Juniper ScreenOS Firewall View an IP or a Port
Juniper ScreenOS Firewall looks at an IP or a Port or a
ScreenOS version:
ISG2000- > get system | in "Software Version"
Software Version: 5.4.0r6.0, Type: Firewall+ × × ×
IP/Port/Mac can be subdivided into source IP, destination IP, source Port, destination Port, source Mac, and destination Mac with the following commands:
ISG2000- > get session?
> redirect output
| | match output |
Dst-ip destination ip address
Dst-mac destination mac address
Dst-port destination port number or range
Hardware show hardware sessions only
Id show sessions with id
Ike-nat show ike-nat ALG info
Protocol protocol number or range
Rm show sessions for resource management
Service show sessions with service type
Src-ip source ip address
Src-mac source mac address
Src-port source port number or range
Tunnel show tunnel sessions
Vsd-id get vsd-id specified sessions
The following is the total number of sessions for which the source IP is 10.244.148.231:
ISG2000- > get session src-ip 10.244.148.231
Alloc 39986/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
Total reserved 0, free sessions in shared pool 484302
Slot 2: hw0 alloc 39884/max 1048575
Total 29340 sessions according filtering criteria.
Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2202, camera 0
If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35
If 64 (nspflag 800800): 10.244.150.49 get session dst-port 44295
Alloc 40045/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
Total reserved 0, free sessions in shared pool 484243
Slot 2: hw0 alloc 39942/max 1048575
Total 38375 sessions according filtering criteria.
Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2201, camera 0
If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35
If 64 (nspflag 800800): 10.244.150.49 Universe 44295 get session src-mac 00005e00010a
Alloc 39913/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0
Total reserved 0, free sessions in shared pool 484375
Slot 2: hw0 alloc 39838/max 1048575
Total 39015 sessions according filtering criteria.
Id 138 dip s0 module module 0 flag 04200400 ash 0000gray 0003 recorder policy 5 moment 2142, camera 0
If 23 (nspflag 800801): 10.244.148.231 Universe 44295-> 10.243.211.40 Compact 161 17meme 00005e00010a MagicalSess token 24recoveryVLAN 0recovervsd 0PowerRou35
If 64 (nspflag 800800): 10.244.150.49 Universe 44295
