Verifying Firewall User Authentication

Purpose

Displays firewall authentication user history.

Action

Use the show security firewall-authentication CLI command to display information on authenticated firewall users. For more information, see the JUNOS Software CLI Reference.

History of firewall authentication data:
Authentications: 2
Id Source Ip Date Time Duration Status User
1 99.99.99.1 2007-10-12 21:24:02 0:00:24 Failed troy 
2 99.99.99.1 2007-10-12 21:24:48 0:00:22 Success voyager 
user@host>  show security firewall-authentication history identifier 1
Username: troy
Source IP: 99.99.99.1
Authentication state: Failed 
Authentication method: Pass-through using Telnet
Access start date: 2007-10-12
Access start time: 21:24:02
Duration of user access: 0:00:24
Policy name: lnx2-telnet-lnx1
Source zone: dl2
Destination zone: dl1
Access profile: wonder
Bytes sent by this user: 0
Bytes received by this user: 2660
Client-groups: Sunnyvale Bangalore
user@host>  show security firewall-authentication users
Firewall authentication data:
Total users in table: 1
Id Source Ip Src zone Dst zone Profile Age Status User 
3 99.99.99.1     dl2   dl1   wonder   1 Failed TechPubs 
user@host>  show security firewall-authentication users identifier 3
Username: TechPubs
Source IP: 99.99.99.1
Authentication state: Failed 
Authentication method: Pass-through using Telnet
Age: 1
Access time remaining: 9
Source zone: dl2
Destination zone: dl1
Policy name: lnx2-telnet-lnx1
Access profile: wonder
Interface Name: ge-0/0/1.0
Bytes sent by this user: 0
Bytes received by this user: 1521

What it Means

The output displays information about firewall users authenticating to the network. Verify the following information:

• Number of firewall users who successfully authenticated and firewall users who failed to log in.
• Details on each firewall user trying to authenticate.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.