show security flow session tenant
Syntax
show security flow session tenant (tenant-name | all)
Description
Displays the information about the currently active security flow sessions of the tenant systems on the device. You can either view the currently active security flow sessions information for a specific tenant system or for all the tenant systems.
Options
tenant-name | Name of the tenant system. |
all | Displays the security flow session information for all the tenant systems. |
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show security flow session tenant
command. Output fields are
listed in the approximate order in which they appear.
Field Name |
Field Description |
---|---|
|
Number that identifies the session. You can use this ID to get additional information about the session. |
|
Policy that permitted the traffic. |
|
Idle timeout after which the session expires. |
|
Incoming security flow session details. The incoming security flow session details include the source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets, and bytes. |
|
Reverse security flow session details. The reverse security flow session details include the source and destination IP addresses, application protocol, interface, session token, route, gateway, tunnel, port sequence, FIN sequence, FIN state, packets, and bytes. |
|
Total number of security flow sessions. |
|
Name and ID of the policy that the first packet of the security flow session matched. |
|
Name of the tenant system. |
Sample Output
show security flow session tenant T1
root@host> show security flow session tenant T1 Flow Sessions on FPC7 PIC1: Session ID: 290000224, Policy name: default-policy-logical-system-32/2, Timeout: 1790, Valid Tenant: T1 In: 203.0.113.0/39767 --> 203.0.113.1/23;tcp, Conn Tag: 0x0, If: xe-3/0/1.0, Pkts: 39, Bytes: 2136, CP Session ID: 1225556754 Out: 203.0.113.1/23 --> 203.0.113.0/39767;tcp, Conn Tag: 0x0, If: lt-0/0/0.101, Pkts: 31, Bytes: 1872, CP Session ID: 1225556754
show security flow session tenant all
root@host> show security flow session tenant all Flow Sessions on FPC7 PIC1: Session ID: 290000224, Policy name: default-policy-logical-system-32/2, Timeout: 1790, Valid Tenant: T1 In: 203.0.113.0/39767 --> 203.0.113.1/23;tcp, Conn Tag: 0x0, If: xe-3/0/1.0, Pkts: 39, Bytes: 2136, CP Session ID: 1225556754 Out: 203.0.113.1/23 --> 203.0.113.0/39767;tcp, Conn Tag: 0x0, If: lt-0/0/0.101, Pkts: 31, Bytes: 1872, CP Session ID: 1225556754 Session ID: 290000225, Policy name: default-policy-logical-system-33/2, Timeout: 1790, Valid Tenant: T2 In: 203.0.113.3/39767 --> 203.0.113.4/23;tcp, Conn Tag: 0x0, If: lt-0/0/0.103, Pkts: 39, Bytes: 2136, CP Session ID: 1225556755 Out: 203.0.113.4/23 --> 203.0.113.3/39767;tcp, Conn Tag: 0x0, If: xe-9/0/0.0, Pkts: 31, Bytes: 1872, CP Session ID: 1225556755 Total sessions: 2 Flow Sessions on FPC7 PIC2: Total sessions: 0 Flow Sessions on FPC7 PIC3: Total sessions: 0
Release Information
Command introduced in Junos OS Release 18.3R1.