago). I might have confused it with an explanation on how the LTM process the requests.

      But I am sure I have seen it :-)