request support information
List of Syntax
SyntaxSyntax (SRX Series devices)
Syntax (EX Series Switch)
Syntax (MX Series Router)
Syntax (TX Matrix Router)
Syntax (TX Matrix Plus Router)
Syntax
Syntax (SRX Series devices)
Syntax (EX Series Switch)
Syntax (MX Series Router)
Syntax (TX Matrix Router)
Syntax (TX Matrix Plus Router)
Release Information
Command introduced before Junos OS Release 7.4.
Option brief introduced in Junos OS Release 13.2.
Option secure-gateway introduced in Junos OS Release 15.1X49-D110 for SRX5400, SRX5600, and SRX5800 devices.
Options security-components and ipsec-vpn introduced in Junos OS Release 20.2R1.
Description
Display all configuration data for the system, including data hidden with the apply-flags omit command. Issue this command before contacting customer support, and then include the command output in your support request. Output from this command varies somewhat, depending on which platform you issue the command from. However, the command always executes a series of show commands, with the appropriate information for your device automatically included.
Options
Replace number with the following values depending on the LCC configuration:
0 through 3, when T640 routers are connected to a TX Matrix router in a routing matrix.
0 through 3, when T1600 routers are connected to a TX Matrix Plus router in a routing matrix.
0 through 7, when T1600 routers are connected to a TX Matrix Plus router with 3D SIBs in a routing matrix.
0, 2, 4, or 6, when T4000 routers are connected to a TX Matrix Plus router with 3D SIBs in a routing matrix.
ipsec-vpn—Generate security report for IPsec VPN.
node-id—Display detailed system status report for a specific node. Replace node-id with a value of 0 or 1.
all—Display detailed system status report for all nodes.
local—Display detailed system status report for the local node.
primary—Display detailed system status report for the primary node.
Additional Information
The show commands issued as a result of this command vary depending on which platform you issue the command from. Output is always appropriate for the device. For example, Table 1 lists the show commands that are called when you issue request support information on an MX Series router.
Table 1: Sample show Commands Called by the request support information command on an MX Series Router
show chassis alarms no-forwarding | show interfaces extensive no-forwarding |
show chassis environment no-forwarding | show krt queue |
show chassis fabric degradation | show krt state |
show chassis fabric destinations | show pfe statistics error |
show chassis fabric fpcs | show pfe statistics traffic |
show chassis fabric plane | show route summary |
show chassis fabric reachability | show system boot-messages no-forwarding |
show chassis fabric summary | show system buffer no-forwarding |
show chassis fpc | show system commit |
show chassis fpc detail | show system core-dumps no-forwarding |
show chassis firmware no-forwarding | show system processes extensive no-forwarding |
show chassis hardware detail no-forwarding | show system queues no-forwarding |
show chassis hardware extensive no-forwarding | show system statistics no-forwarding |
show pfe statistics traffic | show system storage no-forwarding |
show chassis power | show system uptime no-forwarding |
show chassis routing-engine no-forwarding | show system virtual-memory no-forwarding |
show configuration | except SECRET-DATA | show version detail no-forwarding |
Show command show interfaces extensive no-formwarding is not supported for request support information brief command.
The no-forwarding option ensures that all mgd processes associated with the show command are properly halted if you break into the output (Ctrl+C) while the command is still running.
The no-forwarding option ensures that all mgd processes associated with the show command are properly halted if you break into the output (Ctrl+C) while the command is still running.
Table 2 lists the show commands that are called when you issue request support information ipsec-vpn on a MX Series Router.
Table 2: Sample show commands called by the request support information ipsec-vpn command on an MX Series Router
show version no-forwarding | no-more | show services ipsec-vpn ipsec statistics | no-more |
show system uptime no-forwarding | no-more | show security pki local-certificate detail no-forwarding |
show system core-dumps no-forwarding | no-more | show security pki local-certificate system-generated detail no-forwarding |
show system processes extensive no-forwarding | grep ike | show security pki ca-certificate detail no-forwarding |
show system processes extensive no-forwarding | grep kmd | show security pki crl detail no-forwarding |
show chassis fpc pic-status | show security pki certificate-request detail no-forwarding |
show chassis cluster status | show security pki statistics no-forwarding | no-more |
show chassis cluster interfaces | show ipsec memory-usage | no-more |
show chassis cluster information | show services sessions analysis | no-more |
show configuration | no-more | show services sessions extensive | no-more |
show route forwarding-table | no-more | show pfe statistics traffic | no-more |
show interfaces extensive | no-more | show pfe statistics exceptions | no-more |
show services ipsec-vpn ike security-associations detail | no-more | show pfe statistics error | no-more |
show services ipsec-vpn ike statistics | no-more | show extension-provider system processes extensive | match mspmand |
show services ipsec-vpn ipsec security-associations detail | no-more | show services service-sets statistics packet-drops | no-more |
plugin ipsec show stats all | plugin ipsec show sadb detail |
plugin ipsec show rules all | plugin ipsec show rules no-sa |
plugin ipsec show sa-trigger-seqno | plugin ipsec show invalid-spi brief |
plugin ipsec show invalid-spi history | show msp pkt-cntrs terse |
show msp pkt-cntrs | show msp plugins pkt-cntrs |
show msp service-sets | show msp service-sets summary |
show msp service-sets mem-usage | show msp ip-stats |
show msp mem usage | show msp mem ocwm jnx-msp-shm-data mum |
show msp mem ocwm jnx-msp-shm-data mum objcache | show msp stats ctrl |
show msp cpu-throttle | show svcs-xlp intf counters |
show svcs-xlp exceptions | show svcs-xlp exceptions detail |
show svcs-xlp cpu stats | show svcs-xlp fifo |
show svcs-xlp poe stats | show svcs-xlp jbuf-stats |
plugin ha show ckpt | plugin ha show ha-pvt-obj stats |
plugin ha show info-ha-plugin | plugin ha show stats |
plugin ha show udp | plugin ha show mtu |
plugin ha show junos-sync stats | plugin ha show junos-sync stats aggregation |
plugin ha show junos-sync stats history |
Starting in Release 20.2R1, Junos OS introduces ipsec-vpn option to the existing request support information command. The request support information ipsec-vpn command displays all the configurations, states, and statistics at Routing Engine and Service Card level. This new option helps in debugging IPsec-VPN related issues. The information collection is streamlined and reduces the output file size.
Table 3 lists the show commands that are called when you issue request support information on an EX Series 9200 switch. The table does not include the no-forwarding option, which is used for purposes of the request support information, itself.
Table 3: Sample show Commands Called by the request support information command on an EX Series 9200 Switch
show interfaces extensive | |
show chassis fpcdetail | show spanning-tree bridge detail |
show chassis hardware detail | |
show configuration | except SECRET-DATA | display omit | |
show system processes extensive | |
show vlans extensive | |
show vrrp summary |
Table 4 lists the show commands that are called when you issue request support information on SRX Series devices.
Table 4: Sample show Commands Called by the request support information command on SRX Series devices
show pfe statistics traffic | show interfaces queue |
show chassis environment no-forwarding | show security monitoring fpc 0 |
show chassis fpc detail | show system license |
show system storage no-forwarding | show security policies hit-count no-forwarding |
show system virtual-memory no-forwarding | show security policies information no-forwarding |
show system buffer no-forwarding | show security dns-cache |
show system queues no-forwarding | show security flow statistics |
show chassis hardware extensive no-forwarding | show security flow status |
show krt queue | show security flow session summary no-forwarding |
show route summary | show security utm anti-virus status |
show version no-forwarding | show system processes extensive no-forwarding |
show system uptime no-forwarding | show chassis fpc pic-status |
show system core-dumps no-forwarding | show chassis cluster status |
show chassis cluster interfaces | show chassis cluster information |
show route forwarding-table | show interfaces extensive |
show security pki local-certificate detail no-forwarding | show security pki local-certificate system-generated detail no-forwarding |
show security pki ca-certificate detail no-forwarding | show security pki crl detail no-forwarding |
show security pki certificate-request detail no-forwarding | show security pki statistics no-forwarding |
show security internal-security-association no-forwarding | show security ike security-associations detail no-forwarding |
show security ike active-peer stats no-forwarding | show security ike stats no-forwarding |
show security ipsec security-associations detail no-forwarding | show security ipsec statistics no-forwarding |
show security ipsec tunnel-distribution no-forwarding | show security ipsec tunnel-distribution summary no-forwarding |
show security ipsec next-hop-tunnels no-forwarding | show security ipsec tunnel-events-statistics no-forwarding |
show security ipsec inactive-tunnels no-forwarding | show pfe statistics traffic |
show usp ipsec sa | show usp ipsec pmi-sa |
show usp ipsec global-stat | show usp ipsec pkt-stat |
show usp ipsec stat | show usp ipsec spd table |
show usp ipsec spd stats | show usp ipsec traffic-selector stats |
show usp ipsec traffic-selector pkt-stats | show usp ipsec tunnel-distribution |
show usp ipsec nsp-tunnel-table | show usp ipsec nhtb |
show usp ipsec ager stats | show talus number stats all |
show talus number drop-pkt | show talus number queue-bp |
show jspec talus number registers cntr fi_bp number | show jspec talus number registers cntr fi_bp number |
show jspec talus number registers cntr fi_bp number | show jspec talus number registers cntr fi_bp number |
show jspec talus number registers cntr fo_free number | show jspec talus number registers cntr fo_free number |
show jspec talus number registers cntr fo_free number | show jspec talus number registers cntr fo_free number |
show jspec talus number registers cntr ing_eop number | show jspec talus number registers cntr ing_eop number |
show jspec talus number registers cntr ing_eop number | show jspec talus number registers cntr ing_eop number |
Starting in Junos OS Release 15.1X49-D110, on SRX5400, SRX5600, and SRX5800 devices, a new option secure-gateway is added to the existing request support information command. This new option displays all the required information that is relevant for secure gateway deployment scenarios. In Junos OS Release 15.1X49-D100 and earlier, request support information displays the information about all features that might not be relevant for secure gateway deployments.
Starting in Junos OS Release 20.2R1, we’ve introduced the CLI ipsec-vpn option to the existing request support information security-components command. This new option displays all the configuration, states, and statistics information necessary for debugging IPsec VPN related issues.
Required Privilege Level
maintenance
List of Sample Output
request support information | saverequest support information scc (TX Matrix Router)
request support information sfc (TX Matrix Plus Router)
request support information (SRX Series device)
request support information ipsec-vpn (MX Series Router)
Output Fields
For information about output fields, see the description for the specific command-–listed in the output– in which you are interested.
Sample Output
request support information | save
user@host> request support information | save
hostA
Wrote 1143 lines of output to 'hostA'
user@host>
request support information scc (TX Matrix Router)
user@host> request support information scc
user@host> show system uptime
scc-re0: -------------------------------------------------------------------------- Current time: 2004-09-15 00:49:06 PDT System booted: 2004-09-14 12:53:26 PDT (11:55:40 ago) Protocols started: 2004-09-14 12:54:19 PDT (11:54:47 ago) Last configured: 2004-09-14 13:07:47 PDT (11:41:19 ago) by user 12:49AM PDT up 11:56, 3 users, load averages: 0.00, 0.02, 0.03 lcc0-re0: -------------------------------------------------------------------------- Current time: 2004-09-15 00:49:06 PDT System booted: 2004-09-14 15:36:41 PDT (09:12:25 ago) Last configured: 2004-09-14 15:38:06 PDT (09:11:00 ago) by root 12:49AM PDT up 9:12, 0 users, load averages: 0.13, 0.05, 0.02 lcc2-re0: -------------------------------------------------------------------------- Current time: 2004-09-15 00:49:06 PDT System booted: 2004-09-14 15:36:47 PDT (09:12:19 ago) Last configured: 2004-09-14 15:38:09 PDT (09:10:57 ago) by root 12:49AM PDT up 9:12, 0 users, load averages: 0.00, 0.00, 0.00
user@host> show version
scc-re0: -------------------------------------------------------------------------- Hostname: hostA Model: TX Matrix JUNOS Base OS boot [7.0I20040914_1707_mapte] JUNOS Base OS Software Suite [7.0I20040907_1922_rtuplur] JUNOS Kernel Software Suite [7.0I20040914_1707_mapte] JUNOS Packet Forwarding Engine Support (T Series) [7.0I20040914_1707_mapte] JUNOS Routing Software Suite [7.0I20040914_1707_mapte] JUNOS Online Documentation [7.0I20040914_1707_mapte] JUNOS Crypto Software Suite [7.0I20040914_1707_mapte] JUNOS Support Tools Package [7.0-20040908.0] lcc0-re0: -------------------------------------------------------------------------- Hostname: hostB Model: t640 JUNOS Base OS boot [7.0I20040914_1707_mapte] JUNOS Base OS Software Suite [7.0I20040907_1922_rtuplur] JUNOS Kernel Software Suite [7.0I20040914_1707_mapte] JUNOS Packet Forwarding Engine Support (T-Series) [7.0I20040914_1707_mapte] JUNOS Routing Software Suite [7.0I20040914_1707_mapte] JUNOS Online Documentation [7.0I20040914_1707_mapte] JUNOS Crypto Software Suite [7.0I20040914_1707_mapte] lcc2-re0: -------------------------------------------------------------------------- Hostname: dewey Model: t640 JUNOS Base OS boot [7.0I20040914_1707_mapte] JUNOS Base OS Software Suite [7.0I20040907_1922_rtuplur] JUNOS Kernel Software Suite [7.0I20040914_1707_mapte] JUNOS Packet Forwarding Engine Support (T-Series) [7.0I20040914_1707_mapte] JUNOS Routing Software Suite [7.0I20040914_1707_mapte] JUNOS Online Documentation [7.0I20040914_1707_mapte] JUNOS Crypto Software Suite [7.0I20040914_1707_mapte] ...
request support information sfc (TX Matrix Plus Router)
user@host> request support information sfc 0
sfc0-re0: -------------------------------------------------------------------------- root@host> show system uptime no-forwarding Current time: 2009-05-25 03:43:28 PDT System booted: 2009-05-25 01:15:04 PDT (02:28:24 ago) Protocols started: 2009-05-25 01:16:01 PDT (02:27:27 ago) Last configured: 2009-05-25 03:03:42 PDT (00:39:46 ago) by user 3:43AM up 2:28, 7 users, load averages: 0.00, 0.00, 0.00 root@host> show version detail no-forwarding Hostname: aj Model: txp JUNOS Base OS boot [9.6-20090519.0] JUNOS Base OS Software Suite [9.6-20090519.0] JUNOS Kernel Software Suite [9.6-20090519.0] ... root@host> show system core-dumps no-forwarding -rw------- 1 root wheel 152223744 May 25 03:10 /var/crash/vmcore.0 -rw-r--r-- 1 bdeleon field 139417 May 22 10:17 /var/tmp/aj-core-apps-config-n-gres.txt ... root@host> show chassis alarms no-forwarding 9 alarms currently active Alarm time Class Description 2009-05-25 01:27:08 PDT Minor LCC 0 Minor Errors 2009-05-25 01:27:08 PDT Minor Spare SIB F13 6 Fault ... root@host> show chassis hardware detail no-forwarding Hardware inventory: Item Version Part number Serial number Description Chassis JN112F007AHB TXP Midplane REV 05 710-022574 TS4027 SFC Midplane FPM Display REV 03 710-024027 DX0282 TXP FPM Display ... root@host> show system processes extensive no-forwarding last pid: 6639; load averages: 0.00, 0.00, 0.00 up 0+02:28:54 03:43:28 161 processes: 5 running, 138 sleeping, 18 waiting Mem: 236M Active, 227M Inact, 104M Wired, 392M Cache, 69M Buf, 2296M Free Swap: 2048M Total, 2048M Free PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND 11 root 1 171 52 0K 12K RUN 143:00 96.78% idle 1530 root 1 96 0 38160K 24812K select 2:54 1.12% chassisd 1343 root 1 76 0 0K 12K 0:18 0.00% bcmLINK.0 1345 root 1 76 0 0K 12K 0:15 0.00% brq17: uhci1 uhci* ... root@host> show pfe statistics error Slot 4 SLCHIP Error statistics: SLCHIP 0 1 ------------------------------------------------------- Lin XIF : 0 0 Lin SRCTL : 0 0 ... root@host>show pfe statistics traffic Packet Forwarding Engine traffic statistics: Input packets: 2590754 0 pps Output packets: 2640010 0 pps Packet Forwarding Engine local traffic statistics: Local packets input : 2064527 Local packets output : 2115925 Software input control plane drops : 0 Software input high drops : 0 Software input medium drops : 0 Software input low drops : 0 Software output drops : 0 Hardware input drops : 0 Packet Forwarding Engine local protocol statistics: HDLC keepalives : 0 ATM OAM : 0 Frame Relay LMI : 0 PPP LCP/NCP : 0 OSPF hello : 20048 OSPF3 hello : 109 RSVP hello : 3485 LDP hello : 7191 BFD : 0 IS-IS IIH : 11318 LACP : 0 ARP : 629 ETHER OAM : 930 Unknown : 13212 Packet Forwarding Engine hardware discard statistics: Timeout : 0 Truncated key : 0 Bits to test : 0 Data error : 0 Stack underflow : 0 Stack overflow : 0 Normal discard : 18060 Extended discard : 0 Invalid interface : 0 Info cell drops : 0 Fabric drops : 0 Packet Forwarding Engine Input IPv4 Header Checksum Error and Output MTU Error statistics: Input Checksum : 0 Output MTU : 0 root@host> show chassis routing-engine no-forwarding Routing Engine status: Slot 0: Current state Master Election priority Master (default) Temperature 32 degrees C / 89 degrees F CPU temperature 46 degrees C / 114 degrees F DRAM 3327 MB ... root@host> show chassis environment no-forwarding Class Item Status Measurement Temp PEM 0 OK 30 degrees C / 86 degrees F ... root@host> show chassis firmware no-forwarding Part Type Version Global FPC 4 Global FPC 6 Global FPC 7 ... root@host> show system boot-messages no-forwarding ...
request support information (SRX Series device)
user@host> request support information
root@host> show security dns-cache DNS entry number: 0 root@host> show security utm web-filtering statistics UTM web-filtering statistics: Web-filtering sessions in total: 512000 Web-filtering sessions in use: 0 Fallback: log-and-permit block Default 0 0 Timeout 0 0 Connectivity 0 0 Too-many-requests 0 0 root@host> show security utm session UTM session info: Maximum sessions: 256000 Total allocated sessions: 0 Total freed sessions: 0 Active sessions: 0 root@host> show system uptime no-forwarding Current time: 2017-07-09 21:38:01 PDT Time Source: LOCAL CLOCK System booted: 2017-07-09 20:58:06 PDT (00:39:55 ago) Protocols started: 2017-07-09 20:58:07 PDT (00:39:54 ago) Last configured: 2017-06-30 08:56:45 PDT (1w2d 12:41 ago) by user 9:38PM up 40 mins, 1 user, load averages: 0.10, 0.07, 0.04 ...
request support information ipsec-vpn (MX Series Router)
user@host> request support information ipsec-vpn
root@mobst480e> show services ipsec-vpn ike security-associations detail | no-more IKE peer 10.0.1.2 Role: Responder, State: Matured Initiator cookie: 9425c926b3614be5, Responder cookie: 1bcf54a314423b3f Exchange type: IKEv2, Authentication method: Pre-shared-keys Local gateway interface: ge-4/3/3.0 Local: 10.0.1.1, Remote: 10.0.1.2 Lifetime: Expires in 1923 seconds Peer ike-id: ipv4(any:0,[0..3]=10.0.1.2) Algorithms: Authentication : hmac-sha1-96 Encryption : 3des-cbc Pseudo random function: hmac-sha1 Diffie-Hellman group : 2 Traffic statistics: Input bytes : 8024 Output bytes : 7744 Input packets: 52 Output packets: 52 Flags: IKE SA created IPSec security associations: 34 created, 36 deleted root@mobst480e> show services ipsec-vpn ike statistics | no-more IKE peer 10.0.1.2 Initiator cookie: 9425c926b3614be5, Responder cookie: 1bcf54a314423b3f Local: 10.0.1.1, Remote: 10.0.1.2 IPSec security associations: 34 created, 36 deleted IPSec tunnel rekeys: 17 Exchange type: IKEv2 Traffic statistics: Input bytes : 8024 Output bytes : 7744 Input packets: 52 Output packets: 52 Delete IPsec SA payload statistics: Delete IPsec SA payloads received: 18 Delete IPsec SA payloads sent : 17 DPD statistics: DPD request received : 18 DPD request sent : 0 DPD response received : 0 DPD response sent : 18 DPD response missed : 0 Worst case DPD response delay : 0 msec DPD sequential response missed : 0 Invalid SPI notification statistics: Notifications received: 0 Notifications sent : 0 root@mobst480e> show services ipsec-vpn ipsec security-associations detail | no-more Service set: ss1, IKE Routing-instance: default Rule: ipsec_vpn_rules_1, Term: term1, Tunnel index: 1 Local gateway: 10.0.1.1, Remote gateway: 10.0.1.2 IPSec inside interface: ms-2/0/0.1, Tunnel MTU: 1500 UDP encapsulate: Disabled, UDP Destination port: 0 Local identity: ipv4_subnet(any:0,[0..7]=192.168.60.0/24) Remote identity: ipv4_subnet(any:0,[0..7]=192.168.70.0/24) NATT Detection: Not Detected, NATT keepalive interval: 0 Total uptime: 0 days 2 hrs 45 mins 21 secs Direction: inbound, SPI: 2957881284, AUX-SPI: 0 Mode: tunnel, Type: dynamic, State: Installed Protocol: ESP, Authentication: hmac-sha1-96, Encryption: 3des-cbc Soft lifetime: Expires in 48 seconds Hard lifetime: Expires in 88 seconds Anti-replay service: Enabled, Replay window size: 4096 Copy ToS: Enabled Copy TTL: Disabled, TTL value: 64 SA lifetime: 180 seconds Direction: outbound, SPI: 3292864325, AUX-SPI: 0 Mode: tunnel, Type: dynamic, State: Installed Protocol: ESP, Authentication: hmac-sha1-96, Encryption: 3des-cbc Soft lifetime: Expires in 48 seconds Hard lifetime: Expires in 88 seconds Anti-replay service: Enabled, Replay window size: 4096 Copy ToS: Enabled Copy TTL: Disabled, TTL value: 64 SA lifetime: 180 seconds root@mobst480e> show services ipsec-vpn ipsec statistics | no-more PIC: ms-2/0/0, Service set: ss1 ESP Statistics: Encrypted bytes: 0 Decrypted bytes: 0 Encrypted packets: 0 Decrypted packets: 0 AH Statistics: Input bytes: 0 Output bytes: 0 Input packets: 0 Output packets: 0 Errors: AH authentication failures: 0 ESP authentication failures: 0 ESP decryption failures: 0 Bad headers: 0, Bad trailers: 0 Replay before window drops: 0, Replayed pkts: 0 IP integrity errors: 0, Exceeds tunnel MTU: 0 Rule lookup failures: 0, No SA errors: 0 Flow errors: 0, Misc errors: 0