TCP session timeout for unverified RST: 30 secs TCP session timeout in TIME_WAIT: 15 secs TCP half-closed session timeout: 120 secs
TCP session timeout before 3-way handshaking: 10 secs TCP session timeout before SYN-ACK received: 5 secs Packet rate: 12/s Throughput: 8 kbps New connection establish rate: 0 cps Number of sessions created since bootup: 374948 The first section of the output is dynamic, meaning it'd yield different outputs on every execution of this command. Session parameters include, but not limited to, the total and the current number of sessions, timeouts, setup.
Show session info - This command provides information on session parameters set along with counters for packet rate, new connections, etc. If the commits are taking too long (longer than an established "baseline"), high management CPU can be one of the causes. This command follows the same format as running 'top' command on Linux machines. Ideally, the swap memory usage should not be too much or degrade, which would indicate memory leak or simply too much load. This command can also be used to look up memory usage and swap usage if any. The ' up' mentioned here refers to the uptime of the Management plane. Show system resources - This command provides real-time usage of Management CPU usage. Global-protect-clientless-vpn-release-date: 5 13:47:50 Global-protect-clientless-vpn-version: 63-78 Global-protect-datafile-release-date: unknown Global-protect-client-package-version: 4.0.0 This will reset if thedata plane or the whole device has been restarted. The ' uptime' mentioned here is referring to the dataplane uptime. Show system info - This command will provide us a snapshot of the model, PAN-OS, dynamic updates (app, threats, AV, WF, URL) versions, among other things. NOTE: This document is a general guideline and should not be taken as the final diagnosis of the issue. The issues can vary from persistent to intermittent or sporadic in nature.
Below are some commands (with a brief description) which can be useful in troubleshooting Management or Traffic-related issues.
0 kommentar(er)
