Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show services policies detail

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show services policies detail

Description

Display detailed information about configured services policies.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services policies detail command. Output fields are listed in the approximate order in which they appear.

Table 1: show services policies detail

Field Name

Description

Default policy

Policy

Action type

State

Status of the policy:

  • enabled: The policy can be used in the policy lookup process, which determines access rights for a packet and the action taken in regard to it.

  • disabled: The policy cannot be used in the policy lookup process, and therefore it is not available for access control.

Index

Internal number associated with the policy.

Scope policy

Policy type

Sequence number

Number of the policy within a given context. For example, three policies that are applicable in a from-zoneA-to-zoneB context might be ordered with sequence numbers 1,2,3. Also, in a from-zoneC-to-zoneD context, four policies might have sequence numbers 1,2,3,4.

Stateful firewall rule

Service set

Service set name.

Interface

Interface name.

Source addresses

The names and corresponding IP addresses for the policy. Address sets are resolved to their individual address name-IP address pairs.

Destination addresses

Name of the destination address (or address set) as it was entered in the destination zone’s address book. A packet’s destination address must match this value for the policy to apply to it.

Application

IP protocol

Inactivity timeout

Source port range

Destination port range

Per policy TCP Options

Sample Output

show services policies detail

content_copy zoom_out_map
user@host> show services policies detail
Default policy: deny-all 
Policy: p1, action-type: permit, State: enabled, Index: 1007, Scope Policy: 0 
  Policy Type: Configured 
  Sequence number: 1 
  Stateful firewall rule: sfw1, Service set: JNPR-NH-SSET, Interface: vms-0/2/0, Match Direction: input 
  Source addresses: 
    any-ipv4(global): 0.0.0.0/0 
  Destination addresses: 
    any-ipv4(global): 0.0.0.0/0 
    any-ipv6(global): ::/0 
  Application: junos-ftp 
    IP protocol: tcp, ALG: ftp, Inactivity timeout: 1800 
      Source port range: [0-0] 
      Destination port range: [21-21] 
  Per policy TCP Options: SYN check: No, SEQ check: No, Window scale: No 
Policy: p2, action-type: permit, State: enabled, Index: 1008, Scope Policy: 0 
  Policy Type: Configured 
  Sequence number: 2 
  Stateful firewall rule: sfw1, Service set: JNPR-NH-SSET, Interface: vms-0/2/0, Match Direction: input 
  Source addresses: 
    any-ipv4(global): 0.0.0.0/0 
    any-ipv6(global): ::/0 
  Destination addresses: 
    any-ipv4(global): 0.0.0.0/0 
    any-ipv6(global): ::/0 
  Application: any 
    IP protocol: 0, ALG: 0, Inactivity timeout: 0 
      Source port range: [0-0] 
      Destination port range: [0-0] 
  Per policy TCP Options: SYN check: No, SEQ check: No, Window scale: No 
 

Release Information

Command introduced in Junos OS Release 19.3R2.

footer-navigation