Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show security flow session session-state

date_range 14-Dec-23

Syntax

content_copy zoom_out_map
         show security flow session session-statesession-state        

Description

Display detailed information for the Multinode High Availability session.

Options

  • active-warm—Multinode High Availability session with one active wing and one warm wing.
  • backup—Multinode High Availability Layer 2 deployment backup session
  • warm—Multinode High Availability Layer 3 deployment warm session

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session session-state

Field Name

Field Description

Session ID

A unique number that a server assigns a specific user for the duration of that session.

Policy name

Name and ID of the policy that the first packet of the session matched and that permitted the traffic.

state

State of the session.

timeout

Idle timeout after which the session expires.

Session state

Session state: Valid.

In

For the input flow:

  • Source and destination addresses, ports, and protocol tuple for the input flow.

  • Conn tag: Session connection tag for GRPS tunneling protocol, user plane (GTP-U) flow sessions and Stream Control Transmission Protocol (SCTP) flow sessions.

  • Interface: Input flow interface.

  • Pkts, Bytes, CP Session ID: Packets and bytes matched on the wing, and the associated CP session ID of the wing.

  • state: Session state. The state can be Active or Warm.

  • HA Wing state: High Availability wing state. The state can be Active or Warm.

Out

For the reverse flow:

  • Source and destination addresses, ports, and protocol tuple for the input flow.

  • Conn tag: Session connection tag for GRPS tunneling protocol, user plane (GTP-U) flow sessions and Stream Control Transmission Protocol (SCTP) flow sessions.

  • Interface: reverse flow interface.

  • Pkts, Bytes, CP Session ID: Packets and bytes matched on the wing, and the associated CP session ID of the wing.

  • state: Session state. The state can be Active or Warm.

  • HA Wing state: High Availability wing state. The state can be Active or Warm.

total sessions

Total number of sessions.

Sample Output

show security flow session session-state

content_copy zoom_out_map
user@host> show security flow session session-state active-warm
Flow Sessions on FPC3 PIC0:
Session ID: 805306411, Policy name: All/4, State: Active, Timeout: 1794, Valid
  In: 20.11.1.1/32876 --> 20.11.2.1/22;tcp, Conn Tag: 0x0, If: xe-1/0/3.0, Pkts: 25, Bytes: 5285, CP Session ID: 46, State: Active
  Out: 20.11.2.1/22 --> 20.11.1.1/32876;tcp, Conn Tag: 0x0, If: st0.0, Pkts: 26, Bytes: 6581, CP Session ID: 46, State: Warm
Total sessions: 1
Flow Sessions on FPC3 PIC1:
Total sessions: 0
content_copy zoom_out_map
user@host> show security flow session session-state active-warm
Flow Sessions on FPC3 PIC0:
Session ID: 1099513705861, Policy name: default-policy-logical-system-00/2, HA State: Active, Timeout: 1800, Session State: Valid
  In: 1.0.1.2/3000 --> 6.0.1.2/3000;tcp, Conn Tag: 0x0, If: xe-4/0/2.0, Pkts: 1239, Bytes: 121240, HA Wing State: Warm, CP Session ID: 2046202
  Out: 6.0.1.2/3000 --> 1.0.1.2/3000;tcp, Conn Tag: 0x0, If: xe-4/0/5.0, Pkts: 622, Bytes: 80568, HA Wing State: Active, CP Session ID: 2046202

Total sessions: 1
Flow Sessions on FPC3 PIC1:
Total sessions: 0

Release Information

Command introduced in Junos OS Release 23.4R1.

footer-navigation