Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Nov 05, 2009

deleting current active connections on a BigIP

Hi All,

 

 

I am trying to find a way to kill (terminate) a user's connection based on an IP address. I used the following command

 

 

config b conn client 10.27.9.113 show

 

10.27.9.113:2867 <-> 10.29.225.6:https <-> 10.22.132.41:http tcp 1/0

 

 

config b conn client 10.27.9.113 delete

 

 

But it is not terminating the connection. How can I terminate a user based on the source IP?

 

 

Meena

17 Replies

  • i did delete only the ssh connection with the command:

     

     

    b conn client 10.10.4.30 server 10.10.4.31:22 delete

     

     

    but one question with the VE 10.1 trial

     

     

    i open a conection with the vs 10.10.4.100 port 443 and with source persist

     

     

    the persist work 100%, but in the cli with the command b conn client 10.10.4.30 or b conn server 10.10.4.100 some time i see the conenction and sometimes not

     

     

    is there one limitation of trial ?

     

     

    thanks
  • the persist work 100%, but in the cli with the command b conn client 10.10.4.30 or b conn server 10.10.4.100 some time i see the conenction and sometimes not

     

     

    is there one limitation of trial ? i think connection is already closed before you run b conn. i do not think it is the limitation.
  • I ruin the command: b conn client 10.10.4.30

     

     

    just this, just to only show de connections about the client. I dont run the b conn to remove than

     

     

    example

     

     

    i from machine 10.10.4.30 access the VS https://10.10.4.100 , with source persist.

     

     

    Works fine

     

     

    In cli i use: b conn client 10.10.4.30

     

     

    sometime appers the https conections, but sometimes not.

     

     

    there is a persistence with many seconds,, it still apers on bconn ? i think yes.

     

     

    Or not ?
  • connection table and persistence table are maintained separately. connection table entry will be deleted when connection is closed.

    e.g.

    /var/log/ltm
    Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:52:23 local/tmm info tmm[5111]: Rule myrule :
    
    [root@ve10:Active] config  b conn client 172.28.19.251
    172.28.19.251:32887 <-> 172.28.19.79:443 <-> 200.200.200.101:80   6 1/0
    
    /var/log/ltm
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    Jul 11 21:53:16 local/tmm info tmm[5111]: Rule myrule :
    
    [root@ve10:Active] config  b conn client 172.28.19.251
    No Conns were found.
    
  • exactly, I was confusing active connections with persistence.

     

     

    Thank you for the information.

     

     

    Att
  • Hi everyone,

     

    To kill the connection from a particular IP currently this feature is only avaliable via command line not in the GUI m i correct???