Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show interfaces (SRX Series)

Syntax

Description

Display status information and statistics about interfaces on SRX Series appliance running Junos OS.

On SRX Series appliance, on configuring identical IPs on a single interface, you will not see a warning message; instead, you will see a syslog message.

Options

  • interface-name—(Optional) Display standard information about the specified interface. Following is a list of typical interface names. Replace pim with the PIM slot and port with the port number.

    • at- pim/0/port—ATM-over-ADSL or ATM-over-SHDSL interface.

    • ce1-pim/0/ port—Channelized E1 interface.

    • cl-0/0/8—3G wireless modem interface for SRX320 devices.

    • ct1-pim/0/port—Channelized T1 interface.

    • dl0—Dialer Interface for initiating ISDN and USB modem connections.

    • e1-pim/0/port—E1 interface.

    • e3-pim/0/port—E3 interface.

    • fe-pim/0/port—Fast Ethernet interface.

    • ge-pim/0/port—Gigabit Ethernet interface.

    • se-pim/0/port—Serial interface.

    • t1-pim/0/port—T1 (also called DS1) interface.

    • t3-pim/0/port—T3 (also called DS3) interface.

    • wx-slot/0/0—WAN acceleration interface, for the WXC Integrated Services Module (ISM 200).

  • brief | detail | extensive | terse—(Optional) Display the specified level of output.

  • controller—(Optional) Show controller information.

  • descriptions—(Optional) Display interface description strings.

  • destination-class—(Optional) Show statistics for destination class.

  • diagnostics—(Optional) Show interface diagnostics information.

  • far-end-interval—(Optional) Show far end interval statistics.

  • filters—(Optional) Show interface filters information.

  • flow-statistics—(Optional) Show security flow counters and errors.

  • interval—(Optional) Show interval statistics.

  • load-balancing—(Optional) Show load-balancing status.

  • mac-database—(Optional) Show media access control database information.

  • mc-ae—(Optional) Show MC-AE configured interface information.

  • media—(Optional) Display media information.

  • policers—(Optional) Show interface policers information.

  • queue—(Optional) Show queue statistics for this interface.

  • redundancy—(Optional) Show redundancy status.

  • routing—(Optional) Show routing status.

  • routing-instance—(Optional) Name of routing instance.

  • snmp-index—(Optional) SNMP index of interface.

  • source-class—(Optional) Show statistics for source class.

  • statistics—(Optional) Display statistics and detailed output.

  • switch-port—(Optional) Front end port number (0..15).

  • transport—(Optional) Show interface transport information.

  • zone—(Optional) Interface's zone.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show interfaces command. Output fields are listed in the approximate order in which they appear.

Table 1: show interfaces Output Fields

Field Name

Field Description

Level of Output

Physical Interface  

Physical interface

Name of the physical interface.

All levels

Enabled

State of the interface.

All levels

Interface index

Index number of the physical interface, which reflects its initialization sequence.

detail extensive none

SNMP ifIndex

SNMP index number for the physical interface.

detail extensive none

Link-level type

Encapsulation being used on the physical interface.

All levels

Generation

Unique number for use by Juniper Networks technical support only.

detail extensive

MTU

Maximum transmission unit size on the physical interface.

All levels

Link mode

Link mode: Full-duplex or Half-duplex.

Speed

Speed at which the interface is running.

All levels

BPDU error

Bridge protocol data unit (BPDU) error: Detected or None

Loopback

Loopback status: Enabled or Disabled. If loopback is enabled, type of loopback: Local or Remote.

All levels

Source filtering

Source filtering status: Enabled or Disabled.

All levels

Flow control

Flow control status: Enabled or Disabled.

All levels

Auto-negotiation

(Gigabit Ethernet interfaces) Autonegotiation status: Enabled or Disabled.

All levels

Remote-fault

(Gigabit Ethernet interfaces) Remote fault status:

  • Online—Autonegotiation is manually configured as online.

  • Offline—Autonegotiation is manually configured as offline.

All levels

Device flags

Information about the physical device.

All levels

Interface flags

Information about the interface.

All levels

Link flags

Information about the physical link.

All levels

CoS queues

Number of CoS queues configured.

detail extensive none

Current address

Configured MAC address.

detail extensive none

Last flapped

Date, time, and how long ago the interface went from down to up. The format is Last flapped: year-month-day hour:minute:second:timezone (hour:minute:second ago). For example, Last flapped: 2002-04-26 10:52:40 PDT (04:33:20 ago).

detail extensive none

Input Rate

Input rate in bits per second (bps) and packets per second (pps).

None

Output Rate

Output rate in bps and pps.

None

Active alarms and Active defects

Ethernet-specific defects that can prevent the interface from passing packets. When a defect persists for a certain amount of time, it is promoted to an alarm. These fields can contain the value None or Link.

  • None—There are no active defects or alarms.

  • Link—Interface has lost its link state, which usually means that the cable is unplugged, the far-end system has been turned off, or the PIC is malfunctioning.

detail extensive none

Statistics last cleared

Time when the statistics for the interface were last set to zero.

detail extensive

Traffic statistics

Number and rate of bytes and packets received and transmitted on the physical interface.

  • Input bytes—Number of bytes received on the interface.

  • Output bytes—Number of bytes transmitted on the interface.

  • Input packets—Number of packets received on the interface.

  • Output packets—Number of packets transmitted on the interface.

detail extensive

Input errors

Input errors on the interface.

  • Errors—Sum of the incoming frame terminates and FCS errors.

  • Drops—Number of packets dropped by the input queue of the I/O Manager ASIC. If the interface is saturated, this number increments once for every packet that is dropped by the ASIC's RED mechanism.

  • Framing errors—Number of packets received with an invalid frame checksum (FCS).

  • Runts—Number of frames received that are smaller than the runt threshold.

  • Policed discards—Number of frames that the incoming packet match code discarded because they were not recognized or not of interest. Usually, this field reports protocols that Junos OS does not handle.

  • L3 incompletes—Number of incoming packets discarded because they failed Layer 3 (usually IPv4) sanity checks of the header. For example, a frame with less than 20 bytes of available IP header is discarded. L3 incomplete errors can be ignored by configuring the ignore-l3-incompletes statement.

  • L2 channel errors—Number of times the software did not find a valid logical interface for an incoming frame.

  • L2 mismatch timeouts—Number of malformed or short packets that caused the incoming packet handler to discard the frame as unreadable.

  • FIFO errors—Number of FIFO errors in the receive direction that are reported by the ASIC on the PIC. If this value is ever nonzero, the PIC is probably malfunctioning.

  • Resource errors—Sum of transmit drops.

extensive

Output errors

Output errors on the interface.

  • Carrier transitions—Number of times the interface has gone from down to up. This number does not normally increment quickly, increasing only when the cable is unplugged, the far-end system is powered down and then up, or another problem occurs. If the number of carrier transitions increments quickly (perhaps once every 10 seconds), the cable, the far-end system, or the PIC or PIM is malfunctioning.

  • Errors—Sum of the outgoing frame terminates and FCS errors.

  • Drops—Number of packets dropped by the output queue of the I/O Manager ASIC. If the interface is saturated, this number increments once for every packet that is dropped by the ASIC's RED mechanism.

  • Collisions—Number of Ethernet collisions. The Gigabit Ethernet PIC supports only full-duplex operation, so for Gigabit Ethernet PICs, this number should always remain 0. If it is nonzero, there is a software bug.

  • Aged packets—Number of packets that remained in shared packet SDRAM so long that the system automatically purged them. The value in this field should never increment. If it does, it is most likely a software bug or possibly malfunctioning hardware.

  • FIFO errors—Number of FIFO errors in the send direction as reported by the ASIC on the PIC. If this value is ever nonzero, the PIC is probably malfunctioning.

  • HS link CRC errors—Number of errors on the high-speed links between the ASICs responsible for handling the interfaces.

  • MTU errors—Number of packets whose size exceeded the MTU of the interface.

  • Resource errors—Sum of transmit drops.

extensive

Ingress queues

Total number of ingress queues supported on the specified interface.

extensive

Queue counters and queue number

CoS queue number and its associated user-configured forwarding class name.

  • Queued packets—Number of queued packets.

  • Transmitted packets—Number of transmitted packets.

  • Dropped packets—Number of packets dropped by the ASIC's RED mechanism.

detail extensive

MAC statistics

Receive and Transmit statistics reported by the PIC's MAC subsystem, including the following:

  • Total octets and total packets—Total number of octets and packets.

  • Unicast packets, Broadcast packets, and Multicast packets—Number of unicast, broadcast, and multicast packets.

  • CRC/Align errors—Total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a nonintegral number of octets (Alignment Error).

  • FIFO error—Number of FIFO errors that are reported by the ASIC on the PIC. If this value is ever nonzero, the PIC or a cable is probably malfunctioning.

  • MAC control frames—Number of MAC control frames.

  • MAC pause frames—Number of MAC control frames with pause operational code.

  • Oversized frames—There are two possible conditions regarding the number of oversized frames:

    • Packet length exceeds 1518 octets, or

    • Packet length exceeds MRU

  • Jabber frames—Number of frames that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either an FCS error or an alignment error. This definition of jabber is different from the definition in IEEE-802.3 section 8.2.1.5 (10BASE5) and section 10.3.1.4 (10BASE2). These documents define jabber as the condition in which any packet exceeds 20 ms. The allowed range to detect jabber is from 20 ms to 150 ms.

  • Fragment frames—Total number of packets that were less than 64 octets in length (excluding framing bits, but including FCS octets) and had either an FCS error or an alignment error. Fragment frames normally increment because both runts (which are normal occurrences caused by collisions) and noise hits are counted.

  • VLAN tagged frames—Number of frames that are VLAN tagged. The system uses the TPID of 0x8100 in the frame to determine whether a frame is tagged or not.

  • Code violations—Number of times an event caused the PHY to indicate “Data reception error” or “invalid data symbol error.”

extensive

Filter statistics

Receive and Transmit statistics reported by the PIC's MAC address filter subsystem. The filtering is done by the content-addressable memory (CAM) on the PIC. The filter examines a packet's source and destination MAC addresses to determine whether the packet should enter the system or be rejected.

  • Input packet count—Number of packets received from the MAC hardware that the filter processed.

  • Input packet rejects—Number of packets that the filter rejected because of either the source MAC address or the destination MAC address.

  • Input DA rejects—Number of packets that the filter rejected because the destination MAC address of the packet is not on the accept list. It is normal for this value to increment. When it increments very quickly and no traffic is entering the device from the far-end system, either there is a bad ARP entry on the far-end system, or multicast routing is not on and the far-end system is sending many multicast packets to the local device (which the router is rejecting).

  • Input SA rejects—Number of packets that the filter rejected because the source MAC address of the packet is not on the accept list. The value in this field should increment only if source MAC address filtering has been enabled. If filtering is enabled, if the value increments quickly, and if the system is not receiving traffic that it should from the far-end system, it means that the user-configured source MAC addresses for this interface are incorrect.

  • Output packet count—Number of packets that the filter has given to the MAC hardware.

  • Output packet pad count—Number of packets the filter padded to the minimum Ethernet size (60 bytes) before giving the packet to the MAC hardware. Usually, padding is done only on small ARP packets, but some very small IP packets can also require padding. If this value increments rapidly, either the system is trying to find an ARP entry for a far-end system that does not exist or it is misconfigured.

  • Output packet error count—Number of packets with an indicated error that the filter was given to transmit. These packets are usually aged packets or are the result of a bandwidth problem on the FPC hardware. On a normal system, the value of this field should not increment.

  • CAM destination filters, CAM source filters—Number of entries in the CAM dedicated to destination and source MAC address filters. There can only be up to 64 source entries. If source filtering is disabled, which is the default, the values for these fields should be 0.

extensive

Autonegotiation information

Information about link autonegotiation.

  • Negotiation status:

    • Incomplete—Ethernet interface has the speed or link mode configured.

    • No autonegotiation—Remote Ethernet interface has the speed or link mode configured, or does not perform autonegotiation.

    • Complete—Ethernet interface is connected to a device that performs autonegotiation and the autonegotiation process is successful.

extensive

Packet Forwarding Engine configuration

Information about the configuration of the Packet Forwarding Engine:

  • Destination slot—FPC slot number.

extensive

CoS information

Information about the CoS queue for the physical interface.

  • CoS transmit queue—Queue number and its associated user-configured forwarding class name.

  • Bandwidth %—Percentage of bandwidth allocated to the queue.

  • Bandwidth bps—Bandwidth allocated to the queue (in bps).

  • Buffer %—Percentage of buffer space allocated to the queue.

  • Buffer usec—Amount of buffer space allocated to the queue, in microseconds. This value is nonzero only if the buffer size is configured in terms of time.

  • Priority—Queue priority: low or high.

  • Limit—Displayed if rate limiting is configured for the queue. Possible values are none and exact. If exact is configured, the queue transmits only up to the configured bandwidth, even if excess bandwidth is available. If none is configured, the queue transmits beyond the configured bandwidth if bandwidth is available.

extensive

Interface transmit statistics

Status of the interface-transmit-statistics configuration: Enabled or Disabled.

detail extensive

Queue counters (Egress)

CoS queue number and its associated user-configured forwarding class name.

  • Queued packets—Number of queued packets.

  • Transmitted packets—Number of transmitted packets.

  • Dropped packets—Number of packets dropped by the ASIC's RED mechanism.

detail extensive

Logical Interface  

Logical interface

Name of the logical interface.

All levels

Index

Index number of the logical interface, which reflects its initialization sequence.

detail extensive none

SNMP ifIndex

SNMP interface index number for the logical interface.

detail extensive none

Generation

Unique number for use by Juniper Networks technical support only.

detail extensive

Flags

Information about the logical interface.

All levels

Encapsulation

Encapsulation on the logical interface.

All levels

Traffic statistics

Number and rate of bytes and packets received and transmitted on the specified interface set.

  • Input bytes, Output bytes—Number of bytes received and transmitted on the interface set. The value in this field also includes the Layer 2 overhead bytes for ingress or egress traffic on Ethernet interfaces if you enable accounting of Layer 2 overhead at the PIC level or the logical interface level.

  • Input packets, Output packets—Number of packets received and transmitted on the interface set.

detail extensive

Local statistics

Number and rate of bytes and packets destined to the device.

extensive

Transit statistics

Number and rate of bytes and packets transiting the switch.

Note:

For Gigabit Ethernet intelligent queuing 2 (IQ2) interfaces, the logical interface egress statistics might not accurately reflect the traffic on the wire when output shaping is applied. Traffic management output shaping might drop packets after they are tallied by the Output bytes and Output packets interface counters. However, correct values display for both of these egress statistics when per-unit scheduling is enabled for the Gigabit Ethernet IQ2 physical interface, or when a single logical interface is actively using a shared scheduler.

extensive

Security

Security zones that interface belongs to.

extensive

Flow Input statistics

Statistics on packets received by flow module.

extensive

Flow Output statistics

Statistics on packets sent by flow module.

extensive

Flow error statistics (Packets dropped due to)

Statistics on errors in the flow module.

extensive

Protocol

Protocol family.

detail extensive none

MTU

Maximum transmission unit size on the logical interface.

detail extensive none

Generation

Unique number for use by Juniper Networks technical support only.

detail extensive

Route Table

Route table in which the logical interface address is located. For example, 0 refers to the routing table inet.0.

detail extensive none

Flags

Information about protocol family flags. .

detail extensive

Addresses, Flags

Information about the address flags..

detail extensive none

Destination

IP address of the remote side of the connection.

detail extensive none

Local

IP address of the logical interface.

detail extensive none

Broadcast

Broadcast address of the logical interface.

detail extensive none

Generation

Unique number for use by Juniper Networks technical support only.

detail extensive

Sample Output

show interfaces Gigabit Ethernet

Sample Output

show interfaces brief (Gigabit Ethernet)

Sample Output

show interfaces detail (Gigabit Ethernet)

Sample Output

show interfaces extensive (Gigabit Ethernet)

Sample Output

show interfaces terse

Sample Output

show interfaces controller (Channelized E1 IQ with Logical E1)

show interfaces controller (Channelized E1 IQ with Logical DS0)

Sample Output

show interfaces descriptions

Sample Output

show interfaces destination-class all

Sample Output

show interfaces diagnostics optics

Sample Output

show interfaces far-end-interval coc12-5/2/0

show interfaces far-end-interval coc1-5/2/1:1

Sample Output

show interfaces filters

Sample Output

show interfaces flow-statistics (Gigabit Ethernet)

Sample Output

show interfaces interval (Channelized OC12)

show interfaces interval (E3)

show interfaces interval (SONET/SDH)

Sample Output

show interfaces load-balancing

show interfaces load-balancing detail

Sample Output

show interfaces mac-database (All MAC Addresses on a Port)

show interfaces mac-database (All MAC Addresses on a Service)

show interfaces mac-database mac-address

Sample Output

show interfaces mc-ae

show interfaces media (SONET/SDH)

The following example displays the output fields unique to the show interfaces media command for a SONET interface (with no level of output specified):

Sample Output

show interfaces policers

show interfaces policers interface-name

Sample Output

show interfaces queue

 The following truncated example shows the CoS queue sizes for queues 0, 1, and 3. Queue 1 has a queue buffer size (guaranteed allocated memory) of 9192 bytes.

Sample Output

show interfaces redundancy

show interfaces redundancy (Aggregated Ethernet)

show interfaces redundancy detail

Sample Output

show interfaces routing brief

show interfaces routing detail

Sample Output

show interfaces routing-instance all

Sample Output

show interfaces snmp-index

Sample Output

show interfaces source-class all

Sample Output

show interfaces statistics (Fast Ethernet)

Sample Output

show interfaces switch-port

Sample Output

show interfaces transport pm

Sample Output

show security zones

Release Information

Command modified in Junos OS Release 9.5.