Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

show security zones

Syntax

show security zones <detail | terse> < zone-name >

Release Information

Command introduced in Junos OS Release 8.5. The Description output field added in Junos OS Release 12.1.

Description

Display information about security zones.

Options

  • none—Display information about all zones.
  • detail | terse—(Optional) Display the specified level of output.
  • zone-name —(Optional) Display information about the specified zone.

Required Privilege Level

view

List of Sample Output

show security zones
show security zones abc
show security zones abc detail
show security zones terse

Output Fields

Table 1 lists the output fields for the show security zones command. Output fields are listed in the approximate order in which they appear.

Table 1: show security zones Output Fields

Field Name

Field Description

Security zone

Name of the security zone.

Description

Description of the security zone.

Policy configurable

Whether the policy can be configured or not.

Interfaces bound

Number of interfaces in the zone.

Interfaces

List of the interfaces in the zone.

Zone

Name of the zone.

Type

Type of the zone.

Sample Output

show security zones

user@host> show security zones
Functional zone: management
   Description: This is the management zone.
   Policy configurable: No
   Interfaces bound: 1
   Interfaces:
     ge-0/0/0.0
Security zone: Host
   Description: This is the host zone.
   Send reset for non-SYN session TCP packets: Off
   Policy configurable: Yes
   Interfaces bound: 1
   Interfaces:
     fxp0.0
Security zone: abc
   Description: This is the abc zone.
   Send reset for non-SYN session TCP packets: Off
   Policy configurable: Yes
   Interfaces bound: 1
   Interfaces:
     ge-0/0/1.0
Security zone: def
   Description: This is the def zone.
   Send reset for non-SYN session TCP packets: Off
   Policy configurable: Yes
   Interfaces bound: 1
   Interfaces:
     ge-0/0/2.0

Sample Output

show security zones abc

user@host> show security zones abc
Security zone: abc
   Description: This is the abc zone.
   Send reset for non-SYN session TCP packets: Off
   Policy configurable: Yes
   Interfaces bound: 1
   Interfaces:
     ge-0/0/1.0

Sample Output

show security zones abc detail

user@host> show security zones abc detail
Security zone: abc
   Description: This is the abc zone.
   Send reset for non-SYN session TCP packets: Off
   Policy configurable: Yes
   Interfaces bound: 1
   Interfaces:
     ge-0/0/1.0

Sample Output

show security zones terse

user@host> show security zones terse
Zone                    Type
my-internal             Security
my-external             Security
dmz                     Security

Published: 2014-05-22