Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents

show security group-vpn server server-cluster

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show security group-vpn server server-cluster <brief> <detail> <group group-name> <group-id group-id> <peer-gateway gateway-name>

Description

Show information about servers in the Group VPNv2 server cluster. Group VPNv2 is supported on SRX300, SRX320, SRX340, SRX345, SRX550HM, SRX1500, SRX4100, SRX4200, and SRX4600 Series Firewalls and vSRX Virtual Firewall instances.

Options

none

Display Group VPNv2 server cluster information for all groups.

brief

(Optional) Display summary output.

detail

(Optional) Display detailed output, including information about exchanges with peer servers in the cluster.

group group-name

(Optional) Display Group VPNv2 server cluster information for the specified group name.

group-id group-id

(Optional) Display Group VPNv2 server cluster information for the specified group identifier.

peer-gateway gateway-name

(Optional) Display Group VPNv2 server cluster information for the specified peer.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security group-vpn server server-cluster command. Output fields are listed in the approximate order in which they appear.

Table 1: show security group-vpn server server-cluster Output Fields

Field Name

Field Description

Group

Group name.

Group Id

Group identifier.

Role

Role of this server in the Group VPNv2 server cluster.

Version Number

32-bit version number included in cluster-update exchanges and DPD probes to support anti-replay. The first cluster-update message sent from the root-server has version number 1. Subsequent cluster-update messages increment the version number by one. (Retransmit messages do not increment the version number.) Upon receipt of a cluster-update message, the sub-server validates the received version number. The received version number must be greater than the version number in the last received message, otherwise the message is discarded. The sub-server responds to a cluster-update message with an ACK message that contains the same version number as the received message. Upon receipt of the ACK message, the root-server checks that the version number is the same as in the message it sent. If the version number is valid, the exchange is considered successful. If the version number is not valid, the original message is retransmitted or the exchange is considered failed.

Peer Gateway

Name of the peer server in the Group VPNv2 server cluster.

Peer IP

IP address of the remote peer server in the Group VPNv2 server cluster.

Role

Role of the peer server in the Group VPNv2 server cluster.

Status

Status of the peer server in the Group VPNv2 server cluster.

Sample Output

show security group-vpn server server-cluster

content_copy zoom_out_map
user@host> show security group-vpn server server-cluster
Group: group200, Group Id: 200
Role: Root-server, Version Number: 1,
  Peer Gateway                     Peer IP           Role                    Status
  sub_server1                      192.168.1.112     Sub-server              Active
  sub_server2                      192.168.1.113     Sub-server              Active

show security group-vpn server server-cluster detail

content_copy zoom_out_map
user@host> show security group-vpn server server-cluster detail
GGroup: group200, Group Id: 200
Role: Root-server, Version Number: 1,

Peer gateway: sub_server1,
  Peer IP: 192.168.1.112, Local IP: 192.168.1.111, VR: vr1,
  Role: Sub-server, Status: Active,
  CLUSTER-INIT send:                 0
  CLUSTER-INIT recv:                 1
  CLUSTER-INIT success:              1
  CLUSTER-INIT fail:                 0
  CLUSTER-INIT dup:                  0
  CLUSTER-INIT abort:                0
  CLUSTER-INIT timeout:              0
  CLUSTER-UPDATE send:               1
  CLUSTER-UPDATE recv:               0
  CLUSTER-UPDATE success:            1
  CLUSTER-UPDATE fail:               0
  CLUSTER-UPDATE abort:              0
  CLUSTER-UPDATE timeout:            0
  CLUSTER-UPDATE pending:            0
  CLUSTER-UPDATE max retry reached:  0
  DPD send:                          5
  DPD send fail:                     0
  DPD ACK recv:                      5  
  DPD ACK invalid seqno:             0
  IPsec SA policy mismatch:          0
  IPsec SA proposal mismatch:        0
  KEK SA proposal mismatch:          0

Peer gateway: sub_server2,
  Peer IP: 192.168.1.113, Local IP: 192.168.1.111, VR: default,
  Role: Sub-server, Status: Active,
  CLUSTER-INIT send:                 0
  CLUSTER-INIT recv:                 1
  CLUSTER-INIT success:              1
  CLUSTER-INIT fail:                 0
  CLUSTER-INIT dup:                  0
  CLUSTER-INIT abort:                0
  CLUSTER-INIT timeout:              0
  CLUSTER-UPDATE send:               1
  CLUSTER-UPDATE recv:               0
  CLUSTER-UPDATE success:            1
  CLUSTER-UPDATE fail:               0
  CLUSTER-UPDATE abort:              0
  CLUSTER-UPDATE timeout:            0
  CLUSTER-UPDATE pending:            0
  CLUSTER-UPDATE max retry reached:  0  
  DPD send:                          6
  DPD send fail:                     0
  DPD ACK recv:                      6
  DPD ACK invalid seqno:             0
  IPsec SA policy mismatch:          0
  IPsec SA proposal mismatch:        0
  KEK SA proposal mismatch:          0

Release Information

Command introduced in Junos OS Release 15.1X49-D30.

footer-navigation