Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show security ipsec traffic-selector

date_range 09-Dec-23

Syntax

content_copy zoom_out_map
show security ipsec traffic-selector interface-name interface-name
<brief | detail>
<destination-address address>
<fpc slot-number pic slot-number>
<kmd-instance (all | kmd-instance-name)>
<pic slot-number fpc slot-number>
<source-address address>

Description

Display information about the traffic selectors that have been negotiated between the initiator and responder.

Options

interface-name interface-name

Name of the secure tunnel logical interface.

brief | detail

(Optional) Display the specified level of output. The default is brief.

destination-address address

(Optional) Destination IP address.

fpc slot-number pic slot-number

(Optional) Display information about existing traffic selectors on the specified Flexible PIC Concentrator (FPC) slot and PIC slot.

kmd-instance

(Optional) Display information about existing traffic selectors in the key management process (in this case, it is KMD) identified by FPC slot-number and PIC slot-number. This option is used to filter the output.

  • all—All KMD instances running on the Services Processing Unit (SPU).

  • kmd-instance-name—Name of the KMD instance running on the SPU.

pic slot-number fpc slot-number

(Optional) Display information about existing traffic selectors on the specified PIC slot and FPC slot.

source-address address

(Optional) Source IP address.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security ipsec traffic-selector command. Output fields are listed in the approximate order in which they appear.

Table 1: show security ipsec traffic-selector Output Fields

Field Name

Field Description

Level of Output

Tunnel-id

Tunnel ID.

All levels

Interface

Secure tunnel (st0) interface for the traffic selector.

All levels

IKE-ID

Peer IKE ID for the negotiated traffic selector.

All levels

Source IP

Source IP address for the negotiated traffic selector.

All levels

Destination IP

Destination IP address for the negotiated traffic selector.

All levels

Sample Output

show security ipsec traffic-selector interface-name st0.1 detail

content_copy zoom_out_map
user@host> show security ipsec traffic-selector interface-name st0.1 detail
Tunnel ID: 6920601, Interface: st0.1
IKE-ID: DC=Common_component, CN=enodeA, OU=Dept, O=Company, L=City, ST=CA, C=US
Source IP: ipv4 (192.0.2.0-192.0.2.255)
Destination IP: ipv4 (198.51.100.0-198.51.100.255)

Tunnel ID: 77594626, Interface: st0.1
IKE-ID: DC=Common_component, CN=enodeB, OU=Det, O=Company, L=City, ST=CA, C=US
Source IP: ipv4 (192.0.2.0-192.0.2.255)
Destination IP: ipv4 (203.0.113.0-203.0.113.255)

Release Information

Command introduced in Junos OS Release 12.3X48-D10.

footer-navigation