For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Mar 15, 2012

Wildcard VS Priority Processing

Hi. I am trying to diagnose why an SSH connection is getting terminated after the default idle timeout in the fastL4 profile (300s). The connection from the client is received on the "external" VLAN. ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 16, 2012
Hi SMP,

 

 

Are your SSH connections matching the port 22 VS? If you run tcpdump what listener do you see?

 

 

tcpdump -ni 0.0 -s0 host 10.1.0.15

 

06:09:16.132461 IP 192.168.1.212.62491 > 10.1.0.15.http: S 200875914:200875914(0) win 65535 in slot1/tmm0 lis=

 

06:09:16.132522 IP 10.1.0.15.http > 192.168.1.212.62491: S 2293745962:2293745962(0) ack 200875915 win 4380 out slot1/tmm0 lis=http_10.1.0.15_v

 

 

Do you have a SNAT that the SSH connections could be matching?

 

 

Aaron