Forum Discussion

Raj_57800's avatar
Raj_57800
Icon for Nimbostratus rankNimbostratus
Jan 21, 2010

SNAT Table

I created a SNAT rule and accidently provided the wrong transalation IP address.   I corrected the same and found all my new connections take the new IP address. But the old connection still take...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 21, 2010
In later versions there are more options for filtering which connections to match with 'b conn'. In 9.3.1, the most specific option I can think of would be to delete all the connections associated with the VIP:

 

 

b conn virtual 10.1.1.1:80 delete

 

 

I'm not sure if there is a simple way to get just the connections that were using the wrong SNAT address. I suppose you could get a list of all connections using 'b conn protocol tcp show all' and then parse that for client IP:port and remove those individually with a shell script. Anyone else have ideas?

 

 

Aaron