Viewing SAE Data with the CLI
You can view information about the SAE active configuration for data currently stored in the SAE server’s memory.
You can view SAE data by:
Viewing Information About the Directory Blacklist (SRC CLI)
Purpose
View information about the directory blacklist configured on the SAE.
Action
user@host> show sae directory-black-list Viewing Information About SAE Device Drivers (SRC CLI)
Purpose
View information about SAE device drivers. Each device driver manages one logical router instance.
Action
To view information about the state of SAE device drivers:
user@host> show sae drivers JunosE Driver Device name default@dryad Device type junose Device IP 10.227.7.244 Local IP 10.227.7.172 TransportRouter default@dryad Device version 7.2.0 Start time Tue Feb 13 14:18:44 EST 2007 Number of notifications 20 Number of processed added 14 Number of processed changed 0 Number of processed deleted 6 Number of provisioning attempt 30 Number of provisioning attempt failed 0 Number of outstanding decisions 0 Number of SAP 7 Number of PAP 1 Number of active user sessions 100 Number of active service sessions 0 Job Queue Size 0 Age (ms) 1 Total enqueued 28 Total dequeued 28 Average job time (ms) 426 State Synchronization Number recovered subscriber sessions 0 Number recovered service sessions 0 Number recovered interface sessions 0 Number invalid subscriber sessions 0 Number invalid service sessions 0 Number invalid interface sessions 0 Background restoration start time Tue Feb 13 14:18:49 EST 2007 Background restoration end time Tue Feb 13 14:18:49 EST 2007 Number subscriber sessions restored in background 0 Number of provisioning objects left to collect 0 Total number of provisioning objects to collect 11 Start time Tue Feb 13 14:18:45 EST 2007 End time Tue Feb 13 14:18:47 EST 2007 Number of synched contexts 7 Number of post-sync jobs 6 Session Store Info Session Store Status sessionsCollected Status Last Update Time Mon Jul 29 10:26:26 UTC 2013 Current Usage Ratio 1.0 Last Modified Time Size(KB) Name LiveSessionsSize(KB) Mon Jul 29 10:27:05 UTC 2013 117.9 storeOps_1_1 117.9
To view information about the state of a particular device driver, specify all or part of the virtual router name. For device drivers running Junos OS and PCMM drivers, use the format default@routerName.
user@host> show sae drivers device-name device-name To view only the virtual router names for the device driver:
user@host> show sae drivers brief Router Drivers Router Name Router Type default@simJunos junos
To restrict the number of displayed results:
user@host> show sae drivers maximum-results maximum-results Viewing the Synchronization Status of SAE Session Stores (SRC CLI)
Purpose
View the synchronization status of session stores. Session stores are used by SAE to store user session data and the service session data.
Action
To view the SAE session stores synchronization status:
user@host> show sae sessionstore-stats Session store Stats Report Interval 300000 ms Last Report Time Thu Sep 12 10:54:12 UTC 2013 Operations Start Time Thu Sep 12 10:54:12 UTC 2013 Number of Local Synchronizations 2 Time for All Local Synchronizations 106 ms Bytes for All Local Synchronizations 0 Number of All Local Synchronized Files 2 Number of Community Synchronizations 2 Time for All Community Synchronizations 108 ms Number of Remote Updates 0 Time for All Remote Updates 0 ms Number of Operations 13 Time for All Operations 2 ms Number of Rotations 0 Time for All Rotations 0 ms Bytes for All Rotations 0 All Rotated Operations 0 Number of Snapshots 0 Time for All Snapshots 0 ms Number of Keys for All Snapshots 0 Number of Flushes 3 Time for All Flushes 1 ms
Viewing Information About SAE Interfaces (SRC CLI)
Purpose
View information about SAE interfaces.
We recommend that you do not enter the show sae interfaces command without specifying an interface, virtual router, brief, or maximum results to filter the results. Entering the show sae interfaces command can generate a large quantity of results, and processing these results can place a load on the C Series Controller.
Action
To view information about the router interfaces:
user@host> show sae interfaces To view information about particular router interfaces, specify all or part of the interface name.
user@host> show sae interfaces interface-name interface-name To view information about interfaces for a particular virtual router, specify all or part of the VR name.
user@host> show sae interfaces virtual-router-name virtual-router-name To view only the interface names:
user@host> show sae interfaces brief To restrict the number of displayed results:
user@host> show sae interfaces maximum-results maximum-results Viewing Information About SAE Licenses (SRC CLI)
Purpose
View the installed licenses.
Action
user@host> show sae licenses SSC License Key Checker V3.0
Type of license: Server license. Connectivity to the specified SDX
License server (Test): OK
The following valid licenses are found:
License: cn=@License,ou=licSvr,ou=Licenses,o=Management,o=UMC license.val.component = 3 license.val.customer = jnpr license.val.expiry = 2020-12-12 license.val.release = 7.* license.val.seqnum = 00002 license.val.serialnum = 123 license.val.server.corbaloc = corbaloc::SumanthTest:9000/licmanager license.val.serviceSessions = 90000 license.val.type = server
Viewing Information About Policies on the SAE (SRC CLI)
Purpose
View policy information.
Action
To view information about the policies available on the SAE:
user@host> show sae policies To view information about particular policies, specify all or part of the policy list name:
user@host> show sae policies filter filter For example, if you wanted to view the policy called brickwall:
user@host> show sae policies filter brickwall Policy Group Policy Group Name brickwall Absolute ID policyGroupName=brickwall,ou=entjunos,o=Policies,o=UMC
Policy Object applicability both Name both policyRoles Junos accountingRule false Name block priority 601 ruleType Junos OS ASP matchDirection both Name all Name drop Name packet
To view only the policy list names for the policies:
user@host> show sae policies brief Policies ADSL-Basic basicBod BestEffort64 block bod bodVpn both_fwr_filter both_fwr_fwd both_fwr_reject brickwall brickwall content-provider content-provider-tiered custom_policer default default DHCP DocsisParameter DownStream dynsrcnat eglimit emailweb emailweb EntDefault filter
More results available. Display has reached the maximum number of results. Number of skipped results: 43
To restrict the number of displayed results:
user@host> show sae policies maximum-results maximum-results Viewing Login Registrations (SRC CLI)
Purpose
View information about registered logins. You can view all login registrations, or you can view a specific registration.
Action
To view information about all login registrations:
user@host> show sae registered login To view a specific registration, specify the media access control (MAC) address for the registration that you want to display:
user@host> show sae registered login mac-address mac-address To view only the MAC address of the registrations:
user@host> show sae registered login brief To restrict the number of displayed results:
user@host> show sae registered login maximum-results maximum-results For information about login registrations, see the SRC PE Sample Applications Guide.
Viewing Equipment Registrations (SRC CLI)
Purpose
View information about equipment registrations. You can view all equipment registrations, or you can view a specific registration.
Action
To view information about all equipment registrations:
user@host> show sae registered equipment To view a specific registration, specify the media access control (MAC) address for the registration that you want to display:
user@host> show sae registered equipment mac-address mac-address To view only the MAC address of the registrations:
user@host> show sae registered equipment brief To restrict the number of displayed results:
user@host> show sae registered equipment maximum-results maximum-results For information about equipment registrations, see the SRC PE Sample Applications Guide.
Viewing Information About Services (SRC CLI)
Purpose
View information about services available on the SAE. You can view information about all services, or about specific services.
Action
To view information about the services available on the SAE:
user@host> show sae services To view information about particular services, specify all or part of the service name:
user@host> show sae services filter filter For example, if you wanted to view the service called BrickWall:
user@host> show sae services filter brickwall Service available true description This firewall blocks all incoming and outgoing traffic. location l=entjunos,o=scopes,o=umc policygroupref policyGroupName=brickwall,ou=entjunos,o=Policies,o=UMC servicename BrickWall servicetype 7 sspcategory basicFirewall ssptype Normal status 2 available true description This firewall blocks all incoming and outgoing traffic. location l=entjunosstatelessfw,o=scopes,o=umc policygroupref policyGroupName=brickwall,ou=entjunos_statelessfw,o=Policies,o=UMC servicename BrickWall servicetype 7 sspcategory basicFirewall ssptype Normal status 2
To view all the hidden services:
user@host> show sae services secret
Service
available true
description This firewall blocks all incoming traffic and allows only
outgoing email and web traffic.
location l=entjunos,o=scopes,o=umc
policygroupref policyGroupName=emailweb,ou=entjunos,o=Policies,o=UMC
servicename EmailAndWeb
servicetype 7
sspcategory basicFirewall
sspradiusclass EmailAndWeb
ssptype Normal
status 2
available true
description This firewall blocks all incoming traffic and allows only
outgoing email and web traffic.
location l=entjunosstatelessfw,o=scopes,o=umc
policygroupref policyGroupName=emailweb,ou=entjunos_statelessfw,o=Policies,o=UMC
servicename EmailAndWeb
servicetype 7
sspcategory basicFirewall
sspradiusclass EmailAndWeb
ssptype Normal
status 2
Service
available true
This service is activated automatically when the
description subscriber is the source or destination of a network
attack
location l=idp-subscriber,o=scopes,o=umc
parametersubstitution captiveAddress=66.13.2.11
policygroupref policyGroupName=quarantine,ou=idp,o=Policies,o=UMC
servicename Quarantine
servicetype 7
sspradiusclass Quarantine
ssptype Normal
status 2
To view only the service names for the services:
user@host> show sae services brief Services EmailAndWeb Quarantine Audio-Silver Internet-Gold Internet-Silver DynSrcNat FWR_Filter_Out StaticDestNat PingDoSProtect MirrorFragment SubrIntfFragment BrickWall Audio-Bronze Internet-Bronze Limit500kbs News Gold_VPN Limit1Mbs Video-Silver Audio-Gold RouterFragment 1.0 Mbps DynSrcNat FWR_Filter_Out StaticDestNat PingDoSProtect MirrorFragment SubrIntfFragment BrickWall Audio-Bronze Internet-Bronze Limit500kbs News Gold_VPN Limit1Mbs Video-Silver Audio-Gold RouterFragment 1.0 Mbps FWR_Rej_In MirrorAggregate Video-Bronze
More results available. Display has reached the maximum number of results. Number of skipped results: 26
To restrict the number of displayed results:
user@host> show sae services maximum-results maximum-results Viewing Information About Threads (SRC CLI)
Purpose
View information about the threads and their priority on the SAE.
Action
user@host> show sae threads Thread Group Thread group name system Active threads 112 Active groups 11 Max priority 10
Thread name Priority Daemon thread Reference Handler 10 true Finalizer 8 true Signal Dispatcher 9 true
...
Thread Group Thread group name RKSTrackingQueue Active threads 5 Active groups 0 Max priority 10
Thread name Priority Daemon thread RKSTrackingQueue-0 5 true RKSTrackingQueue-1 5 true RKSTrackingQueue-2 5 true RKSTrackingQueue-3 5 true RKSTrackingQueue-4 5 true