[Contents] [Prev] [Next] [Index] [Report an Error]

show security flow session destination-prefix

Syntax



         
show security flow session destination-prefix       

         
           destination-IP-prefix                

<node (           node-id          | all | local
| primary)>

Release Information

Command introduced in Release 8.5 of JUNOS software; node options added in Release 9.0 of JUNOS software.

Description

Display information about each session that matches the specified IPv4 destination prefix.

This command is supported on J-series and SRX-series devices.

Options

destination-IP-prefix —Destination IPv4 prefix or address about which to display session information.

node—(Optional) For chassis cluster configurations, display sessions that match the specified destination prefix on a specific node.

node-id —Identification number of the node. It can be 0 or 1.
all—Display information about all nodes.
local—Display information about the local node.
primary—Display information about the primary node.

Required Privilege Level

view

List of Sample Output

show security flow session destination-prefix 192.168/16
show security flow session destination-prefix 11.11.1.2 node primary

Output Fields

Table 41 lists the output fields for the show security flow session destination-prefix command. Output fields are listed in the approximate order in which they appear.

Table 41: show security flow session destination-prefix Output Fields

Field Name	Field Description
Session ID	Number that identifies the session. You can use this ID to get additional information about the session.
Policy name	Policy that permitted the traffic.
Timeout	Idle timeout after which the session expires.
In	Incoming flow (source and destination IP addresses, application protocol, and interface).
Out	Reverse flow (source and destination IP addresses, application protocol, and interface).

show security flow session destination-prefix 192.168/16

user@host> show
security flow session destination-prefix 192.168/16

Session ID: 33, Policy name: default-policy/2, Timeout: 1492
  In: 10.10.10.1/2851 --> 192.168.0.2/21;tcp, If: t1-1/0/0.0
  Out: 192.168.0.2/21 --> 10.10.10.1/2851;tcp, If: ge-0/0/1.0

show security flow session destination-prefix 11.11.1.2 node primary

user@host> show
security flow session destination-prefix 11.11.1.2 node primary

node0:
--------------------------------------------------------------------------
Session ID: 1, Policy name: sfw1/4, State: Active, Timeout: 60
  In: 1.1.1.2/2000 --> 11.11.1.2/40000;udp, If: reth0.1
  Out: 11.11.1.2/40000 --> 1.1.1.2/2000;udp, If: reth1.1
1 sessions displayed