show services application-aware-access-list flows
Syntax
show services application-aware-access-list flows<interface interface-name><subscriber subscriber-name>
Description
Display application-aware-access-list (AACL) flows. Offloading using JFM is supported only on MX Series routers with Modular Port Concentrators (MPCs).
Options
interface interface-name |
Displays AACL flows for the specified
interfaces only. The keyword, |
subscriber subscriber-name |
Displays AACL flows for the specified
subscribers only. The keyword, |
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show services
application-aware-access-list flows command. Output fields are listed in the
approximate order in which they appear.
Field Name |
Field Description |
Level of Output |
|---|---|---|
|
This field comprises five components of the given flow. The components are:
|
All levels |
|
The identification number associated with the application. |
All levels |
|
The direction in terms of input or output.
|
All levels |
|
The status of offload to Packet Forwarding Engine. The various options are:
|
All levels |
Off |
The status of offload to Packet Forwarding Engine using JFM. The various options are:
|
All levels |
|
The types of actions displayed are:
|
All levels |
Sample Output
- show services application-aware-access-list flows interface
- show services application-aware-access-list flows subscriber
- show services application-aware-access-list flows subscriber (Offloading Using JFM)
show services application-aware-access-list flows interface
user@host>show services application-aware-access-list flows interface ge-1/0/5.0 Interface: ge-1/0/5.0 service-set: aacl-countApps service-set interface: ms-0/0/0 Currently active flows: 2 High watermark flows: 2 5-tuple Application-ID Dir Off Action ------------------------------------------------ ------------------------------ --- --- -------- 198.51.100.2:47072-> 10.10.254.116:80 ,6 junos:http [64] I - C-T 10.10.254.116:80 -> 198.51.100.2:47072,6 junos:http [64] O - C-T
show services application-aware-access-list flows subscriber
user@host>show services application-aware-access-list flows subscriber user@example.com Subscriber: user@example.com Service-set: ss1 Service-set interface: ms-2/0/0 Currently active flows: 4 High watermark flows: 40 5–tuple Application-ID Dir Off Action 192.0.2.100:20109->160.200.200.200:80,17 junos:http [64] I - C-T+FC+P 203.0.113.200:80->192.0.2..100:20109,17 junos:http [64] O - C-T+FC+P 192.0.2.100:20108->203.0.113.100:80,17 junos:http [64] I P+F C-T+FC+P 203.0.113.100:80->192.0.2.100:20108,17 junos:http [64] O P+F C-T+FC+P
show services application-aware-access-list flows subscriber (Offloading Using JFM)
user@host>show services application-aware-access-list flows subscriber user@example.com Subscriber: user@example.com Service-set: ss1 Service-set interface: ms-2/0/0 Currently active flows: 4 High watermark flows: 40 5–tuple Application-ID Dir Off Action 192.0.2.100:20109->160.200.200.200:80,17 junos:http [64] I - C-T+FC+P 203.0.113.200:80 ->192.0.2.100:20109,17 junos:http [64] O - C-T+FC+P 192.0.2..100:20108->203.0.113.100:80,17 junos:http [64] I R C-T+FC+P 203.0.113.100:80 ->192.0.2.100:20108,17 junos:http [64] O O C-T+FC+P
Release Information
Command introduced in Junos OS Release 10.1.
Offload status for flows using Juniper Forwarding Mechanism (JFM) added in Junos OS Release 12.1.