Table Of Contents
show ip slb conns
show ip slb dfp
show ip slb firewallfarm
show ip slb fragments
show ip slb gtp
show ip slb map
show ip slb natpool
show ip slb probe
show ip slb reals
show ip slb replicate
show ip slb serverfarms
show ip slb sessions
show ip slb static
show ip slb stats
show ip slb sticky
show ip slb vservers
show ip slb wildcard
show ip slb conns
To display the active IOS Server Load Balancing (IOS SLB) connections (or sessions, in GPRS load balancing and the Home Agent Director), use the show ip slb conns command in privileged EXEC mode.
show ip slb conns [vserver virtual-server | client ip-address | firewall firewall-farm] [detail]
Syntax Description
vserver virtual-server |
(Optional) Displays only those connections (or sessions, in GPRS load balancing and the Home Agent Director) associated with the specified virtual server. |
client ip-address |
(Optional) Displays only those connections (or sessions, in GPRS load balancing and the Home Agent Director) associated with the specified client IP address. |
firewall firewall-farm |
(Optional) Displays only those connections (or sessions, in GPRS load balancing and the Home Agent Director) associated with the specified firewall farm. |
detail |
(Optional) Displays detailed information about the connection (or session, in GPRS load balancing and the Home Agent Director). |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.1(7)E |
The firewall keyword and firewall-farm argument were added. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Usage Guidelines
If no options are specified, the command displays output for all active IOS SLB connections (or sessions, in GPRS load balancing and the Home Agent Director).
Examples
The following is sample output from the show ip slb conns command:
Router# show ip slb conns
vserver prot client real state
----------------------------------------------------------------------------
TEST TCP 10.150.72.183:328 10.80.90.25:80 INIT
TEST TCP 10.250.167.226:423 10.80.90.26:80 INIT
TEST TCP 10.234.60.239:317 10.80.90.26:80 ESTAB
TEST TCP 10.110.233.96:747 10.80.90.26:80 ESTAB
TEST TCP 10.162.0.201:770 10.80.90.30:80 CLOSING
TEST TCP 10.22.225.219:995 10.80.90.26:80 CLOSING
TEST TCP 10.2.170.148:169 10.80.90.30:80 ZOMBIE
Table 19 describes the fields shown in the display.
Table 19 show ip slb conns Field Descriptions
Field
|
Description
|
vserver |
Name of the virtual server associated with the connection (or session, in GPRS load balancing and the Home Agent Director). |
prot |
Protocol being used by the connection (or session, in GPRS load balancing and the Home Agent Director). |
client |
Client IP address associated with the connection (or session, in GPRS load balancing and the Home Agent Director). |
real |
Real server IP address associated with the connection (or session, in GPRS load balancing and the Home Agent Director). |
state |
Current state of the connection (or session, in GPRS load balancing and the Home Agent Director). •CLOSING—The connection is closing. •ESTAB—The connection has been established and is operational. •INIT—The connection is being initialized. •ZOMBIE—The connection is currently pending destruction (awaiting a timeout or some other condition to be met). |
show ip slb dfp
To display Dynamic Feedback Protocol (DFP) manager and agent information, such as passwords, timeouts, retry counts, and weights, use the show ip slb dfp command in privileged EXEC mode.
show ip slb dfp [agent agent-ip port | manager manager-ip | detail | weights]
Syntax Description
agent |
(Optional) Displays information about an agent. |
agent-ip |
(Optional) Agent IP address. |
port |
(Optional) Agent TCP or User Datagram Protocol (UDP) port number. |
manager |
(Optional) Displays information about the specified manager. |
manager-ip |
(Optional) Manager IP address. |
detail |
(Optional) Displays all data available. |
weights |
(Optional) Displays information about weights assigned to real servers for load balancing. |
Defaults
If no options are specified, the command displays summary information.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.1(5a)E |
The manager keyword and manager-ip argument were added. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Usage Guidelines
If no options are specified, the command displays summary information.
Examples
The following sample output from the show ip slb dfp command displays high-level information about all DFP agents and managers:
Current passwd:NONE Pending passwd:NONE
Agent IP Port Timeout Retry Count Interval
---------------------------------------------------------------
172.16.2.34 61936 0 0 180 (Default)
Table 20 describes the fields shown in the display.
Table 20 show ip slb dfp Field Descriptions
Field
|
Description
|
DFP Manager |
Indicates that the following information applies to the DFP manager. |
Current passwd |
Current password for the DFP manager, if any. |
Pending passwd |
Pending password for the DFP manager, if any. |
Passwd timeout |
For the DFP manager, delay period, in seconds, during which both the current password and the pending password are accepted. |
Agent IP |
IP address of the agent about which information is being displayed. |
Port |
TCP or UDP port number of the agent. The valid range is 1 to 65535. |
Timeout |
Time period, in seconds, during which the DFP manager must receive an update from the DFP agent. A value of 0 means there is no timeout. |
Retry Count |
Number of times the DFP manager attempts to establish the TCP connection to the DFP agent. A value of 0 means there are infinite retries. |
Interval |
Interval, in seconds, between retries. |
The following example displays detailed information about DFP agents and managers:
Router# show ip slb dfp detail
Current passwd <none> Pending passwd <none>
% No DFP Agents configured
Table 21 describes the fields shown in the display.
Table 21 show ip slb dfp detail Field Descriptions
Field
|
Description
|
DFP Manager |
Indicates that the following information applies to the DFP manager. |
Current passwd |
Current DFP password for MD5 authentication. |
Pending passwd |
Pending new DFP password for MD5 authentication. |
Passwd timeout |
Delay period, in seconds, during which both the current password and the pending password are accepted. |
Unexpected errors |
Number of unexpected errors encountered by the DFP manager. |
No DFP Agents configured |
Indicates that there are no DFP agents associated with the DFP manager. |
The following example displays detailed information about DFP manager 10.0.0.0:
Router# show ip slb dfp manager 10.0.0.0
DFP Manager 10.0.0.0 Connection state Connected
Last message sent 033537 UTC 01/02/00
Table 22 describes the fields shown in the display.
Table 22 show ip slb dfp manager Field Descriptions
Field
|
Description
|
DFP Manager |
Indicates that the following information applies to the DFP manager. |
Connection state |
Current connection state of the DFP manager. |
Timeout |
Time period, in seconds, during which the DFP manager must receive an update from the DFP agent. A value of 0 means there is no timeout. |
Last message sent |
Date and time of the last message sent by the DFP manager. |
The following example displays detailed information about weights assigned to real servers for load balancing:
Router# show ip slb dfp weights
Real IP Address 10.0.10.10 Protocol TCP Port 22 Bind_ID 111 Weight 111
Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.17.17.17 Protocol TCP Port www Bind_ID 1 Weight 1
Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.68.68.68 Protocol TCP Port www Bind_ID 4 Weight 4
Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.85.85.85 Protocol TCP Port www Bind_ID 5 Weight 5
Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Table 23 describes the fields shown in the display.
Table 23 show ip slb dfp weights Field Descriptions
Field
|
Description
|
Real IP Address |
IP address of the real server for which weight is reported. |
Protocol |
Protocol used for the port. |
Port |
Port for which the following bind ID is being reported. |
Bind_ID |
Bind ID of this instance of the real server. |
Weight |
Weight calculated for the real IP address. |
Set by Agent |
Agent that set the weight, and the date and time the weight was set. |
show ip slb firewallfarm
To display firewall farm information, use the show ip slb firewallfarm command in privileged EXEC mode.
show ip slb firewallfarm [detail]
Syntax Description
detail |
(Optional) Displays detailed information. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(3a)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the show ip slb firewallfarm command:
Router# show ip slb firewallfarm
firewall farm hash state reals
------------------------------------------------
FIRE1 IPADDR OPERATIONAL 2
Table 24 describes the fields shown in the display.
Table 24 show ip slb firewallfarm Field Descriptions
Field
|
Description
|
firewall farm |
Name of the firewall farm. |
hash |
Load-balancing algorithm used to select a firewall for the firewall farm: •IPADDR—Uses the source and destination IP addresses in the algorithm. •IPADDRPORT—Uses the source and destination TCP or User Datagram Protocol (UDP) port numbers, in addition to the source and destination IP addresses, in the algorithm. See the predictor hash address (firewall farm) command for more details. |
state |
Current state of the firewall farm: •OPERATIONAL—Functioning properly. •OUTOFSERVICE—Removed from the load-balancing predictor lists. •STANDBY—Backup firewall farm, ready to become operational if the active firewall farm fails. |
reals |
Number of firewalls that are members of the firewall farm. |
show ip slb fragments
To display information from the Cisco IOS Server Load Balancing (IOS SLB) fragment database, use the show ip slb fragments command in privileged EXEC mode.
show ip slb fragments
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(11b)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following sample output from the show ip slb fragments command shows fragment information for virtual server 10.11.11.11:
Router# show ip slb fragments
ip src id forward src nat dst nat
---------------------------------------------------------------------
10.11.2.128 12 10.11.2.128 10.11.11.11 10.11.2.128
10.11.2.128 13 10.11.2.128 10.11.11.11 10.11.2.128
10.11.2.128 14 10.11.2.128 10.11.11.11 10.11.2.128
10.11.2.128 15 10.11.2.128 10.11.11.11 10.11.2.128
10.11.2.128 16 10.11.2.128 10.11.11.11 10.11.2.128
Table 25 describes the fields shown in the display.
Table 25 show ip slb fragments Field Descriptions
Field
|
Description
|
ip src |
Source IP address of the fragment. |
id |
IP ID of the fragment, set by the packet originator. |
forward |
IP address to which the fragment is being forwarded. |
src nat |
If using Network Address Translation (NAT), new source IP address after NAT. |
dst nat |
If using NAT, new destination IP address after NAT. |
show ip slb gtp
To display IOS Server Load Balancing (IOS SLB) general packet radio service (GPRS) Tunneling Protocol (GTP) information, use the show ip slb gtp command in privileged EXEC mode.
show ip slb gtp {gsn [gsn-ip-address] | nsapi [nsapi-key] [detail]}
Syntax Description
gsn |
(Optional) Displays IOS SLB database information for the specified gateway GPRS support node (GGSN) or serving GPRS support node (SGSN). |
gsn-ip-address |
(Optional) IP address of the GGSN or SGSN for which information is to be displayed. If you do not specify a gsn-ip-address, IOS SLB displays information for all GGSNs and SGSNs. |
nsapi |
(Optional) Displays IOS SLB database information for the specified Network Service Access Point Identifier (NSAPI). |
nsapi-key |
(Optional) Key of the NSAPI for which information is to be displayed. If you do not specify an nsapi-key, IOS SLB displays information for all NSAPIs. |
detail |
(Optional) Displays additional, more detailed information. |
Defaults
If you specify gsn and you do not specify a gsn-ip-address, IOS SLB displays information for all GGSNs and SGSNs.
If you specify nsapi and you do not specify an nsapi-key, IOS SLB displays information for all NSAPIs.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(13)E3 |
This command was introduced. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the show ip slb gtp gsn command for a specific GGSN or SGSN:
Router# show ip slb gtp gsn 10.0.0.0
type ip recovery-ie purging
------------------------------------------
Table 26 describes the fields shown in the display.
Table 26 show ip slb gtp gsn Field Descriptions
Field
|
Description
|
type |
Type of GSN (either GGSN or SGSN). |
ip |
IP address of the GGSN or SGSN. |
recovery-ie |
Last seen recovery IE for this GGSN or SGSN. |
purging |
Indicates whether Packet Data Protocol (PDP) contexts belonging to this GGSN or SGSN are being purged as a result of path failure: •Y (Yes)—PDP contexts are being purged. •N (No)—PDP contexts are not being purged. |
The following is sample output from the show ip slb gtp nsapi command:
Router# show ip slb gtp nsapi
nsapi key real nsapi count session count
-----------------------------------------------------------------
11111111111111F1 172.16.0.0 1 1
The following is sample output from the show ip slb gtp nsapi command for a specific NSAPI key:
Router# show ip slb gtp nsapi 11111111111111F1
nsapi key real nsapi count session count
-----------------------------------------------------------------
11111111111111F1 172.16.0.0 1 1
Table 27 describes the fields shown in the display.
Table 27 show ip slb gtp nsapi Field Descriptions
Field
|
Description
|
nsapi key |
Key for the session. This is the IMSI. |
real |
Real server to which the session is assigned. |
nsapi count |
Number of NSAPIs bound to the session. This is the number of PDP contexts (mobile sessions) on the GGSN associated with the IMSI. |
session count |
Number of sessions to which the NSAPI is currently bound. Normally, the NSAPI is bound to one session, but it is bound to two sessions in transition during an update. |
The following is sample output from the show ip slb gtp nsapi detail command:
Router# show ip slb gtp nsapi detail
IMSI key = 11111111111111F1, real = 172.16.0.1, nsapi count = 1, session count = 1
no vserver key client state seq
---------------------------------------------------------------------------
5 SERVER1 0009E8810009E881 10.0.0.0:2123 GTP_INIT 0
Table 28 describes the fields shown in the display.
Table 28 show ip slb gtp nsapi detail Field Descriptions
Field
|
Description
|
IMSI key |
IMSI key for the session. |
real |
Real server to which the session is assigned. |
nsapi count |
Number of NSAPIs bound to the session. This is the number of PDP contexts (mobile sessions) on the GGSN associated with this IMSI. |
session count |
Number of sessions to which the NSAPI is currently bound. Normally, the NSAPI is bound to one session, but it is bound to two sessions in transition during an update. |
no |
NSAPI number. |
vserver |
Name of the virtual server. |
key |
Session key. |
client |
SGSN IP address and port number. |
state |
State of the session. Possible states are: •GTP_ESTAB—The session has been established successfully. •GTP_INIT—The PDP contexts have been deleted as a result of a delete request or a deletion in GGSN, and IOS SLB is waiting to destroy the session after the GTP_TIMEOUT. •GTPIO_REQ_CLIENT—Waiting for a response from the real server. |
seq |
Sequence number in the last delete request. |
show ip slb map
To display information about IOS SLB protocol maps, use the show ip slb map command in privileged EXEC mode.
show ip slb map [id]
Syntax Description
id |
(Optional) Displays information about the specified map. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.2(33)SRB |
This command was introduced. |
Usage Guidelines
If no ID is specified, the command displays information about all maps.
Examples
The following is sample output from the show ip slb map command:
APN: Cisco.com, yahoo.com
PLMN ID(s): 11122, 444353
PLMN ID(s): 67523, 345222
Calling-station-id: "?919*"
Table 19 describes the fields shown in the display.
Table 29 show ip slb map Field Descriptions
Field
|
Description
|
ID |
Identifier of the map about which information is being displayed. Information about each map is displayed on a separate line. |
Service |
Protocol associated with the map. Valid protocols are: •GTP—For general packet radio service (GPRS) Tunneling Protocol (GTP) maps •RADIUS—For RADIUS load balancing maps |
APN |
One or more access point names (APNs) associated with the GTP map |
PLMN ID(s) |
One or more public land mobile networks (PLMNs) associated with the GTP map. |
SGSN access list |
Serving GPRS Support Node (SGSN) access list associated with the GTP map. |
PDP Type |
One or more packet data protocol (PDP) types associated with the GTP map. |
Calling-station-id |
String to be matched against the calling station ID attribute in the RADIUS payload. |
Username |
String to be matched against the username attribute in the RADIUS payload. |
show ip slb natpool
To display the IP Cisco IOS Server Load Balancing (IOS SLB) Network Address Translation (NAT) configuration, use the show ip slb natpool command in privileged EXEC mode.
show ip slb natpool [name pool] [detail]
Syntax Description
name pool |
(Optional) Displays the specified NAT pool. |
detail |
(Optional) Lists all the interval ranges currently allocated in the client NAT pool. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(2)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the default show ip slb natpool command:
Router# show ip slb natpool
nat client B 209.165.200.225 1.1.1.6 1.1.1.8 Netmask 255.255.255.0
nat client A 10.1.1.1 1.1.1.5 Netmask 255.255.255.0
The following is sample output from the show ip slb natpool command with the detail keyword:
Router# show ip slb natpool detail
nat client A 1.1.1.1 1.1.1.5 Netmask 255.255.255.0
Start NAT Last NAT Count ALLOC/FREE
-------------------------------------------------------
10.1.1.1:11001 10.1.1.1:16333 0005333 ALLOC
10.1.1.1:16334 10.1.1.1:19000 0002667 ALLOC
10.1.1.1:19001 10.1.1.5:65535 0264675 FREE
nat client B 1.1.1.6 1.1.1.8 Netmask 255.255.255.0
Start NAT Last NAT Count ALLOC/FREE
-------------------------------------------------------
10.1.1.6:11001 10.1.1.6:16333 0005333 ALLOC
10.1.1.6:16334 10.1.1.6:19000 0002667 ALLOC
10.1.1.6:19001 10.1.1.8:65535 0155605 FREE
Table 30 describes the fields shown in the display.
Table 30 show ip slb natpool detail Field Descriptions
Field
|
Description
|
Start NAT |
Starting NAT address in a range of addresses in the client NAT pool. |
Last NAT |
Last NAT address in a range of addresses in the client NAT pool. |
Count |
Number of NAT addresses in the range. |
ALLOC/FREE |
Indicates whether the range of NAT addresses has been allocated or is free. |
Related Commands
Command
|
Description
|
ip slb natpool |
Configures the IOS SLB NAT. |
show ip slb probe
To display information about a Cisco IOS Server Load Balancing (IOS SLB) probe, use the show ip slb probe command in privileged EXEC mode.
show ip slb probe [name probe] [detail]
Syntax Description
name probe |
(Optional) Displays information about the specified probe. |
detail |
(Optional) Displays detailed information, including the SA Agent operation ID, which you can correlate with the output of the show rtr operational-state command. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(2)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the show ip slb probe command:
Router# show ip slb probe
Server:Port State Outages Current Cumulative
----------------------------------------------------------------
10.10.4.1:0 OPERATIONAL 0 never 00:00:00
10.10.5.1:0 FAILED 1 00:00:06 00:00:06
Table 31 describes the fields shown in the display.
Table 31 show ip slb probe Field Descriptions
Field
|
Description
|
Server:Port |
IP address and port of the real server. |
State |
Operational state of the probe: •FAILED—The probe has succeeded in the past but has currently failed. •OPERATIONAL—The probe is functioning normally. •TESTING—The probe has never succeeded, due to no response. IOS SLB keeps no counters or timers for this state. For a detailed listing of real server states, see the show ip slb reals command. |
Outages |
Number of intervals between successful probes. |
Current |
Time since the last probe success. That is, the duration (so far) of the current outage. |
Cumulative |
Total time the real server has been under test by the probe and has failed the probe test. This value is the sum of the Current time plus the total time of all previous outages. |
show ip slb reals
To display information about the real servers, use the show ip slb reals command in privileged EXEC mode.
show ip slb reals [sfarm server-farm] [detail]
Syntax Description
sfarm server-farm |
(Optional) Displays information about those real servers associated with the specified server farm or firewall farm. |
detail |
(Optional) Displays detailed information. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.1(13)E |
The vserver keyword and virtual-server argument were replaced with the sfarm keyword and server-farm argument. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRC |
The output for the detail keyword for a real server in a server farm was updated to display the configured maximum number of connections allowed (rate). |
15.0(1)S |
The output for the detail keyword for a real server in a server farm was updated to display the real server's IPv4, IPv6, or dual-stack address. |
Usage Guidelines
If no options are specified, the command displays information about all real servers.
In a configuration with stateful backup, if a probe changes state at the same time that the primary IOS SLB device fails over to the backup IOS SLB device, the output from the show ip slb reals command for the backup device displays the state of the probe before the failover, not the actual current state.
Examples
The following is sample output from the show ip slb reals command:
Router# show ip slb reals
real farm name weight state conns
--------------------------------------------------------------------
10.80.2.112 FRAG 8 OUTOFSERVICE 0
10.80.5.232 FRAG 8 OPERATIONAL 0
10.80.15.124 FRAG 8 OUTOFSERVICE 0
10.254.2.2 FRAG 8 OUTOFSERVICE 0
10.80.15.124 LINUX 8 OPERATIONAL 0
10.80.15.125 LINUX 8 OPERATIONAL 0
10.80.15.126 LINUX 8 OPERATIONAL 0
10.80.90.25 SRE 8 OPERATIONAL 220
10.80.90.26 SRE 8 OPERATIONAL 216
10.80.90.27 SRE 8 OPERATIONAL 216
10.80.90.28 SRE 8 TESTING 1
10.80.90.29 SRE 8 OPERATIONAL 221
10.80.90.30 SRE 8 OPERATIONAL 224
10.80.30.3 TEST 100 READY_TO_TEST 0
10.80.30.4 TEST 100 READY_TO_TEST 0
10.80.30.5 TEST 100 READY_TO_TEST 0
10.80.30.6 TEST 100 READY_TO_TEST 0
Table 32 describes the fields shown in the display.
Table 32 show ip slb reals Field Descriptions
Field
|
Description
|
real |
IP address of the real server about which information is being displayed. Used to identify each real server. Information about each real server is displayed on a separate line. |
farm name |
Name of the server farm or firewall farm with which the real server is associated. |
weight |
Weight assigned to the real server. The weight identifies the real server's capacity, relative to other real servers in the server farm. |
state |
Current state of the real server. •DFP_THROTTLED—The Dynamic Feedback Protocol (DFP) agent sent a weight of 0 for this real server (send no further connections to this real server). •FAILED—The real server has failed as a result of either no response or reset (RST) responses to client traffic. (See the faildetect numconns (real server) command for more information about controlling tolerance for no responses and RSTs.) The real server has been removed from use by the predictor algorithms. The retry timer has started. •MAXCONNS_THROTTLE—The number of connections on the real server exceeds the configured maximum number of simultaneous active connections (maxconns). •OPERATIONAL—The real server is functioning properly and is being used for load-balancing. •OPER_WAIT—The real server is waiting to become operational (waiting for a timeout or some other condition to be met). •OUTOFSERVICE—The real server was configured with no inservice and has been removed from the load-balancing predictor lists. •PROBE_FAILED—The probe has succeeded in the past but has currently failed. This failure might occur at the same time user connections fail, or it might not. •PROBE_TESTING—The probe has never succeeded, due to no response. The initial probe timed out waiting for a success. |
|
•READY_TO_TEST—The real server is queued for testing after being in FAILED state until the retry timer expired. •TESTING—The real server is queued for assignment. When a single user connection is assigned to a real server that is in READY_TO_TEST state, the real server is placed in TESTING state. If the test succeeds, the real server is placed back in OPERATIONAL state. •TEST_WAIT—The real server is waiting to begin testing (waiting for a timeout or some other condition to be met). |
conns |
Number of connections associated with the real server. In general packet radio service (GPRS) load balancing, number of sessions associated with the real server. In per-packet server load balancing, number of request packets that have been load balanced to each real server, using the connection count. |
The following is sample output from the show ip slb reals detail command for a dual-stack real server in a server farm:
Router# show ip slb reals detail
172.16.88.5, SF1, state = OPERATIONAL, type = server
ipv6 = 2342:2342:2343:FF04:2388:BB03:3223:8912
conns = 0, dummy_conns = 0, maxconns = 4294967295
weight = 8, weight(admin) = 8, metric = 0, remainder = 0
failconn threshold = 8, failconn count = 0
failclient threshold = 2, failclient count = 0
total conns established = 0, total conn failures = 0
The following is sample output from the show ip slb reals detail command for a real server in a firewall farm:
Router# show ip slb reals detail
10.10.3.2, F, state = OPERATIONAL, type = firewall
conns = 0, dummy_conns = 0, maxconns = 4294967295
weight = 8, weight(admin) = 8, metric = 0, remainder = 0
total conns established = 8377, hash count = 0
interface FastEthernet1/0, MAC 0000.0c41.1063
Table 33 describes the fields shown in the above detail displays.
Table 33 show ip slb reals detail Field Descriptions
Field
|
Description
|
IPv4 or IPv6 address |
IPv4 or IPv6 address of the real server about which information is being displayed. Used to identify each real server. Information about each real server is displayed on a separate line. |
farm name |
Name of the server farm or firewall farm with which the real server is associated. |
state |
Current state of the real server. •DFP_THROTTLED—The Dynamic Feedback Protocol (DFP) agent sent a weight of 0 for this real server (send no further connections to this real server). •FAILED—The real server has failed as a result of either no response or reset (RST) responses to client traffic. (See the faildetect numconns (real server) command for more information about controlling tolerance for no responses and RSTs.) The real server has been removed from use by the predictor algorithms. The retry timer has started. •MAXCONNS_THROTTLE—The number of connections on the real server exceeds the configured maximum number of simultaneous active connections (maxconns). •OPERATIONAL—The real server is functioning properly and is being used for load-balancing. •OPER_WAIT—The real server is waiting to become operational (waiting for a timeout or some other condition to be met). •OUTOFSERVICE—The real server was configured with no inservice and has been removed from the load-balancing predictor lists. •PROBE_FAILED—The probe has succeeded in the past but has currently failed. This failure might occur at the same time user connections fail, or it might not. •PROBE_TESTING—The probe has never succeeded, due to no response. The initial probe timed out waiting for a success. •READY_TO_TEST—The real server is queued for testing after being in FAILED state until the retry timer expired. •TESTING—The real server is queued for assignment. When a single user connection is assigned to a real server that is in READY_TO_TEST state, the real server is placed in TESTING state. If the test succeeds, the real server is placed back in OPERATIONAL state. •TEST_WAIT—The real server is waiting to begin testing (waiting for a timeout or some other condition to be met). |
type |
Indicates whether the real server is associated with a server farm (server) or firewall farm (firewall). |
ipv6 |
IPv6 address of the real server about which information is being displayed, if dual-stack. |
conns |
Number of connections associated with the real server. In general packet radio service (GPRS) load balancing, number of sessions associated with the real server. In per-packet server load balancing, number of request packets that have been load balanced to each real server, using the connection count. |
dummy_conns |
Internal counter used in debugging. |
maxconns |
Maximum number of active connections allowed on the real server at one time. |
weight |
Weight assigned to the real server. The weight identifies the real server's capacity, relative to other real servers in the server farm. This value could be changed by DFP. |
weight(admin) |
Configured (or default) weight assigned to the real server. |
metric |
Internal counter used in debugging. |
remainder |
Internal counter used in debugging. |
reassign |
Total number of consecutive unacknowledged SYNchronize sequence numbers (SYNs) or Create Packet Data Protocol (PDP) requests since the last time the clear ip slb counters command was issued. |
retry |
Interval, in seconds, to wait between the detection of a failure on the real server and the next attempt to connect to the server. |
rate |
Maximum number of connections per second allowed on the real server. |
failconn threshold |
Maximum number of consecutive connection failures allowed before the real server is considered to have failed. |
failconn count |
Total number of consecutive connection failures since the last time the clear ip slb counters command was issued. |
failclient threshold |
Maximum number of unique client connection failures allowed before the real server is considered to have failed. |
failclient count |
Total number of unique client connection failures since the last time the clear ip slb counters command was issued. |
total conns established |
Total number of successful connection assignments since the last time the clear ip slb counters command was issued. |
total conn failures |
Total number of unsuccessful connection assignments since the last time the clear ip slb counters command was issued. |
server failures |
Total number of times this real server has been marked failed. |
hash count |
Total number of times the hash algorithm has been called. |
interface |
Type of interface. |
MAC |
MAC address of the firewall. |
show ip slb replicate
To display the Cisco IOS Server Load Balancing (IOS SLB) replication configuration, use the show ip slb replicate command in privileged EXEC mode.
show ip slb replicate
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(2)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(14)ZA5 |
This command was modified to support slave replication. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the show ip slb replicate command:
Router# show ip slb replicate
VS1, state = NORMAL, interval = 10
Slave Replication: Enabled
Slave Replication statistics:
conn updates transmitted: 0
update messages received: 0
update messages transmitted: 0
local = 10.1.1.1 remote = 10.2.2.2 port = 1024
current password = <none> pending password = <none>
password timeout = 180 sec (Default)
Casa Replication statistics:
conn updates transmitted: 0
update packets received: 0
update packets transmitted: 0
Table 34 describes the fields shown in the display.
Table 34 show ip slb replicate Field Descriptions
Field
|
Description
|
state |
Current replication state of the virtual server: •DUMPING—Dumping the connection table to the Hot Standby Router Protocol (HSRP) peer device. •NORMAL—Functioning properly. •PREEMPTING—Preparing to preempt the HSRP peer device and assume an active role. |
interval |
Replication buffering interval, in seconds. |
Slave Replication |
Indicates whether Slave Replication is enabled or disabled. |
unsent conn updates |
Number of Slave Replication or CASA Replication connection updates waiting to be sent. |
conn updates received |
Number of Slave Replication or CASA Replication connection updates received. |
conn updates transmitted |
Number of Slave Replication or CASA Replication connection updates sent. |
update packets received |
Number of Slave Replication or CASA Replication connection update packets received. |
update packets transmitted |
Number of Slave Replication or CASA Replication connection update packets sent. |
local |
Listening IP address for CASA Replication state exchange messages that are advertised. |
remote |
Destination IP address for all CASA Replication state exchange signals. |
port |
TCP or User Datagram Protocol (UDP) port number or port name for all CASA Replication state exchange signals. |
current password |
Current CASA Replication password for Message Digest Algorithm Version 5 (MD5) authentication, if any. |
pending password |
Pending CASA Replication password for MD5 authentication, if any. |
failovers |
Number of CASA Replication failovers detected. |
Related Commands
Command
|
Description
|
request (HTTP probe) |
Configures an HTTP probe to check the status of the real servers. |
show ip slb serverfarms
To display information about the server farms, use the show ip slb serverfarms command in privileged EXEC mode.
show ip slb serverfarms [name serverfarm-name] [detail]
Syntax Description
name |
(Optional) Displays information about only a particular server farm. |
serverfarm-name |
(Optional) Name of the server farm. |
detail |
(Optional) Displays detailed server farm information. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRC |
The output for the detail keyword was updated to display RADIUS load balancing enhancements and information about the IOS SLB KeepAlive Application Protocol (KAL-AP) agent. |
15.0(1)S |
The output for the detail keyword was updated to display the real server's IPv4, IPv6, or dual-stack address. |
Examples
The following is sample output from the show ip slb serverfarms command:
Router# show ip slb serverfarms
server farm predictor nat reals bind id interface(s)
GGSN ROUNDROBIN none 0 0 <any>
GGSN1 ROUNDROBIN S 5 0 <any>
GGSN_IPV6 ROUNDROBIN S 5 0 <any>
Table 35 describes the fields shown in the display.
Table 35 show ip slb serverfarms Field Descriptions
Field
|
Description
|
server farm |
Name of the server farm about which information is being displayed. Information about each server farm is displayed on a separate line. |
predictor |
Type of load-balancing algorithm (ROUNDROBIN, LEASTCONNS, or ROUTEMAP) used by the server farm |
nat |
NAT setting for the server farm: •c—Client NAT •s—Server NAT •none—NAT is not configured for the server farm |
reals |
Number of real servers configured in the server farm |
bind id |
Bind ID configured on the server farm. |
interface(s) |
Interface used by the server farm |
The following is sample output from the show ip slb serverfarms detail command, if RADIUS load balancing is configured with the route map predictor:
Router# show ip slb serverfarms detail
SF1, predictor = ROUNDROBIN, nat =SERVER, interface(s) = Vl88
virtuals inservice: 1, reals = 1, bind id = 0
172.16.88.5, weight = 8, OPERATIONAL, conns = 0
ipv6 = 2342:2342:2343:FF04:2388:BB03:3223:8912
For RADIUS load balancing with the route map predictor configured, specifying the detail keyword displays:
•predictor = ROUTE-MAP—Indicates that the route-map keyword is configured on the predictor command in SLB server farm configuration mode.
•routemap name—Name of the IOS policy-based routing (PBR) route map. If the route map is invalid or is not present, IOS SLB also displays Not Configured/Valid.
The following is sample output from the show ip slb serverfarms detail command, if a KAL-AP request was received for this server farm:
SF, predictor = ROUNDROBIN, nat = SERVER, interface(s) = <any>
virtuals inservice: 1, reals = 2, bind id = 0
KAL-AP tag: "chicago.com", farm weight: 400
For the KAL-AP agent, specifying the detail keyword displays:
•KAL-AP tag—Domain tag to be used by the KAL-AP agent when searching for a server farm, if configured.
•farm weight—The weight to be used by the KAL-AP agent when calculating the load value for a server farm.
show ip slb sessions
To display information about sessions handled by Cisco IOS Server Load Balancing (IOS SLB), use the show ip slb sessions command in privileged EXEC mode.
show ip slb sessions [asn | gtp [ipv6] | gtp-inspect | ipmobile | radius] [vserver virtual-server] [client ipv4-address ipv4-netmask] [detail]
Syntax Description
asn |
(Optional) Displays information about set of Access Service Network (ASN) gateways sessions being handled by IOS SLB. |
gtp |
(Optional) Displays IPv4 information about general packet radio service (GPRS) Tunneling Protocol (GTP) sessions being handled by IOS SLB. |
ipv6 |
(Optional) Displays detailed information about the IPv6 sessions being handled by GTP load balancing. |
gtp-inspect |
(Optional) Displays information about GTP sessions being handled by IOS SLB that have GTP cause code inspection enabled. |
ipmobile |
(Optional) Displays information about Mobile IP sessions being handled by IOS SLB. |
radius |
(Optional) Displays information about RADIUS sessions being handled by IOS SLB. |
vserver virtual-server |
(Optional) Displays information about sessions being handled by the specified virtual server. |
client ipv4-address ipv4-netmask |
(Optional) Displays information about sessions associated with the specified client IPv4 address or subnet |
detail |
(Optional) Displays detailed information. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(11b)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.1(13)E3 |
The gtp and gtp-inspect keywords were added. |
12.2(14)ZA2 |
The ipmobile keyword was added. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRC1 |
The asn keyword was added. |
15.0(1)S |
The ipv6 keyword was added. |
Examples
The following is sample output from the show ip slb sessions command for RADIUS sessions:
Router# show ip slb sessions radius
Addr/Port Addr/Port Id Count Real Vserver
------------------------------------------------------------------------------
10.10.11.1/1645 10.10.11.2/1812 15 1 10.10.10.1 RADIUS_ACCT
Table 36 describes the fields shown in the display.
Table 36 show ip slb sessions radius Field Descriptions
Field
|
Description
|
Source Addr/Port |
Source IPv4 address and port number for the session. |
Dest Addr/Port |
Destination IPv4 address and port number for the session. |
Id |
RADIUS identifier for the session. |
Retry Count |
Number of times a RADIUS request was sent by a RADIUS client without receiving a response from the RADIUS server (proxy or otherwise). |
Real |
IPv4 address of the SSG RADIUS server (proxy or otherwise). |
Vserver |
Name of the virtual server whose sessions are being monitored and displayed. |
The following example shows GTP IPv4 session data:
Router# show ip slb sessions gtp
vserver key client real state
----------------------------------------------------------------------------------
10.10.10.10 1234567890123456 10.5.5.5 10.10.1.1 GTP_ESTAB
Table 37 describes the fields shown in the display.
Table 37 show ip slb sessions gtp Field Descriptions
Field
|
Description
|
vserver |
Name of the virtual server whose GTP sessions are being monitored and displayed. Information about each session is displayed on a separate line. |
key |
Network Service Access Point Identifier (NSAPI) key being used by the GTP session. |
client |
Client IPv4 address being used by the GTP session. |
real |
Real IPv4 address of the GTP session. |
state |
Current state of the GTP session: •GTP_ESTAB—The session has been established successfully. •GTP_INIT—The Packet Data Protocol (PDP) contexts have been deleted as a result of a delete request or a deletion in gateway GPRS support node (GGSN), and IOS SLB is waiting to destroy the session after the GTP_TIMEOUT. •GTPIO_REQ_CLIENT—Waiting for a response from the real server. |
The following example shows GTP IPv6 session data:
Router# show ip slb sessions gtp ipv6
vserver = VS, key = 1112131415180030
state = SLB_IPV6_GTP_ESTAB
The following example shows IOS SLB Mobile IP session data:
Router# show ip slb sessions ipmobile
vserver NAI hash client real retries
---------------------------------------------------------------------------
VIRTUAL_HA 0xFFFF 10.1.1.1/434 10.10.1.1 1
Table 38 describes the fields shown in the display.
Table 38 show ip slb sessions ipmobile Field Descriptions
Field
|
Description
|
vserver |
Name of the virtual server whose Mobile IP sessions are being monitored and displayed. Information about each session is displayed on a separate line. |
NAI hash |
Network access identifier (NAI) in the Registration Request (RRQ), used by Cisco IOS SLB as a unique identifier. |
client |
Client IPv4 address being used by the Mobile IP session. |
real |
Real IPv4 address of the Mobile IP session. |
retries |
Number of foreign agent retries for the Mobile IP session. |
The following is sample output from the show ip slb sessions asn command for ASN sessions:
Router# show ip slb sessions asn
vserver MSID Base Station real state
------------------------------------------------------------------------------
10.10.10.10 001646013fc0 5.5.5.5 10.10.1.1 ASN_REQ
Table 39 describes the fields shown in the display.
Table 39 show ip slb sessions asn Field Descriptions
Field
|
Description
|
vserver |
Name of the virtual server whose ASN sessions are being monitored and displayed. Information about each session is displayed on a separate line. |
MSID |
Mobile Station Identifier (MSID), used by Cisco IOS SLB as a unique identifier. |
Base Station |
IPv4 address of the base station associated with the ASN session. |
real |
Real IPv4 address of the ASN session. |
state |
Current state of the ASN session: •ASN_ESTAB—The session has been established successfully. •ASN_INIT—IOS SLB is waiting to destroy the session after timeouts in ASN_REQ or ASN_ESTAB state. If the base station is configured to send the ACK directly to the ASN gateway, and if no faildetect inband is configured, the session remains in ASN_REQ state until it is destroyed. •ASN_REQ—Waiting for a response from the real server. |
show ip slb static
To display the Cisco IOS Server Load Balancing (IOS SLB) server Network Address Translation (NAT) configuration, use the show ip slb static command in privileged EXEC mode.
show ip slb static
Syntax Description
This command has no arguments or keywords.
Defaults
The default behavior is to display the entire IOS SLB server NAT configuration.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.1(11b)E |
This command was introduced. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
Examples
The following is sample output from the show ip slb static command:
Router# show ip slb static
real action address counter
---------------------------------------------------------------
10.11.3.1 NAT 10.11.11.11 3
10.11.3.2 NAT sticky 10.11.11.12 0
10.11.3.3 NAT per-packet 10.11.11.13 0
Table 40 describes the fields shown in the display.
Table 40 show ip slb static Field Descriptions
Field
|
Description
|
real |
IP address of the real server. |
action |
Action to be taken by the real server: •drop—The real server is configured to have its packets dropped by IOS SLB, if the packets do not correspond to existing connections. •NAT—The real server is configured to use server NAT, and to use its own virtual IP address when translating addresses. •NAT per-packet—The real server is configured to use server NAT and per-packet server load balancing. •NAT sticky—The real server is configured to use server NAT for sticky connections. •pass-thru—The real server is not configured to use server NAT. |
address |
Virtual IP address used by the real server when translating addresses using server NAT. Address 0.0.0.0 means the real server is not configured for server NAT. |
counter |
For actions drop and NAT per-packet, indicates the number of packets processed by the real server. For actions NAT and NAT sticky, indicates the number of packets received by, but not necessarily processed by, the real server. |
show ip slb stats
To display IOS Server Load Balancing (IOS SLB) statistics, use the show ip slb stats command in privileged EXEC mode.
show ip slb stats [kal-ap]
Syntax Description
kal-ap |
(Optional) Displays information about the IOS SLB KeepAlive Application Protocol (KAL-AP) agent. |
Defaults
No default behavior or values.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.1(9)E |
This command was modified to support general packet radio service (GPRS) load balancing. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRC |
The kal-ap keyword was added, and the output for the command was updated to display correlation inject failures for RADIUS load balancing accelerated data plane forwarding. |
12.2(33)SRC1 |
The output for the command was updated to display packet fragment drops for Access Service Network (ASN) R6 load balancing. |
Examples
The following is sample output from the show ip slb stats command:
Router# show ip slb stats
Pkts via normal switching: 108247
Pkts via special switching: 4307026
Pkts via slb routing: 1376241
Connections Created: 933131
Connections Established: 350042
Connections Destroyed: 639323
Connections Reassigned: 0
Connection Flowcache Purges: 2665
Failed Connection Allocs: 0
Failed Real Assignments: 0
RADIUS framed-ip Sticky Count: 524288
RADIUS username Sticky Count: 0
RADIUS cstn-id Sticky Count: 0
Route Flows Created: 1691177
Failed Route Flow Allocs: 0
Failed Correlation Injects: 0
Pkt fragments drops in ssv: 0
Table 41 describes the fields shown in the display.
Table 41 show ip slb stats Field Descriptions
Field
|
Description
|
Pkts via normal switching |
Number of packets handled by IOS SLB via normal switching since the last time counters were cleared. Normal switching is when IOS SLB packets are handled on normal IOS switching paths (CEF, fast switching, and process level switching). |
Pkts via special switching |
Number of packets handled by IOS SLB via special switching since the last time counters were cleared. Special switching is when IOS SLB packets are handled on hardware-assisted switching paths. |
Pkts via slb routing |
Number of packets handled by IOS SLB via SLB routing since the last time counters were cleared. |
Pkts dropped |
Number of packets dropped or consumed by IOS SLB since the last time counters were cleared. The Pkts dropped field can increase for one or more of the following reasons: •Pings and other Internet Control Message Protocol (ICMP) packets addressed to a virtual IP address are dropped. •TCP data packets in which the conn entry is not available as a result of an idle timeout, failure of a probe, or failure of a real server, are dropped. •UDP traceroute packets addressed to a virtual IP address are dropped. •UDP packets addressed to a virtual IP address with a port number other than the one configured in the virtual server are dropped. If the virtual server uses the any 0 port number, IOS SLB forwards the UDP packets to the real server. •Fragmented packets that cannot be reassembled are dropped. |
Connections Created |
Number of connections (or sessions, in general packet radio service [GPRS] load balancing and the Home Agent Director) created since the last time counters were cleared. |
Connections Established |
Number of connections (or sessions, in GPRS load balancing and the Home Agent Director) created and that have become established since the last time counters were cleared. |
Connections Destroyed |
Number of connections (or sessions, in GPRS load balancing and the Home Agent Director) destroyed since the last time counters were cleared. |
Connections Reassigned |
Number of connections (or sessions, in GPRS load balancing and the Home Agent Director) reassigned to a different real server since the last time counters were cleared. |
Zombie Count |
Number of connections (or sessions, in GPRS load balancing and the Home Agent Director) that are currently pending destruction (awaiting a timeout or some other condition to be met). |
Connections Reused |
Number of zombie connections (or sessions, in GPRS load balancing and the Home Agent Director) reused since the last time counters were cleared. A zombie connection is reused if it receives a TCP SYNchronize sequence number (SYN) or User Datagram Protocol (UDP) packet and succeeds in connecting to a real server. The zombie connection becomes a real connection and the zombie count is decremented. |
Connection Flowcache Purges |
Number of times the connection flow cache was purged since the last time counters were cleared. |
Failed Connection Allocs |
Number of times the allocation of a connection (or session, in GPRS load balancing) failed since the last time counters were cleared. |
Failed Real Assignments |
Number of times the assignment of a real server failed since the last time counters were cleared. |
RADIUS framed-ip Sticky Count |
Number of entries in the RADIUS framed-IP sticky database. |
RADIUS username Sticky Count |
Number of entries in the RADIUS username sticky database. |
RADIUS cstn-id Sticky Count |
Number of entries in the RADIUS calling-station-ID sticky database. |
GTP imsi Sticky Count |
Number of entries in the GTP IMSI sticky database. |
Route Flows Created |
Number of route flows created. |
Failed Route Flows Allocs |
Number of failed route flow allocations. |
Failed Correlation Injects |
Number of failed correlation injects. |
Pkt fragments drops in ssv |
Number of packet fragments drops in the SSV. |
ASN MSID sticky count |
Number of sticky objects in the ASN MSID sticky database. |
The following is sample output from the show ip slb kal-ap stats kal-ap command:
Router# show ip slb kal-ap stats kal-ap
KAL-AP Mgr: (default), Socket state: OPEN, Socket retry: 0
KAL-AP Mgr: 2.2.2.2, Socket state: FAILED, Socket retry: 10
UDP Port: 5002, vrf: vrf1
KAL-AP Mgr: 10.77.161.34, Socket state: FAILED, Socket retry: 10
UDP Port: 5002, Secret: test
KAL-AP Packet Statistics:
KAL-AP Manager: 2.2.2.2 Secret: Yes
KAL-AP Manager: 3.3.3.3 Secret: Yes
Pkt Recd: 100 Bytes Recd: 12345
Pkt Sent: 100 Bytes Sent: 12121
MD5 checksum failed: 0 Error packets: 0
show ip slb sticky
To display the IOS Server Load Balancing (IOS SLB) sticky database, use the show ip slb sticky command in privileged EXEC mode.
show ip slb sticky [asn {msid msid | nai nai} | client ipv4-address ipv4-netmask | gtp imsi [ipv6] [id imsi] | radius calling-station-id [id string] | radius framed-ip [client ipv4-address ipv4-netmask] | radius username [name string]]
Syntax Description
asn msid msid |
(Optional) Displays only those sticky database entries associated with the specified Access Service Network (ASN) Mobile Station ID (MSID). |
asn nai nai |
(Optional) Displays only those sticky database entries associated with the specified ASN network address identifier (NAI). |
client ipv4-address ipv4-netmask |
(Optional) Displays only those sticky database entries associated with the specified client IPv4 address or subnet. |
gtp imsi |
(Optional) Displays only entries associated with the IOS SLB general packet radio service (GPRS) Tunneling Protocol (GTP) International Mobile Subscriber ID (IMSI) sticky database, and shows all of the Network Service Access Point Identifiers (NSAPIs) that the user has used as primary Packet Data Protocols (PDPs). |
ipv6 |
(Optional) Displays only IPv6 entries associated with the IOS SLB GTP IMSI sticky database, and shows all of the NSAPIs that the user has used as primary PDPs. |
id imsi |
(Optional) Displays only those sticky database entries associated with the specified IMSI. |
radius calling-station-id |
(Optional) Displays only entries associated with the IOS SLB RADIUS calling-station-ID sticky database. |
id string |
(Optional) Displays only those sticky database entries associated with the specified calling station ID. |
radius framed-ip |
(Optional) Displays only entries associated with the IOS SLB RADIUS framed-IP sticky database. |
radius username |
(Optional) Displays only entries associated with the IOS SLB RADIUS username sticky database. |
name string |
(Optional) Displays only those sticky database entries associated with the specified username. |
Defaults
If no options are specified, the command displays information about all virtual servers.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.1(11b)E |
The radius keyword was added. |
12.1(12c)E |
The framed-ip, username, name, netmask, and string keywords and arguments were added. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(14)ZA5 |
The calling-station-id and id keywords and the string argument were added. |
12.2(18)SXE |
The gtp imsi and id keywords and the imsi argument were added. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRE |
The asn, msid, and nai keywords and the msid and nai arguments were added. |
15.0(1)S |
The ipv6 keyword was added. The output was updated to display the real server's GTP version and IPv4, IPv6, or dual-stack address. |
Examples
The following is sample output from the show ip slb sticky command:
Router# show ip slb sticky
client netmask group real conns
-----------------------------------------------------------------------
10.10.2.12 255.255.0.0 4097 10.10.3.2 1
Table 42 describes the fields shown in the display.
Table 42 show ip slb sticky Field Descriptions
Field
|
Description
|
client |
Client IPv4 address or subnet which is bound to this sticky assignment. |
netmask |
IPv4 subnet mask for this sticky assignment. |
group |
Group ID for this sticky assignment. |
real |
Real server used by all clients connecting with the client IPv4 address or subnet detailed on this line. |
conns |
Number of connections currently sharing this sticky assignment. |
The following is sample output from the show ip slb sticky gtp imsi command:
Router# show ip slb sticky gtp imsi
IMSI Real Ver Group ID vs_index refcount nsapi
----------------------------------------------------------------------
11111111111111FF 10.10.10.1 1 5 10 1 6
11123411111111FF 10.10.10.2 1 5 10 1 9
Table 43 describes the fields shown in the display.
Table 43 show ip slb sticky gtp imsi Field Descriptions
Field
|
Description
|
IMSI |
IMSI bound to this sticky assignment in the IOS SLB GTP IMSI sticky database. |
Real |
IPv4 address of the GTP IMSI real server. |
Ver |
GTP version: v0, v1, or v2 |
Group ID |
Group ID for this sticky assignment. |
vs_index |
Virtual index, out of a maximum of 500. |
refcount |
Number of NSAPIs used as primary PDPs. |
nsapi |
NSAPI used as a primary PDP. Note IOS SLB does not display the nsapi column for GTP v2 sessions. |
The following is sample output from the show ip slb sticky gtp imsi ipv6 command:
Router# show ip slb sticky gtp imsi ipv6
IMSI Real Ver Group Id vs_index refcount NSAPIs
--------------------------------------------------------------------------
11121314151800F0 21.21.21.1 2 4099 7 1 3
2342:2342:2343:FF04:2342:AA03:2323:8912
The following is sample output from the show ip slb sticky radius calling-station-id command:
Router# show ip slb sticky radius calling-station-id
calling-station-id group id server real framed-ips
-----------------------------------------------------
Table 44 describes the fields shown in the display.
Table 44 show ip slb sticky radius calling-station-id Field Descriptions
Field
|
Description
|
calling-station-id |
Calling station ID bound to an SSG RADIUS proxy in the IOS SLB RADIUS calling-station-ID sticky database. |
group id |
Group ID for this sticky assignment. |
server real |
IPv4 address of the SSG RADIUS proxy server. |
framed-ips |
Number of IPv4 addresses bound to the SSG RADIUS proxy in the IOS SLB RADIUS framed-IP sticky database. |
The following is sample output from the show ip slb sticky radius framed-ip command:
Router# show ip slb sticky radius framed-ip
framed-ip group id server real route i/f
-----------------------------------------------------
1.1.1.1 15 10.10.10.1 <any>
Table 45 describes the fields shown in the display.
Table 45 show ip slb sticky radius framed-ip Field Descriptions
Field
|
Description
|
framed-ip |
IPv4 address bound to a Cisco Service Selection Gateway (SSG) RADIUS proxy in the IOS SLB RADIUS framed-IP sticky database. |
group id |
Group ID for this sticky assignment. |
server real |
IPv4 address of the SSG RADIUS proxy server. |
route i/f |
Route interface. |
The following is sample output from the show ip slb sticky radius username command:
Router# show ip slb sticky radius username
username group id server real framed-ips
-----------------------------------------------------
9198783355 15 10.10.10.1 1
Table 46 describes the fields shown in the display.
Table 46 show ip slb sticky radius username Field Descriptions
Field
|
Description
|
username |
Username bound to an SSG RADIUS proxy in the IOS SLB RADIUS username sticky database. |
group id |
Group ID for this sticky assignment. |
server real |
IPv4 address of the SSG RADIUS proxy server. |
framed-ips |
Number of IPv4 addresses bound to the SSG RADIUS proxy in the IOS SLB RADIUS framed-IP sticky database. |
The following is sample output from the show ip slb sticky asn command:
Router# show ip slb sticky asn
MSID Real Group Id vs_index NAI
-------------------------------------------------------
ABCD.12FE.3467 10.10.10.1 5 10 abc@cisco.com
2247.1130.8642 10.10.10.2 5 10 bcd@abc.com
Table 47 describes the fields shown in the display.
Table 47 show ip slb sticky asn Field Descriptions
Field
|
Description
|
MSID |
MSID bound to this sticky assignment in the IOS SLB ASN sticky database. |
Real |
IPv4 address of the ASN real server. |
Group ID |
Group ID for this sticky assignment. |
vs_index |
Virtual index, out of a maximum of 500. |
NAI |
NAI bound to this sticky assignment in the IOS SLB ASN sticky database. |
The following is sample output from the show ip slb sticky asn nai abc@cisco.com command:
Router# show ip slb sticky asn nai abc@cisco.com
MSID Real Group Id vs_index NAI
-------------------------------------------------------
ABCD.12FE.3467 10.10.10.1 5 10 abc@cisco.com
Table 48 describes the fields shown in the display.
Table 48 show ip slb sticky asn nai abc@cisco.com Field Descriptions
Field
|
Description
|
MSID |
MSID bound to this sticky assignment in the IOS SLB ASN sticky database. |
Real |
IPv4 address of the ASN real server. |
Group ID |
Group ID for this sticky assignment. |
vs_index |
Virtual index, out of a maximum of 500. |
NAI |
NAI bound to this sticky assignment in the IOS SLB ASN sticky database. |
show ip slb vservers
To display information about the virtual servers, use the show ip slb vservers command in privileged EXEC mode.
show ip slb vservers [name virtual-server] [redirect] [detail]
Syntax Description
name virtual-server |
(Optional) Displays information about the specified virtual server. |
redirect |
(Optional) Displays information about redirect virtual servers. |
detail |
(Optional) Displays detailed information. |
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.0(7)XE |
This command was introduced. |
12.1(5)T |
This command was integrated into Cisco IOS Release 12.1(5)T. |
12.2 |
This command was integrated into Cisco IOS Release 12.2. |
12.2(14)S |
This command was integrated into Cisco IOS Release 12.2(14)S. |
12.2(18)SXE |
This command was integrated into Cisco IOS Release 12.2(18)SXE. |
12.2(18)SXF |
The output for this command was modified to reflect the GTP sticky query option on the idle (virtual server) command. |
12.2(33)SRA |
This command was integrated into Cisco IOS Release 12.2(33)SRA. |
12.2(33)SRC |
The output for the detail keyword was updated to display information about the IOS SLB KeepAlive Application Protocol (KAL-AP) agent. |
12.2(33)SRC1 |
The output for the detail keyword was updated to display information about Access Service Network (ASN) virtual servers. |
15.0(1)S |
The output was updated to display the virtual server's IPv4 or dual-stack address. |
Usage Guidelines
If no options are specified, the command displays information about all virtual servers.
Examples
The following is sample output from the show ip slb vservers command:
Router# show ip slb vservers
slb vserver prot virtual state conns interface(s)
--------------------------------------------------------------------------------------
GGSN_SERVER1 UDP 4.3.2.1/32:0 OPERATIONAL 0 <any>
2342:2342:2343:FF04:2342:AA03:2323:8912/128
VS1 UDP 4.3.2.2/32:0 OPERATIONAL 0 <any>
2342:2342:2343:FF04:2343:AA03:2323:8912/128
VS2 UDP 4.3.2.3/32:0 OPERATIONAL 0 <any>
2342:2342:2343:FF04:2341:AA03:2323:8912/128
Table 49 describes the fields shown in the display.
Table 49 show ip slb vservers Field Descriptions
Field
|
Description
|
slb vserver |
Name of the virtual server about which information is being displayed. Information about each virtual server is displayed on a separate line. |
prot |
Protocol being used by the virtual server. |
virtual |
Virtual IPv4 or dual-stack address of the virtual server, including the network mask, if configured. |
state |
Current state of the virtual server: •FAILED—Real server represented by this virtual server has been removed from use by the predictor algorithms; retry timer started. •OPERATIONAL—Functioning properly. •OUTOFSERVICE—Removed from the load-balancing predictor lists. •STANDBY—Backup virtual server, ready to become operational if active virtual server fails. |
conns |
Number of connections (or sessions, in general packet radio service [GPRS] load balancing and the Home Agent Director) associated with the virtual server. |
interface |
Type of interface. |
The following sample output from the show ip slb vservers detail command shows detailed data for a virtual server with route health injection (advertise=TRUE):
Router# show ip slb vservers detail
VS, state = OPERATIONAL, v_index = 7, interface(s) = <any>
virtual = 3.3.3.3/32:2123, UDP, service = GTP, advertise = TRUE
ipv6 = 3:3:3:3:3:3:3:3/128
map 1: priority = 1, serverfarm = SF, backup serverfarm= SF3
ipv6 serverfarm = SF1 ipv6 backup serverfarm = SF2
map 2: priority = 2, serverfarm = SF3, backup serverfarm= SF
ipv6 serverfarm = SF2 ipv6 backup serverfarm = SF1
serverfarm = <not assigned>, backup serverfarm = <not assigned>
backup_serverfarm_hits = 0
slb notification retry = 2
gtp sticky query: <disabled>
synguard counter = 0, synguard period = 0
conns = 0, total conns = 0, syns = 0, syn drops = 0
The following sample output from the show ip slb vservers name detail command shows detailed data for virtual server GGSN_SERVER with GTP sticky query enabled:
Router# show ip slb vservers name GGSN_SERVER detail
GGSN_SERVER, state = OPERATIONAL, v_index = 7, interface(s) = <any>
virtual = 10.10.195.1/32:0, UDP, service = GTP, advertise = TRUE
server farm = GGSN, delay = 10, idle = 3600
gtp: request idle = 30, slb notification retry = 2
gtp sticky query: <enabled>, max retries: 3
sticky: group id = 4097 <assigned>
synguard counter = 0, synguard period = 0
conns = 0, total conns = 17192, syns = 0, syn drops = 0
Table 50 describes the fields shown in the display.
Table 50 show ip slb vservers name detail Field Descriptions
Field
|
Description
|
GGSN_SERVER |
Name of the virtual server about which information is being displayed (in this case, GGSN_SERVER). |
state |
Current state of the virtual server: FAILED—Real server represented by this virtual server has been removed from use by the predictor algorithms; retry timer started. OPERATIONAL—Functioning properly. OUTOFSERVICE—Removed from the load-balancing predictor lists. STANDBY—Backup virtual server, ready to become operational if active virtual server fails. |
v_index |
Virtual index, out of a maximum of 500. |
interface(s) |
Type of interface. |
virtual |
Virtual IPv4 or dual-stack address of the virtual server, including the network mask, if configured. |
UDP |
Protocol being used by the virtual server (in this case, UDP). |
service |
Service, such as GTP, HTTP, or Telnet, associated with the virtual server (in this case, GTP). |
advertise |
Current state of host route advertisement for this virtual server: TRUE—Host route is being advertised. FALSE—Host route is not being advertised. |
ipv6 |
For dual-stack, IPv6 address of the virtual server |
server farm |
Name of the server farm associated with the virtual server. |
delay |
Delay timer duration, in seconds, for this virtual server. |
idle |
Idle connection timer duration, in seconds, for this virtual server. |
gtp request idle |
GTP idle connection timer duration in seconds. |
slb notification |
Number of times IOS SLB can reassign a rejected Create PDP Context to a new real Cisco gateway GPRS support node (GGSN). |
gtp sticky query |
For GTP IMSI sticky, indicates whether IOS SLB is to query the GGSN before deleting any GTP IMSI sticky objects. |
max retries |
Maximum number of queries IOS SLB is to send to the GGSN when there is no response from the GGSN. |
sticky |
Indicates whether sticky connections are enabled for this virtual server. |
sticky group id |
Sticky group in which this virtual server is placed, for coupling of services. |
synguard counter |
Number of unacknowledged SYNchronize sequence numbers (SYNs) that are allowed to be outstanding to this virtual server. |
synguard period |
Interval, in milliseconds, for SYN threshold monitoring for this virtual server. |
conns |
Number of active connections currently associated with the virtual server. |
total conns |
Total number of connections that have been associated with the virtual server since coming INSERVICE. |
syns |
Number of SYNs handled by the virtual server in this period. |
syn drops |
Number of SYNs dropped by the virtual server in this period. |
standby group |
Hot Standby Router Protocol (HSRP) group name with which the virtual server is associated. |
The following sample output from the show ip slb vservers name detail command shows detailed data for GTP virtual server GGSN_SERVER with maps enabled:
Router# show ip slb vservers name GGSN_SERVER detail
GGSN_SERVER, state = OPERATIONAL, v_index = 9, interface(s) = <any>
virtual = 10.10.10.10/32:0, UDP, service = GTP, advertise = TRUE
map 4: priority = 1, serverfarm = FARM4, backup = <none>
map 1: priority = 3, serverfarm = FARM1, backup = FARM2
map 5: priority = 4, serverfarm = FARM5, backup = <none>
server farm = <not assigned>, delay = 10, idle = 3600
gtp: request idle = 30, slb notification retry = 2
gtp sticky query: <disabled>, max retries: 0
synguard counter = 0, synguard period = 0
conns = 0, total conns = 0, syns = 0, syn drops = 0
Table 51 describes the fields shown in the display.
Table 51 show ip slb vservers name detail Field Descriptions
Field
|
Description
|
GGSN_SERVER |
Name of the RADIUS virtual server about which information is being displayed (in this case, GGSN_SERVER). |
state |
Current state of the virtual server: FAILED—Real server represented by this virtual server has been removed from use by the predictor algorithms; retry timer started. OPERATIONAL—Functioning properly. OUTOFSERVICE—Removed from the load-balancing predictor lists. STANDBY—Backup virtual server, ready to become operational if active virtual server fails. |
v_index |
Virtual index, out of a maximum of 500. |
interface(s) |
Type of interface. |
virtual |
Virtual IPv4 or dual-stack address of the virtual server, including the network mask, if configured. |
UDP |
Protocol being used by the virtual server (in this case, UDP). |
service |
Service, such as GTP, HTTP, or Telnet, associated with the virtual server (in this case, GTP). |
advertise |
Current state of host route advertisement for this virtual server: TRUE—Host route is being advertised. FALSE—Host route is not being advertised. |
serverfarm maps |
List of IOS SLB server farm maps associated with this virtual server. Information about each map is displayed on a separate line. |
priority |
Priority of the map. |
serverfarm |
Server farm with which the map is associated. |
backup |
Backup server farm, if any. |
server farm |
Name of the server farm associated with the virtual server. Information about each server farm is displayed on a separate line. |
map ID |
Map associated with the server farm. |
priority |
Priority of the map. |
delay |
Delay timer duration, in seconds, for this virtual server. |
idle |
Idle connection timer duration, in seconds, for this virtual server. |
gtp request idle |
GTP idle connection timer duration in seconds. |
slb notification |
Number of times IOS SLB can reassign a rejected Create PDP Context to a new real Cisco gateway GPRS support node (GGSN). |
gtp sticky query |
For GTP IMSI sticky, indicates whether IOS SLB is to query the GGSN before deleting any GTP IMSI sticky objects. |
max retries |
Maximum number of queries IOS SLB is to send to the GGSN when there is no response from the GGSN. |
sticky |
Indicates whether sticky connections are enabled for this virtual server. |
sticky group id |
Sticky group in which this virtual server is placed, for coupling of services. |
synguard counter |
Number of unacknowledged SYNchronize sequence numbers (SYNs) that are allowed to be outstanding to this virtual server. |
synguard period |
Interval, in milliseconds, for SYN threshold monitoring for this virtual server. |
conns |
Number of active connections currently associated with the virtual server. |
total conns |
Total number of connections that have been associated with the virtual server since coming INSERVICE. |
syns |
Number of SYNs handled by the virtual server in this period. |
syn drops |
Number of SYNs dropped by the virtual server in this period. |
standby group |
Hot Standby Router Protocol (HSRP) group name with which the virtual server is associated. |
The following sample output from the show ip slb vservers name detail command shows detailed data for an ASN virtual server:
Router# show ip slb vservers name ASN_VSERVER detail
ASN_VSERVER, state = OPERATIONAL, v_index = 10, interface(s) = <any>
virtual = 2.2.2.2/32:0, UDP, service = ASNR6, advertise = TRUE
server farm = SF, delay = 10, idle = 3600
asn: delete notif recvd = 2, nai-update notif recvd = 2
asn: Notification Errors: Deletes = 1, nai-updates = 0
sticky: group id = 4097 <assigned>
synguard counter = 0, synguard period = 0
conns = 0, total conns = 156, syns = 0, syn drops = 0
--------------------------------------------------------
Real commn: |--------+--------+--------+-------------
port = 63082 | Recv | Errors | Recv | Errors
---------------+--------+--------+--------+-------------
Table 52 describes the fields shown in the display.
Table 52 show ip slb vservers name detail Field Descriptions
Field
|
Description
|
ASN_VSERVER |
Name of the ASN virtual server about which information is being displayed (in this case, ASN_VSERVER). |
state |
Current state of the virtual server: FAILED—Real server represented by this virtual server has been removed from use by the predictor algorithms; retry timer started. OPERATIONAL—Functioning properly. OUTOFSERVICE—Removed from the load-balancing predictor lists. STANDBY—Backup virtual server, ready to become operational if active virtual server fails. |
v_index |
Virtual index, out of a maximum of 500. |
interface(s) |
Type of interface. |
virtual |
Virtual IPv4 or dual-stack address of the virtual server, including the network mask, if configured. |
UDP |
Protocol being used by the virtual server (in this case, UDP). |
service |
Service, such as GTP, HTTP, or Telnet, associated with the virtual server (in this case, ASNR6). |
advertise |
Current state of host route advertisement for this virtual server: TRUE—Host route is being advertised. FALSE—Host route is not being advertised. |
server farm |
Name of the server farm associated with the virtual server. Information about each server farm is displayed on a separate line. |
delay |
Delay timer duration, in seconds, for this virtual server. |
idle |
Idle connection timer duration, in seconds, for this virtual server. |
asn: request idle |
ASN idle connection timer duration in seconds. |
asn: delete notif recvd |
Number of delete notifications received. |
asn: nai-update notif recvd |
Number of NAI-update notifications received. |
asn: Notification Errors: Deletes |
Number of delete notification errors. |
asn: Notification Errors: nai-updates |
Number of NAI-update notification errors. |
sticky |
Indicates whether sticky connections are enabled for this virtual server. |
sticky group id |
Sticky group in which this virtual server is placed, for coupling of services. |
synguard counter |
Number of unacknowledged SYNchronize sequence numbers (SYNs) that are allowed to be outstanding to this virtual server. |
synguard period |
Interval, in milliseconds, for SYN threshold monitoring for this virtual server. |
conns |
Number of active connections currently associated with the virtual server. |
total conns |
Total number of connections that have been associated with the virtual server since coming INSERVICE. |
syns |
Number of SYNs handled by the virtual server in this period. |
syn drops |
Number of SYNs dropped by the virtual server in this period. |
standby group |
Hot Standby Router Protocol (HSRP) group name with which the virtual server is associated. |
Real commn: port |
Port used by the real server. |
show ip slb wildcard
To display information about the wildcard representation for irtual servers, use the show ip slb wildcard command in privileged EXEC mode.
show ip slb wildcard
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.2(33)SRE |
This command was introduced. |
15.0(1)S |
The output was updated to display the virtual server's IPv4, IPv6, or dual-stack address. |
Examples
The following is sample output from the show ip slb wildcard command:
Router# show ip slb wildcard
Interface Source Address Port Destination Address Port Prot
ANY 0.0.0.0/0 0 3.3.3.3/32 2123 UDP
ANY 0.0.0.0/0 0 3.3.3.3/32 0 UDP
ANY 0.0.0.0/0 0 0.0.0.0/0 0 ICMP
Source Address [Port]: : :/0[0]
Destination Address [Port]: 2342:2342:2343:FF04:2341:AA03:2323:8912/128[0]
Source Address [Port]: : :/0[0]
Destination Address [Port]: 2342:2342:2343:FF04:2341:AA03:2323:8912/128[2123]