show security firewall-authentication users address
Syntax
show security firewall-authentication users addressip-address<node (node-id| all | local | primary)>
Description
Display information about the users at the specified IP address that are currently authenticated.
Options
addressip-address—IP address of the authentication source.none—Display all the firewall authentication information for users at this IP address.
node—(Optional) For chassis cluster configurations, display user firewall authentication entries on a specific node.node-id—Identification number of the node. It can be 0 or 1.all—Display information about all nodes.local—Display information about the local node.primary—Display information about the primary node.
Required Privilege Level
view
Output Fields
Table 1 lists the output
fields for the show security firewall-authentication users address command. Output fields are listed in the approximate order in which
they appear.
Field Name |
Field Description |
|---|---|
|
User ID. |
|
IP address of the authentication source. |
|
Status of authentication (success or failure). |
|
Path chosen for authentication. |
|
Duration for which the connection exists. |
|
The logical system where the traffic was received. |
|
User traffic received from the zone. |
|
User traffic destined to the zone. |
|
Identification number of the policy. |
|
Name of the policy. |
|
Name of profile used for authentication. |
|
Name of the interface. |
|
Number of bytes sent by the user. |
|
Number of bytes received by the user. |
|
Name of the client group. |
Sample Output
show security firewall-authentication users address 192.0.2.9
user@host>show security firewall-authentication users address 192.0.2.9 Username: hello Source IP: 192.0.2.9 Authentication state: Success Authentication method: Pass-through using Telnet Access time remaining: 0 Source zone: z2 Destination zone: z1 Policy index: 5 Access profile: profile1 Interface Name: ge-0/0/2.0 Bytes sent by this user: 0 Bytes received by this user: 0 Client-groups: my-group1-example, my-group2-example
Sample Output
- show security firewall-authentication users address 192.0.2.9 node local
- show security firewall-authentication users address 198.51.100.29
show security firewall-authentication users address 192.0.2.9 node local
user@host> show security firewall-authentication users address 192.0.2.9 node local node0: -------------------------------------------------------------------------- Username: local1 Source IP: 192.0.2.9 Authentication state: Success Authentication method: Pass-through using Telnet Age: 2 Access time remaining: 4 Source zone: z1 Destination zone: z2 Policy name: POL1 Access profile: p1 Interface Name: reth1.0 Bytes sent by this user: 614 Bytes received by this user: 1880
show security firewall-authentication users address 198.51.100.29
user@host> show security firewall-authentication users address 198.51.100.29 Username: hello Source IP: 198.51.100.29/24 Authentication state: Success Authentication method: User-firewall Age: 0 Access time remaining: 10 Lsys: root-logical-system Source zone: N/A Destination zone: N/A Access profile: test
Release Information
Command introduced in Junos OS Release
8.5. The node options added in Junos OS Release 9.0.