FTP via F5

[Michael_Feliciano]

Is there any way to determine whether there is any (live) FTP traffic passing through an F5 load balancer?

[KeesvandenBos]

Hi Michael,

You could check the connection table on the cli:

tmsh show sys connection

Cheers,

Kees

[Michael_Feliciano]

Hi Kees,

Thanks for your feedback.

Some questions:

1. After the connection table (from executing tmsh show sys connection) has been displayed, should I press Ctrl-C, in order to return to the command prompt?

2. The output, shown below, indicates that there is zero live FTP traffic, right?

user01@(LB01)(cfg-sync In Sync)(Active)(/Common)(tmos)# show sys connection cs-client-port 21

Sys::Connections

Total records returned: 0

Regards,

Michael Feliciano

[Michael_Feliciano]

Hi Kees,

3. Is there a quick way to determine whether any existing virtual server(s) in an F5 load balancer is configured to use an FTP profile?

(related article: https://support.f5.com/csp/article/K20984059)

Regards,

Michael Feliciano

[Daniel_Wolf]

Hi Michael,

this will first search for all FTP profiles (including default FTP profile) , then search all VS that have attached any of the FTP profiles and then list the name of the VS which has an FTP profile attached.

Run in bash:

for FTPprofile in $(tmsh list ltm profile ftp one-line | awk '{ print $4 }'); do tmsh list ltm virtual one-line | grep -E $FTPprofile | awk '{ print $3 }'  ; done

KR

Daniel

[Michael_Feliciano]

Hi Daniei,

Thanks for your feedback.

The output below indicates that there are 2 existing virtual servers that have FTP profile(s) attached, right?

[root@LB01:Active:In Sync] config # for FTPprofile in $(tmsh list ltm profile ftp one-line | awk '{ print $4 }'); do tmsh list ltm virtual one-line | grep -E $FTPprofile | awk '{ print $3 }' ; done

RD613FTP_VIP

RD614FTP_VIP

Regards,

Michael Feliciano

[Daniel_Wolf]

Hi Michael,

yes, those should be all the VS with a FTP profile.

KR

Daniel