Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show security flow session tenant

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show security flow session tenant (tenant-name | all)

Description

Displays the information about the currently active security flow sessions of the tenant systems on the device. You can either view the currently active security flow sessions information for a specific tenant system or for all the tenant systems.

Options

tenant-name

Name of the tenant system.

all

Displays the security flow session information for all the tenant systems.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security flow session tenant command. Output fields are listed in the approximate order in which they appear.

Table 1: show security flow session tenant

Field Name

Field Description

Session ID

Number that identifies the session. You can use this ID to get additional information about the session.

Policy name

Policy that permitted the traffic.

Timeout

Idle timeout after which the session expires.

In

Incoming security flow session details. The incoming security flow session details include the source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets, and bytes.

Out

Reverse security flow session details. The reverse security flow session details include the source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets, and bytes.

Total sessions

Total number of security flow sessions.

Policy name

Name and ID of the policy that the first packet of the security flow session matched.

Tenant

Name of the tenant system.

Sample Output

show security flow session tenant T1

content_copy zoom_out_map
root@host> show security flow session tenant T1
Flow Sessions on FPC7 PIC1:

Session ID: 290000224, Policy name: default-policy-logical-system-32/2, Timeout: 1790, Valid
Tenant: T1
  In: 203.0.113.0/39767 --> 203.0.113.1/23;tcp, Conn Tag: 0x0, If: xe-3/0/1.0, Pkts: 39, Bytes: 2136, CP Session ID: 1225556754
  Out: 203.0.113.1/23 --> 203.0.113.0/39767;tcp, Conn Tag: 0x0, If: lt-0/0/0.101, Pkts: 31, Bytes: 1872, CP Session ID: 1225556754

show security flow session tenant all

content_copy zoom_out_map
root@host> show security flow session tenant all
Flow Sessions on FPC7 PIC1:

Session ID: 290000224, Policy name: default-policy-logical-system-32/2, Timeout: 1790, Valid
Tenant: T1
  In: 203.0.113.0/39767 --> 203.0.113.1/23;tcp, Conn Tag: 0x0, If: xe-3/0/1.0, Pkts: 39, Bytes: 2136, CP Session ID: 1225556754
  Out: 203.0.113.1/23 --> 203.0.113.0/39767;tcp, Conn Tag: 0x0, If: lt-0/0/0.101, Pkts: 31, Bytes: 1872, CP Session ID: 1225556754

Session ID: 290000225, Policy name: default-policy-logical-system-33/2, Timeout: 1790, Valid
Tenant: T2
  In: 203.0.113.3/39767 --> 203.0.113.4/23;tcp, Conn Tag: 0x0, If: lt-0/0/0.103, Pkts: 39, Bytes: 2136, CP Session ID: 1225556755
  Out: 203.0.113.4/23 --> 203.0.113.3/39767;tcp, Conn Tag: 0x0, If: xe-9/0/0.0, Pkts: 31, Bytes: 1872, CP Session ID: 1225556755
Total sessions: 2

Flow Sessions on FPC7 PIC2:
Total sessions: 0

Flow Sessions on FPC7 PIC3:
Total sessions: 0                       

Release Information

Command introduced in Junos OS Release 18.3R1.

footer-navigation