Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Stateful Firewall Operational Mode Commands

Table 1 summarizes the command-line interface (CLI) commands you can use to monitor and troubleshoot stateful firewall services and stateful firewalls in SDK applications. Commands are listed in alphabetical order.

Table 1: Stateful Firewall Services Operational Mode Commands

Task

Command

Clear stateful firewall flows.

clear services stateful-firewall flows

Remove established flows from the flow table (SDK).

clear services stateful-firewall flows

Clear stateful firewall Session Initiation Protocol (SIP) call information.

clear services stateful-firewall sip-call

Clear stateful firewall SIP register information.

clear services stateful-firewall sip-register

Clear stateful firewall statistics.

clear services stateful-firewall statistics

Display stateful firewall conversation information.

show services stateful-firewall conversations

Display stateful firewall flow information.

show services stateful-firewall flows

Display stateful firewall flow table entries (SDK).

show services stateful-firewall flows

Display stateful firewall SIP call information.

show services stateful-firewall sip-call

Display stateful firewall SIP register information.

show services stateful-firewall sip-register

Display stateful firewall statistics.

show services stateful-firewall statistics

Display stateful firewall statistics (SDK). For this command, only rule and ALG statistics are given. In the extensive option, other statistics appear but do not populate correctly; those values are all zeros.

show services stateful-firewall statistics

Display statistics information for the application protocol SIP.

show services stateful-firewall statistics application-protocol sip

Note: Stateful firewall services are supported on the adaptive services interface on the following routers:

  • J Series routers—sp-pim/0/slot
  • M Series and T Series routers—ms-fpc/pic/port, or sp-fpc/pic/port

Stateful firewall services are also supported on the redundant adaptive services interface (rspnumber) on M Series and T Series routers. For information about how to configure stateful firewall services, see the Junos Services Interfaces Configuration Release 11.2.

Published: 2013-01-30

Published: 2013-01-30