Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    show security zones

    Syntax

    show security zones <detail | terse> < zone-name >

    Release Information

    Command introduced in Junos OS Release 8.5. The Description output field added in Junos OS Release 12.1.

    Description

    Display information about security zones.

    Options

    • none—Display information about all zones.
    • detail | terse—(Optional) Display the specified level of output.
    • zone-name —(Optional) Display information about the specified zone.

    Required Privilege Level

    view

    List of Sample Output

    show security zones
    show security zones abc
    show security zones abc detail
    show security zones terse

    Output Fields

    Table 1 lists the output fields for the show security zones command. Output fields are listed in the approximate order in which they appear.

    Table 1: show security zones Output Fields

    Field Name

    Field Description

    Security zone

    Name of the security zone.

    Description

    Description of the security zone.

    Policy configurable

    Whether the policy can be configured or not.

    Interfaces bound

    Number of interfaces in the zone.

    Interfaces

    List of the interfaces in the zone.

    Zone

    Name of the zone.

    Type

    Type of the zone.

    Sample Output

    show security zones

    user@host> show security zones
    Functional zone: management
       Description: This is the management zone.
       Policy configurable: No
       Interfaces bound: 1
       Interfaces:
         ge-0/0/0.0
    Security zone: Host
       Description: This is the host zone.
       Send reset for non-SYN session TCP packets: Off
       Policy configurable: Yes
       Interfaces bound: 1
       Interfaces:
         fxp0.0
    Security zone: abc
       Description: This is the abc zone.
       Send reset for non-SYN session TCP packets: Off
       Policy configurable: Yes
       Interfaces bound: 1
       Interfaces:
         ge-0/0/1.0
    Security zone: def
       Description: This is the def zone.
       Send reset for non-SYN session TCP packets: Off
       Policy configurable: Yes
       Interfaces bound: 1
       Interfaces:
         ge-0/0/2.0
    

    Sample Output

    show security zones abc

    user@host> show security zones abc
    Security zone: abc
       Description: This is the abc zone.
       Send reset for non-SYN session TCP packets: Off
       Policy configurable: Yes
       Interfaces bound: 1
       Interfaces:
         ge-0/0/1.0
    

    Sample Output

    show security zones abc detail

    user@host> show security zones abc detail
    Security zone: abc
       Description: This is the abc zone.
       Send reset for non-SYN session TCP packets: Off
       Policy configurable: Yes
       Interfaces bound: 1
       Interfaces:
         ge-0/0/1.0
    

    Sample Output

    show security zones terse

    user@host> show security zones terse
    Zone                    Type
    my-internal             Security
    my-external             Security
    dmz                     Security
    

    Published: 2014-05-22