NetScreen
[Top] [All Lists]

Re: [nn] Command rejected due to writing config conflict

To: "'Andre Dyck'" <dyck.andre@gmail.com>
Subject: Re: [nn] Command rejected due to writing config conflict
From: "Arno MESGUICH" <arno.mesguich@noxs.fr>
Date: Wed, 21 Mar 2007 16:35:53 +0100
Cc: nn@qorbit.net
Delivered-to: sp-com-lists@consult.net
Delivered-to: ns-list2@consult.net
Delivered-to: nn@qorbit.net
In-reply-to: <20070321150139.GB28892@frog.mediaways.net>
List-archive: <http://www.qorbit.net/nn>
List-help: <mailto:nn-request@qorbit.net?subject=help>
List-id: "Netscreen mailing list for netscreen admins." <nn.qorbit.net>
List-post: <mailto:nn@qorbit.net>
List-subscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=subscribe>
List-unsubscribe: <http://qorbit.net/mailman/listinfo/nn>, <mailto:nn-request@qorbit.net?subject=unsubscribe>
Organization: Noxs France
Sender: nn-bounces@qorbit.net
Thread-index: AcdrydbR8D8q+H6UReC6J8GztcfUXAAA7+Xw
Ok, i tried this.... In vain... :

The get socket shows :

xxxxxxxx(M)-> get socket
 Socket  Type   State      Remote IP         Port    Local IP         Port
      0  tcp4/6  listen     ::                   0    ::                 80
      1  tcp4/6  listen     ::                   0    ::                443
      2  tcp4/6  listen     ::                   0    ::                 23
      3  tcp4/6  listen     ::                   0    ::                 22
      4  tcp     listen     0.0.0.0              0    0.0.0.0         12521
    119  tcp     close      0.0.0.0              0    0.0.0.0             0
    128  tcp     close      0.0.0.0              0    0.0.0.0             0
    140  tcp     open       10.12.1.165      36844    126.0.14.49        22


The only socket i can kill is the socket id 140 which is my connection (i
tried and i killed my own connection)
The problem is that i want to kill the other ssh connections seen in the get
console :

xxxxxxxx(M)-> get cons
Console timeout: 0(minute), Page size: 20/20, debug: buffer
privilege 200, config has not been changed!, default save prompt on
exit/reset: yes
ID State  Duration Task Type   Host
 0 Login         4 41220272 SSH    10.12.1.165:57808
 1 Login     18289 41207952 SSH    10.12.1.165:56314
 2 Login     86358 41190704 SSH    10.12.1.165:36584
 3 Logout        0 41211648 Local
 4 Logout        0 41193168 Local
 5 Logout        0 41159904 Local

Look at the duration of sessions id 1 and 2. Those connections should have
been closed since a long time !

Any other idea ? 
Thanks 

-----Message d'origine-----
De : Andre Dyck [mailto:dyck.andre@gmail.com] 
Envoyé : mercredi 21 mars 2007 16:02
À : Arno MESGUICH
Cc : 'DH'; nn@qorbit.net
Objet : Re: [nn] Command rejected due to writing config conflict

Hi Arno,

Arno MESGUICH <arno.mesguich@noxs.fr> [070321 15:31]:
> 
> The problem is that i can't kick all ssh sessions.
> I also tried to clear the sessions from a specific ip (10.12.1.165), to
port
> 22, using "clear session" with filters. But it doesn't seem to work.
> Is it possible to kick only one specific connection ?

try this:

-       CLI:    get socket
-       lookup ID for entry with the specific ip
-       CLI:    cl socket id XX (XX is socket ID)

regards
a.d
-- 
Andre Dyck      dyck.andre@gmail.com    JNCIS-FWV 

_______________________________________________
nn mailing list
nn@qorbit.net
http://qorbit.net/mailman/listinfo/nn

<Prev in Thread] Current Thread [Next in Thread>