cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

show "rule" source/destination port

Julio_Navarro
Cirrostratus
Cirrostratus

Hello,

I am trying to find the command that will display the different "rules" based on the VIPs.

For example:

source: 192.168.0.0 destination: 10.10.10.2 port 25

source: 0.0.0.0 destination: 10.10.10.2 port 22

etc, etc

 

(this i believe was a bigpipe command)

 

Thank you

 

1 ACCEPTED SOLUTION

Do you mean the VS precedence?

REF - https://support.f5.com/csp/article/K14800

 

KR,

Dario.

Regards,
Dario.

View solution in original post

6 REPLIES 6

Hello Julio.

 

I don't know if I understand you correctly, but I think you are looking for a command to get connections table entries base on one specific VIP.

 

The command is this (only valid for release 11.0 and higher):

tmsh show sys connection cs-server-addr <VIP>

You can find more info here:

REF - https://support.f5.com/csp/article/K53851362

 

KR,

Dario.

 

 

Regards,
Dario.

Thank Dario!

The table I am looking for is not the one of active connection but more on how the LTM will accept the connections.

With no VIPs defined, the LTM will not let traffic pass through.

 

In the example above, if 172.16.0.1 hits 10.10.10.2, it will NEVER go to the first rule (which is port 25) and it will hit the second rule (which is port 22)

 

I know I have seen (long time ago). I might have confused it with an explanation on how the LTM process the requests.

But I am sure I have seen it 🙂

Do you mean the VS precedence?

REF - https://support.f5.com/csp/article/K14800

 

KR,

Dario.

Regards,
Dario.

Yes!!! I was not crazy after all.

(or maybe I am crazy asking...... is there a command to pull this out?)

No commands. That's the built-in behaviour 🙂

Regards,
Dario.

😞 I think I was sleeping when I saw it - maybe at a training as a presentation 🙂

ok, thank Dario 🙂