clear services stateful-firewall flows

Syntax

Release Information

Command introduced before JUNOS Release 7.4.

Description

Clear stateful firewall flows.

Options

none — Clear all stateful firewall flows.

application-protocol — (Optional) Clear stateful firewall flows for one of the following application protocols:

• bootp—Bootstrap protocol
• dce-rpc—Distributed Computing Environment-Remote Procedure Call protocols
• dce-rpc-portmap—Distributed Computing Environment-Remote Procedure Call protocols portmap service
• dns—Domain Name System protocol
• exec—Exec
• ftp—File Transfer Protocol
• h323—H.323 standards
• icmp—Internet Control Message Protocol
• iiop—Internet Inter-ORB Protocol
• login—Login
• netbios—NetBIOS
• netshow—NetShow
• realaudio—RealAudio
• rpc—Remote Procedure Call protocol
• rpc-portmap—Remote Procedure Call protocol portmap service
• rtsp—Real-Time Streaming Protocol
• shell—Shell
• sip—Session Initiation Protocol
• snmp—Simple Network Management Protocol
• sqlnet—SQLNet
• tftp—Trivial File Transfer Protocol
• traceroute—Traceroute
• winframe—WinFrame

destination-port destination-port — (Optional) Clear stateful firewall flows for a particular destination port. The range of values is 0 to 65535.

destination-prefix destination-prefix — (Optional) Clear stateful firewall flows for a particular destination prefix.

interface interface-name — (Optional) Clear stateful firewall flows for a particular interface. On M Series and T Series routers, the interface-name can be sp-fpc/pic/port or rspnumber. On the J Series routers, the interface-name is sp-pim/0/port.

protocol — (Optional) Clear stateful firewall flows for one of the following IP protocol types:

• number—Numeric protocol value from 0 to 255.
• ah—IPSec Authentication Header protocol
• egp—An exterior gateway protocol
• esp—IPSec Encapsulating Security Payload protocol
• gre—A generic routing encapsulation protocol
• icmp—Internet Control Message Protocol
• igmp—Internet Group Management Protocol
• ipip—IP-over-IP Encapsulation Protocol
• ospf—Open Shortest Path First protocol
• pim—Protocol Independent Multicast protocol
• rsvp—Resource Reservation Protocol
• sctp—Stream Control Protocol
• tcp—Transmission Control Protocol
• udp—User Datagram Protocol

service-set service-set — (Optional) Clear stateful firewall flows for a particular service set.

source-port source-port — (Optional) Clear stateful firewall flows for a particular source port. The range of values is from 0 through 65535.

source-prefix source-prefix — (Optional) Clear stateful firewall flows for a particular source prefix.

Required Privilege Level

view

Related Topics

show services stateful-firewall flows

List of Sample Output

Output Fields

Table 279 lists the output fields for the clear services stateful-firewall flows command. Output fields are listed in the approximate order in which they appear.

Table 279: clear services stateful-firewall flows Output Fields

Sample Output

Interface   Service set                                             Conv removed
sp-0/3/0    svc_set_trust                                                     0
sp-0/3/0    svc_set_untrust                                                   0