Forum Discussion

ToonVA's avatar
ToonVA
Icon for Cirrus rankCirrus
Dec 07, 2018

tmsh command to list client-ssl profiles - Full noted values

I am working on a project to remove TLS1.0 from our F5 BIG-IP systems. The company want first a good overview where TLS1.0 is still used (which VIP's) so i exported those with tmsh command but if the...
BIG-IP
security
TMSH
wlopez's avatar
wlopez
Icon for Cirrocumulus rankCirrocumulus
Dec 07, 2018

If you switch to the tmsh command line (just type 'tmsh' from bash) you can do the following commands:

For all client ssl profiles on the default partition (/Common):

show ltm profile client-ssl raw | grep 'Ltm::ClientSSL\|Protocol'

For all client ssl profiles on all the other partitions:

show ltm profile client-ssl /*/* raw | grep 'Ltm::ClientSSL\|Protocol'
AceDawg1's avatar
AceDawg1
Icon for Nimbostratus rankNimbostratus
Dec 12, 2018

If you have access to the BASH shell, simply run the command from there:

tmsh show ltm profile client-ssl raw | grep ‘LTM::ClientSSLProtocol’ > fileName