[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

show security flow session interface

Syntax




show security flow session interface


interface-name

<node (node-id | all |
local | primary)>

Release Information

Command introduced in Release 8.5 of JUNOS software; node options added in Release 9.0 of JUNOS software.

Description

Display information about each session that uses the specified interface. The interface name can be a session's incoming or outgoing interface.

This command is supported on J-series and SRX-series devices.

Options

interface-name—Name of the interface on the router for which to display sessions information.

node—(Optional) For chassis cluster configurations, display sessions that use the specified interface on a specific node.

node-id—Identification number of the node. It can be 0 or 1.
all—Display information about all nodes.
local—Display information about the local node.
primary—Display information about the primary node.

Required Privilege Level

view

List of Sample Output

show security flow session interface Gigabit Ethernet
show security flow session interface reth0.1 node local

Output Fields

Table 42 lists the output fields for the show security flow session interface command. Output fields are listed in the approximate order in which they appear.

Table 42: show security flow session interface Output Fields

Field Name	Field Description
Session ID	Number that identifies the session. You can use this ID to get additional information about the session.
Policy name	Policy that permitted the traffic.
Timeout	Idle timeout after which the session expires.
In	Incoming flow (source and destination IP address, application protocol, and interface).
Out	Reverse flow (source and destination IP address, application protocol, and interface).

show security flow session interface Gigabit Ethernet

user@host> show security flow session interface
ge-0/0/0.0

Session ID: 1658, Policy name: self-traffic-policy/1, Timeout: 1800
  In: 172.23.9.135/3998 --> 10.157.84.52/23;tcp, If: ge-0/0/0.0
  Out: 10.157.84.52/23 --> 172.23.9.135/3998;tcp, If: .local..0
1 sessions displayed

show security flow session interface reth0.1 node local

user@host> show security flow session interface
reth0.1 node local

node0:
--------------------------------------------------------------------------
Session ID: 1, Policy name: sfw1/4, State: Active, Timeout: 60
  In: 1.1.1.2/2000 --> 11.11.1.2/40000;udp, If: reth0.1
  Out: 11.11.1.2/40000 --> 1.1.1.2/2000;udp, If: reth1.1
1 sessions displayed