clear security flow session nat
Syntax
clear security flow session nat <Enter> | nat-session-parameter
Description
Clear all active sessions with NAT configurations or the active NAT session identified by a session parameter.
Network Address Translation (NAT) is now used primarily to improve traffic security. But it also offers solutions to IP address constraints prior to the advent and implementation of IPv6. NAT allows you to remap one IP address space to another. Network address information in the IP datagram packet headers are modified to achieve the translation.
Options
| application | Name of the application protocol
To display a list of the supported applications on an SRX Series device, enter the following command from configuration mode: user@host# show groups junos-default applications |
| conn-tag | Session identified by the specified conn-tag. A conn-tag is a 32-bit connection tag that uniquely identifies the GPRS tunneling protocol, user plane (GTP-U), and the Stream Control Transmission Protocol (STCP) sessions. The connection tag for GTP-U is the tunnel endpoint identifier (TEID). For SCTP, it is the vTag. The connection ID remains 0 if the connection tag is not used by the sessions. Session connection identifiers are in the following range:
|
| destination-port | Destination port.
|
| destination-prefix | Destination IP prefix or address. |
| family | Protocol family:
|
| interface | Name of incoming or outgoing interface. |
| protocol | IP protocol number. |
| source-port | Source port.
|
| source-prefix | Source IP prefix or IP address. |
Required Privilege Level
clear
Output Fields
Displays a message reporting the number of active sessions cleared. The same message is displayed when any specific option is entered.
Sample Output
command-name
user@host> clear security flow session nat number active sessions cleared
Release Information
Command introduced in Junos OS Release 10.2.