traceoptions (Access Port Security)
Statement introduced in Junos OS Release 9.2.
Define global tracing operations for access security features on Ethernet switches.
The traceoptions feature is disabled by default.
disable—(Optional) Disable the tracing operation. You can use this option to disable a single operation when you have defined a broad group of tracing operations, such as all.
file filename —Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory /var/log.
files number—(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed trace-file.0, then trace-file.1, and so on, until the maximum number of trace files is reached (xk to specify KB, xm to specify MB, or xg to specify gigabytes), at which point the oldest trace file is overwritten. If you specify a maximum number of files, you also must specify a maximum file size with the size option.
Range: 2 through 1000
Default: 3 files
flag flag—Tracing operation to perform. To specify more than one tracing operation, include multiple flag statements. You can include the following flags:
access-security—Trace access security events.
all—All tracing operations.
config-internals—Trace internal configuration operations.
forwarding-database—Trace forwarding database and next-hop events.
general—Trace general events.
interface—Trace interface events.
ip-source-guard—Trace IP source guard events.
krt—Trace communications over routing sockets.
lib—Trace library calls.
normal—Trace normal events.
parse—Trace reading of the configuration.
regex-parse—Trace regular-expression parsing operations.
rtg—Trace redundant trunk group events.
state—Trace state transitions.
stp—Trace spanning-tree events.
task—Trace Ethernet-switching task processing.
timer—Trace Ethernet-switching timer processing.
vlan—Trace VLAN events.
no-stamp—(Optional) Do not timestamp the trace file.
Default: If you omit this option, timestamp information is placed at the beginning of each line of the tracing output.
no-world-readable—(Optional) Restrict file access to the user who created the file.
replace—(Optional) Replace an existing trace file if there is one rather than appending to it.
Default: If you do not include this option, tracing output is appended to an existing
size size—(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes. When a trace file named trace-file reaches its maximum size, it is renamed trace-file.0, then trace-file.1, and so on, until the maximum number of trace files is reached. Then the oldest trace file is overwritten. If you specify a maximum number of files, you also must specify a maximum file size with the files option.
Syntax: xk to specify KB, xm to specify MB, or xg to specify gigabytes
Range: 10 KB through 1 gigabyte
Default: 128 KB
world-readable—(Optional) Enable unrestricted file access.
no-remote-trace—(Optional) Disable remote tracing.
Required Privilege Level
system—To view this statement in the configuration.
system-control—To add this statement to the configuration.