show security ipsec traffic-selector
Syntax
show security ipsec traffic-selector interface-name interface-name<brief | detail><destination-address address><fpc slot-number pic slot-number><kmd-instance (all | kmd-instance-name)><pic slot-number fpc slot-number><source-address address>
Description
Display information about the traffic selectors that have been negotiated between the initiator and responder.
Options
| interface-name interface-name | Name of the secure tunnel logical interface. |
brief | detail |
(Optional) Display the specified level of output.
The default is |
| destination-address address | (Optional) Destination IP address. |
| fpc slot-number pic slot-number | (Optional) Display information about existing traffic selectors on the specified Flexible PIC Concentrator (FPC) slot and PIC slot. |
| kmd-instance | (Optional) Display information about existing traffic selectors in the key management process (in this case, it is KMD) identified by FPC slot-number and PIC slot-number. This option is used to filter the output.
|
| pic slot-number fpc slot-number | (Optional) Display information about existing traffic selectors on the specified PIC slot and FPC slot. |
| source-address address | (Optional) Source IP address. |
Required Privilege Level
view
Output Fields
Table 1 lists the
output fields for the show security ipsec traffic-selector command. Output fields are listed in the approximate order in which
they appear.
Field Name |
Field Description |
Level of Output |
|---|---|---|
Tunnel-id |
Tunnel ID. |
All levels |
Interface |
Secure tunnel (st0) interface for the traffic selector. |
All levels |
IKE-ID |
Peer IKE ID for the negotiated traffic selector. |
All levels |
Source IP |
Source IP address for the negotiated traffic selector. |
All levels |
Destination IP |
Destination IP address for the negotiated traffic selector. |
All levels |
Sample Output
show security ipsec traffic-selector interface-name st0.1 detail
user@host> show security ipsec traffic-selector interface-name st0.1 detail Tunnel ID: 6920601, Interface: st0.1 IKE-ID: DC=Common_component, CN=enodeA, OU=Dept, O=Company, L=City, ST=CA, C=US Source IP: ipv4 (192.0.2.0-192.0.2.255) Destination IP: ipv4 (198.51.100.0-198.51.100.255) Tunnel ID: 77594626, Interface: st0.1 IKE-ID: DC=Common_component, CN=enodeB, OU=Det, O=Company, L=City, ST=CA, C=US Source IP: ipv4 (192.0.2.0-192.0.2.255) Destination IP: ipv4 (203.0.113.0-203.0.113.255)
Release Information
Command introduced in Junos OS Release 12.3X48-D10.