ADC CLI Commands

aaa-session

The following operations can be performed on “aaa-session”:

show kill

show aaa session

Displays all AAA-TM/VPN connections that are bound to the specified user, group, IP address, or IP range.

Synopsis

show aaa session [-userName ] \[-groupName ] \[-intranetIP <ip\_addr|\*> \[]] \[-sessionKey ]

Arguments

userName Name of the AAA user.

groupName Name of the AAA group.

intranetIP IP address or the first address in the intranet IP range.

netmask Subnet mask for the intranet IP range.

sessionKey Show aaa session associated with given session key

Output

publicIP Client’s public IP address

publicPort Client’s public port

IPAddress Citrix ADC’s IP address

port Citrix ADC’s port

privateIP Client’s private/mapped IP address

privatePort Client’s private/mapped port

destIP Destination IP address

destPort Destination port

intranetIP Specifies the Intranet IP

intranetIP6 Specifies the Intranet IP6

peId Core id of the session owner

stateflag devno count

Example

show aaa session clientIp (ClientPort) -> ServerIp(ServerPort) ———————————————- PE id : 0

User name: user1 Session Type: TMSession Key: `````

10.101.1.56 (65223) -> 10.106.190.177 (80 ) PE 1 Done

kill aaa session

Terminates the specified AAA-TM/VPN session.

Synopsis

kill aaa session [-userName ] [-groupName ] [-intranetIP <ip_addr|*> []] [-sessionKey ] [-all]

Arguments

userName Terminate AAA-TM/VPN sessions that belong to the specified user.

groupName Terminate AAA-TM/VPN sessions that belong to any user that is a member of the specified group.

intranetIP Terminate AAA-TM/VPN sessions that are associated with the specified intranet IP address or with an address in the range specified by the address and subnet mask.

netmask When terminating AAA-TM/VPN sessions that are associated with an IP address range, the subnet mask defining the range.

sessionKey Show aaa session associated with given session key

all Terminate all active AAA-TM/VPN sessions.

Example

kill aaa session -user joe ```

aaa-session