System Basics and Services Command Reference

JUNOSTM Internet SoftwareTM
System Basics and Services

Command Reference
Release 8.1
Juniper Networks, Inc.

1194 North Mathilda Avenue
Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Part Number: 530-017070-01, Revision 1
This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright © 1986–1997, Epilogue
Technology Corporation. All rights reserved. This program and its documentation were developed at private expense, and no part of them is in the public
domain.
This product includes memory allocation software developed by Mark Moraes, copyright © 1988, 1989, 1993, University of Toronto.
This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. All of the documentation and software
included in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by The Regents of the University of California. Copyright © 1979, 1980, 1983, 1986, 1988,
1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved.
GateD software copyright © 1995, The Regents of the University. All rights reserved. Gate Daemon was originated and developed through release 3.0 by
Cornell University and its collaborators. Gated is based on Kirton’s EGP, UC Berkeley’s routing daemon (routed), and DCN’s HELLO routing protocol.
Development of Gated has been supported in part by the National Science Foundation. Portions of the GateD software copyright © 1988, Regents of the
University of California. All rights reserved. Portions of the GateD software copyright © 1991, D. L. S. Associates.
Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. JUNOS and JUNOSe are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service
marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or
otherwise revise this publication without notice.
Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed
to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347,
6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785.
Copyright © 2006, Juniper Networks, Inc.

All rights reserved. Printed in USA.
JUNOS Internet Software System Basics and Services Command Reference, Release 8.1
Writing: Andrea Cheek, Lisa Kelly, Elizabeth Lichtenberg, Regina Roman, Ines Salazar, and Alan Twhigg
Editing: Stella Hackell, Nancy Kurahashi, and Sonia Saruba
Illustration: Nathaniel Woodward
Cover design: Edmonds Design
Revision History
15 September 2006—Revision 1
The information in this document is current as of the date listed in the revision history.
Year 2000 Notice
Juniper Networks hardware and software products are Year 2000 compliant. The JUNOS software has no known time-related limitations through the year
2038. However, the NTP application is known to have some difficulty in the year 2036.
Software License
The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the
extent applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this software, you
indicate that you understand and agree to be bound by those terms and conditions.
Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain
uses. The software license may state conditions under which the license is automatically terminated. You should consult the license for further details.
For complete product documentation, please see the Juniper Networks Web site at www.juniper.net/techpubs.
End User License Agreement
READ THIS END USER LICENSE AGREEMENT (“AGREEMENT”) BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE. BY DOWNLOADING,
INSTALLING, OR USING THE SOFTWARE OR OTHERWISE EXPRESSING YOUR AGREEMENT TO THE TERMS CONTAINED HEREIN, YOU (AS CUSTOMER OR
IF YOU ARE NOT THE CUSTOMER, AS A REPRESENTATIVE/AGENT AUTHORIZED TO BIND THE CUSTOMER) CONSENT TO BE BOUND BY THIS
AGREEMENT. IF YOU DO NOT OR CANNOT AGREE TO THE TERMS CONTAINED HEREIN, THEN (A) DO NOT DOWNLOAD, INSTALL, OR USE THE
SOFTWARE, AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS.
1. The Parties. The parties to this Agreement are Juniper Networks, Inc. and its subsidiaries (collectively “Juniper”), and the person or organization that
originally purchased from Juniper or an authorized Juniper reseller the applicable license(s) for use of the Software (“Customer”) (collectively, the “Parties”).
2. The Software. In this Agreement, "Software" means the program modules and features of the Juniper or Juniper-supplied software, and updates and
releases of such software, for which Customer has paid the applicable license or support fees to Juniper or an authorized Juniper reseller. "Embedded
Software" means Software which Juniper has embedded in the Juniper equipment.
3. License Grant. Subject to payment of the applicable fees and the limitations and restrictions set forth herein, Juniper grants to Customer a non-exclusive
and non-transferable license, without right to sublicense, to use the Software, in executable form only, subject to the following use restrictions:
a. Customer shall use the Embedded Software solely as embedded in, and for execution on, Juniper equipment originally purchased by Customer from
Juniper or an authorized Juniper reseller.
b. Customer shall use the Software on a single hardware chassis having a single processing unit, or as many chassis or processing units for which Customer
has paid the applicable license fees; provided, however, with respect to the Steel-Belted Radius or Odyssey Access Client software only, Customer shall use
such Software on a single computer containing a single physical random access memory space and containing any number of processors. Use of the
Steel-Belted Radius software on multiple computers requires multiple licenses, regardless of whether such computers are physically contained on a single
chassis.
ii !
c. Product purchase documents, paper or electronic user documentation, and/or the particular licenses purchased by Customer may specify limits to
Customer's use of the Software. Such limits may restrict use to a maximum number of seats, registered endpoints, concurrent users, sessions, calls,
connections, subscribers, clusters, nodes, realms, devices, links, ports or transactions, or require the purchase of separate licenses to use particular features,
functionalities, services, applications, operations, or capabilities, or provide throughput, performance, configuration, bandwidth, interface, processing,
temporal, or geographical limits. In addition, such limits may restrict the use of the Software to managing certain kinds of networks or require the Software
to be used only in conjunction with other specific Software. Customer's use of the Software shall be subject to all such limitations and purchase of all
applicable licenses.
d. For any trial copy of the Software, Customer's right to use the Software expires 30 days after download, installation or use of the Software. Customer may
operate the Software after the 30-day trial period only if Customer pays for a license to do so. Customer may not extend or create an additional trial period
by re-installing the Software after the 30-day trial period.
e. The Global Enterprise Edition of the Steel-Belted Radius software may be used by Customer only to manage access to Customer's enterprise network.
Specifically, service provider customers are expressly prohibited from using the Global Enterprise Edition of the Steel-Belted Radius software to support any
commercial network access services.
The foregoing license is not transferable or assignable by Customer. No license is granted herein to any user who did not originally purchase the applicable
license(s) for the Software from Juniper or an authorized Juniper reseller.
4. Use Prohibitions. Notwithstanding the foregoing, the license provided herein does not permit the Customer to, and Customer agrees not to and shall not:
(a) modify, unbundle, reverse engineer, or create derivative works based on the Software; (b) make unauthorized copies of the Software (except as necessary
for backup purposes); (c) rent, sell, transfer, or grant any rights in and to any copy of the Software, in any form, to any third party; (d) remove any
proprietary notices, labels, or marks on or in any copy of the Software or any product in which the Software is embedded; (e) distribute any copy of the
Software to any third party, including as may be embedded in Juniper equipment sold in the secondhand market; (f) use any 'locked' or key-restricted
feature, function, service, application, operation, or capability without first purchasing the applicable license(s) and obtaining a valid key from Juniper, even
if such feature, function, service, application, operation, or capability is enabled without a key; (g) distribute any key for the Software provided by Juniper to
any third party; (h) use the Software in any manner that extends or is broader than the uses purchased by Customer from Juniper or an authorized Juniper
reseller; (i) use the Embedded Software on non-Juniper equipment; (j) use the Software (or make it available for use) on Juniper equipment that the
Customer did not originally purchase from Juniper or an authorized Juniper reseller; (k) disclose the results of testing or benchmarking of the Software to
any third party without the prior written consent of Juniper; or (l) use the Software in any manner other than as expressly provided herein.
5. Audit. Customer shall maintain accurate records as necessary to verify compliance with this Agreement. Upon request by Juniper, Customer shall furnish
such records to Juniper and certify its compliance with this Agreement.
6. Confidentiality. The Parties agree that aspects of the Software and associated documentation are the confidential property of Juniper. As such, Customer
shall exercise all reasonable commercial efforts to maintain the Software and associated documentation in confidence, which at a minimum includes
restricting access to the Software to Customer employees and contractors having a need to use the Software for Customer's internal business purposes.
7. Ownership. Juniper and Juniper's licensors, respectively, retain ownership of all right, title, and interest (including copyright) in and to the Software,
associated documentation, and all copies of the Software. Nothing in this Agreement constitutes a transfer or conveyance of any right, title, or interest in the
Software or associated documentation, or a sale of the Software, associated documentation, or copies of the Software.
8. Warranty, Limitation of Liability, Disclaimer of Warranty. The warranty applicable to the Software shall be as set forth in the warranty statement that
accompanies the Software (the “Warranty Statement”). Nothing in this Agreement shall give rise to any obligation to support the Software. Support services
may be purchased separately. Any such support shall be governed by a separate, written support services agreement. TO THE MAXIMUM EXTENT
PERMITTED BY LAW, JUNIPER SHALL NOT BE LIABLE FOR ANY LOST PROFITS, LOSS OF DATA, OR COSTS OR PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES, OR FOR ANY SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THIS AGREEMENT, THE SOFTWARE, OR ANY JUNIPER
OR JUNIPER-SUPPLIED SOFTWARE. IN NO EVENT SHALL JUNIPER BE LIABLE FOR DAMAGES ARISING FROM UNAUTHORIZED OR IMPROPER USE OF
ANY JUNIPER OR JUNIPER-SUPPLIED SOFTWARE. EXCEPT AS EXPRESSLY PROVIDED IN THE WARRANTY STATEMENT TO THE EXTENT PERMITTED BY
LAW, JUNIPER DISCLAIMS ANY AND ALL WARRANTIES IN AND TO THE SOFTWARE (WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE),
INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT DOES
JUNIPER WARRANT THAT THE SOFTWARE, OR ANY EQUIPMENT OR NETWORK RUNNING THE SOFTWARE, WILL OPERATE WITHOUT ERROR OR
INTERRUPTION, OR WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK. In no event shall Juniper's or its suppliers' or licensors' liability to
Customer, whether in contract, tort (including negligence), breach of warranty, or otherwise, exceed the price paid by Customer for the Software that gave
rise to the claim, or if the Software is embedded in another Juniper product, the price paid by Customer for such other product. Customer acknowledges and
agrees that Juniper has set its prices and entered into this Agreement in reliance upon the disclaimers of warranty and the limitations of liability set forth
herein, that the same reflect an allocation of risk between the Parties (including the risk that a contract remedy may fail of its essential purpose and cause
consequential loss), and that the same form an essential basis of the bargain between the Parties.
9. Termination. Any breach of this Agreement or failure by Customer to pay any applicable fees due shall result in automatic termination of the license
granted herein. Upon such termination, Customer shall destroy or return to Juniper all copies of the Software and related documentation in Customer's
possession or control.
10. Taxes. All license fees for the Software are exclusive of taxes, withholdings, duties, or levies (collectively “Taxes”). Customer shall be responsible for
paying Taxes arising from the purchase of the license, or importation or use of the Software.
11. Export. Customer agrees to comply with all applicable export laws and restrictions and regulations of any United States and any applicable foreign
agency or authority, and not to export or re-export the Software or any direct product thereof in violation of any such restrictions, laws or regulations, or
without all necessary approvals. Customer shall be liable for any such violations. The version of the Software supplied to Customer may contain encryption
or other capabilities restricting Customer's ability to export the Software without an export license.
12. Commercial Computer Software. The Software is “commercial computer software” and is provided with restricted rights. Use, duplication, or
disclosure by the United States government is subject to restrictions set forth in this Agreement and as provided in DFARS 227.7201 through 227.7202-4,
FAR 12.212, FAR 27.405(b)(2), FAR 52.227-19, or FAR 52.227-14(ALT III) as applicable.
13. Interface Information. To the extent required by applicable law, and at Customer's written request, Juniper shall provide Customer with the interface
information needed to achieve interoperability between the Software and another independently created program, on payment of applicable fee, if any.
Customer shall observe strict obligations of confidentiality with respect to such information and shall use such information in compliance with any
applicable terms and conditions upon which Juniper makes such information available.
! iii
14. Third Party Software. Any licensor of Juniper whose software is embedded in the Software and any supplier of Juniper whose products or technology
are embedded in (or services are accessed by) the Software shall be a third party beneficiary with respect to this Agreement, and such licensor or vendor
shall have the right to enforce this Agreement in its own name as if it were Juniper. In addition, certain third party software may be provided with the
Software and is subject to the accompanying license(s), if any, of its respective owner(s). To the extent portions of the Software are distributed under and
subject to open source licenses obligating Juniper to make the source code for such portions publicly available (such as the GNU General Public License
(“GPL”) or the GNU Library General Public License (“LGPL”)), Juniper will make such source code portions (including Juniper modifications, as appropriate)
available upon request for a period of up to three years from the date of distribution. Such request can be made in writing to Juniper Networks, Inc., 1194 N.
Mathilda Ave., Sunnyvale, CA 94089, ATTN: General Counsel. You may obtain a copy of the GPL at http://www.gnu.org/licenses/gpl.html, and a copy of the
LGPL at http://www.gnu.org/licenses/lgpl.html.
15. Miscellaneous. This Agreement shall be governed by the laws of the State of California without reference to its conflicts of laws principles. The
provisions of the U.N. Convention for the International Sale of Goods shall not apply to this Agreement. For any disputes arising under this Agreement, the
Parties hereby consent to the personal and exclusive jurisdiction of, and venue in, the state and federal courts within Santa Clara County, California. This
Agreement constitutes the entire and sole agreement between Juniper and the Customer with respect to the Software, and supersedes all prior and
contemporaneous agreements relating to the Software, whether oral or written (including any inconsistent terms contained in a purchase order), except that
the terms of a separate written agreement executed by an authorized Juniper representative and Customer shall govern to the extent such terms are
inconsistent or conflict with terms contained herein. No modification to this Agreement nor any waiver of any rights hereunder shall be effective unless
expressly assented to in writing by the party to be charged. If any portion of this Agreement is held invalid, the Parties agree that such invalidity shall not
affect the validity of the remainder of this Agreement. This Agreement and associated documentation has been written in the English language, and the
Parties agree that the English version will govern. (For Canada: Les parties aux présentés confirment leur volonté que cette convention de même que tous
les documents y compris tout avis qui s'y rattaché, soient redigés en langue anglaise. (Translation: The parties confirm that this Agreement and all related
documentation is and will be in the English language)).
iv !
Abbreviated Table of Contents
About This Guide xvii
Part 1 Monitoring and Testing Tools

Chapter 1 Connectivity Operational Mode Commands 3
Chapter 2 Interface Diagnostics Operational Mode Commands 23
Chapter 3 Real-Time Performance Monitoring Operational Mode Commands 41
Chapter 4 Real-Time Router Monitoring Operational Mode Commands 51
Part 2 System Management

Chapter 5 Accounting Operational Mode Commands 81
Chapter 6 Chassis Operational Mode Commands 89
Chapter 7 Command-Line Interface Operational Mode Commands 225
Chapter 8 File Management Operational Mode Commands 243
Chapter 9 Packet Forwarding Engine Operational Mode Commands 259
Chapter 10 Remote System Access Operational Mode Commands 305
Chapter 11 Simple Network Management Protocol
Operational Mode Commands 311
Chapter 12 System Software Operational Mode Commands 333
Part 3 Class of Service

Chapter 13 Class-of-Service Operational Mode Commands 507
Part 4 Services
Chapter 14 Compressed Real-Time Transport Protocol Operational Mode Commands 547
Chapter 15 CoS Services Operational Mode Commands 553
Chapter 16 Data Link Switching Operational Mode Commands 559
Chapter 17 Flow Collection and Monitoring Operational Mode Commands 573
Chapter 18 Intrusion Detection Service Operational Mode Commands 615
Chapter 19 IP Security Operational Mode Commands 627
Chapter 20 Layer 2 Tunneling Protocol Operational Mode Commands 689
Abbreviated Table of Contents ! v

JUNOS 8.1 System Basics and Services Command Reference
Chapter 21 Network Address Translation Operational Mode Commands 707

Chapter 22 Service Sets Operational Mode Commands 711
Chapter 23 Stateful Firewall Operational Mode Commands 717
Part 5 Indexes
Index 755
Index of Commands 765
vi ! Abbreviated Table of Contents

Table of Contents
About This Guide xvii
Objectives .................................................................................................... xvii
Supported Routing Platforms ...................................................................... xviii
Audience....................................................................................................... xix
Using the Indexes ......................................................................................... xix
Documentation Conventions......................................................................... xix
Related Juniper Networks Documentation..................................................... xxi
Documentation Feedback ........................................................................... xxiv
Requesting Support..................................................................................... xxiv
Part 1 Monitoring and Testing Tools
Chapter 1 Connectivity Operational Mode Commands 3

ping ................................................................................................................. 4
ping atm .......................................................................................................... 7
ping clns .......................................................................................................... 8
ping mpls l2circuit ........................................................................................10
ping mpls l2vpn ............................................................................................12
ping mpls l3vpn ............................................................................................14
ping mpls ldp .................................................................................................16
ping mpls lsp-end-point..................................................................................18
ping mpls rsvp ...............................................................................................20
Chapter 2 Interface Diagnostics Operational Mode Commands 23

test interface ds0-bert-start ...........................................................................24
test interface ds0-bert-stop ............................................................................25
test interface e1-bert-start .............................................................................26
test interface e1-bert-stop .............................................................................27
test interface e3-bert-start .............................................................................28
test interface e3-bert-stop .............................................................................29
test interface fdl-line-loop ..............................................................................30
test interface fdl-payload-loop .......................................................................31
test interface feac-loop-initiate ......................................................................32
test interface feac-loop-terminate ..................................................................33
test interface inband-line-loop........................................................................34
test interface inband-payload-loop .................................................................35
test interface restart-auto-negotiation.............................................................36
test interface t1-bert-start ..............................................................................37
Table of Contents ! vii

test interface t1-bert-stop ..............................................................................38

test interface t3-bert-start ..............................................................................39
test interface t3-bert-stop ..............................................................................40
Chapter 3 Real-Time Performance Monitoring Operational Mode Commands 41

show services rpm active-servers ...................................................................42
show services rpm history-results ..................................................................43
show services rpm probe-results ....................................................................46
Chapter 4 Real-Time Router Monitoring Operational Mode Commands 51

monitor interface ..........................................................................................52
monitor label-switched-path ..........................................................................56
monitor list ....................................................................................................59
monitor start..................................................................................................60
monitor stop ..................................................................................................61
monitor traffic ...............................................................................................62
mtrace ...........................................................................................................67
mtrace from-source .......................................................................................68
mtrace monitor .............................................................................................71
mtrace to-gateway .........................................................................................72
traceroute .....................................................................................................74
traceroute monitor .........................................................................................77
Part 2 System Management
Chapter 5 Accounting Operational Mode Commands 81

show accounting profile .................................................................................82
show accounting records ..............................................................................86
Chapter 6 Chassis Operational Mode Commands 89

clear chassis display message .......................................................................92
request chassis cb .........................................................................................93
request chassis cfeb .......................................................................................94
request chassis fpc ........................................................................................95
request chassis fpm resync ............................................................................96
request chassis lcc..........................................................................................97
request chassis mcs .......................................................................................98
request chassis pcg .......................................................................................99
request chassis pic ......................................................................................100
request chassis routing-engine master .........................................................101
request chassis scg .....................................................................................104
request chassis sfm .....................................................................................105
request chassis sfm master switch ..............................................................106
request chassis sib .....................................................................................107
request chassis spmb restart ......................................................................108
request chassis ssb master switch ...............................................................109
request chassis synchronization switch........................................................110
set chassis display message ........................................................................111
show chassis alarms ....................................................................................113
viii ! Table of Contents

Table of Contents
show chassis cfeb ........................................................................................115

show chassis craft-interface ........................................................................117
show chassis environment ..........................................................................122
show chassis environment cb ....................................................................131
show chassis environment fpc ....................................................................134
show chassis environment fpm ...................................................................138
show chassis environment mcs ...................................................................141
show chassis environment pcg ...................................................................143
show chassis environment pem ...................................................................145
show chassis environment routing-engine ..................................................148
show chassis environment scg .....................................................................150
show chassis environment sfm ...................................................................152
show chassis environment sib ...................................................................155
show chassis ethernet-switch .......................................................................159
show chassis fabric fpcs ...............................................................................165
show chassis fabric sibs ...............................................................................168
show chassis fabric topology........................................................................171
show chassis feb .........................................................................................175
show chassis firmware.................................................................................176
show chassis forwarding ..............................................................................178
show chassis fpc .........................................................................................179
show chassis hardware ...............................................................................183
show chassis lccs .........................................................................................199
show chassis location ..................................................................................200
show chassis mac-addresses .......................................................................202
show chassis pic ..........................................................................................204
show chassis routing-engine .......................................................................206
show chassis scb .........................................................................................212
show chassis sfm ........................................................................................213
show chassis sibs .........................................................................................215
show chassis spmb ....................................................................................217
show chassis spmb sibs ..............................................................................219
show chassis ssb .........................................................................................221
show chassis synchronization .....................................................................223
Chapter 7 Command-Line Interface Operational Mode Commands 225

clear cli logical-router ...................................................................................226
set cli complete-on-space .............................................................................227
set cli directory ............................................................................................228
set cli idle-timeout........................................................................................229
set cli logical-router ......................................................................................230
set cli prompt...............................................................................................231
set cli restart-on-upgrade..............................................................................232
set cli screen-length .....................................................................................233
set cli screen-width ......................................................................................234
set cli terminal .............................................................................................235
set cli timestamp..........................................................................................236
set date ........................................................................................................237
show cli........................................................................................................238
show cli authorization .................................................................................239
show cli directory.........................................................................................241
show cli history ...........................................................................................242
Table of Contents ! ix
Chapter 8 File Management Operational Mode Commands 243

clear log ......................................................................................................244
file archive ..................................................................................................245
file checksum md5.......................................................................................246
file compare.................................................................................................247
file copy ......................................................................................................249
file delete ....................................................................................................250
file list .........................................................................................................251
file rename ..................................................................................................253
file show .....................................................................................................254
show log .....................................................................................................256
Chapter 9 Packet Forwarding Engine Operational Mode Commands 259

show pfe cfeb...............................................................................................261
show pfe feb ................................................................................................264
show pfe fpc ...............................................................................................267
show pfe fwdd .............................................................................................269
show pfe lcc .................................................................................................272
show pfe next-hop ......................................................................................275
show pfe route ............................................................................................277
show pfe scb ...............................................................................................280
show pfe sfm ..............................................................................................282
show pfe ssb ................................................................................................284
show pfe statistics dma ...............................................................................287
show pfe statistics error ..............................................................................290
show pfe statistics ip ...................................................................................292
show pfe statistics ip6 .................................................................................295
show pfe statistics notification ....................................................................298
show pfe statistics pio .................................................................................300
show pfe statistics traffic .............................................................................301
show pfe terse .............................................................................................304
Chapter 10 Remote System Access Operational Mode Commands 305

ssh ..............................................................................................................306
telnet ..........................................................................................................308
Chapter 11 Simple Network Management Protocol

clear snmp statistics ....................................................................................312
show snmp health-monitor ..........................................................................313
show snmp inform-statistics ........................................................................320
show snmp mib ...........................................................................................321
show snmp rmon.........................................................................................323
show snmp statistics ...................................................................................326
show snmp v3 ............................................................................................329
Chapter 12 System Software Operational Mode Commands 333

clear arp ......................................................................................................337
clear system commit ...................................................................................338
clear system reboot .....................................................................................339
clear system services dhcp binding ..............................................................341
x ! Table of Contents
Table of Contents
clear system services dhcp conflict ..............................................................342

clear system services dhcp statistics ............................................................343
configure .....................................................................................................344
op ...............................................................................................................345
request message .........................................................................................346
request routing-engine login ........................................................................347
request support information .......................................................................348
request system configuration rescue delete..................................................351
request system configuration rescue save ....................................................352
request system firmware .............................................................................353
request system halt ......................................................................................354
request system license add ..........................................................................357
request system license delete.......................................................................358
request system license save .........................................................................359
request system logout .................................................................................360
request system partition abort ....................................................................361
request system partition hard-disk ..............................................................362
request system power-off ............................................................................363
request system reboot .................................................................................365
request system snapshot .............................................................................368
request system software add ......................................................................372
request system software delete ....................................................................376
request system software delete-backup........................................................378
request system software rollback ................................................................379
request system software validate ................................................................381
request system storage cleanup ...................................................................383
restart .........................................................................................................385
show arp .....................................................................................................389
show configuration .....................................................................................391
show host ...................................................................................................393
show ntp associations .................................................................................394
show ntp status ...........................................................................................396
show system alarms ....................................................................................397
show system audit ......................................................................................398
show system autoinstallation status .............................................................402
show system boot-messages .......................................................................403
show system buffers ...................................................................................406
show system commit ..................................................................................408
show system configuration archival .............................................................410
show system configuration rescue ...............................................................411
show system connections ...........................................................................412
show system directory-usage .......................................................................415
show system firmware.................................................................................417
show system license ....................................................................................418
show system processes ...............................................................................421
show system queues ...................................................................................427
show system reboot ....................................................................................429
show system rollback ..................................................................................430
show system services dhcp binding .............................................................431
show system services dhcp conflict..............................................................433
show system services dhcp global................................................................434
show system services dhcp pool ..................................................................435
show system services dhcp statistics............................................................437
show system services service-deployment ...................................................439
Table of Contents ! xi
show system snapshot .................................................................................440

show system software .................................................................................441
show system statistics..................................................................................443
show system statistics arp............................................................................452
show system statistics clnl ...........................................................................454
show system statistics esis ...........................................................................456
show system statistics icmp .........................................................................457
show system statistics icmp6 .......................................................................458
show system statistics igmp.........................................................................459
show system statistics ip..............................................................................460
show system statistics ip6............................................................................462
show system statistics mpls .........................................................................464
show system statistics rdp ...........................................................................465
show system statistics tcp ............................................................................466
show system statistics tnp ...........................................................................469
show system statistics tudp..........................................................................471
show system statistics udp...........................................................................472
show system statistics vpls ..........................................................................473
show system storage ...................................................................................475
show system switchover ..............................................................................477
show system uptime ...................................................................................479
show system users ......................................................................................481
show system virtual-memory ......................................................................483
show task ....................................................................................................490
show task io .................................................................................................492
show task memory ......................................................................................494
show version ...............................................................................................497
show version invoke-on ...............................................................................498
start shell .....................................................................................................502
test configuration ........................................................................................503
Part 3 Class of Service
Chapter 13 Class-of-Service Operational Mode Commands 507

show class-of-service ...................................................................................509
show class-of-service adaptive-shaper ..........................................................511
show class-of-service classifier ....................................................................512
show class-of-service code-point-aliases ......................................................514
show class-of-service drop-profile ...............................................................515
show class-of-service fabric scheduler-map .................................................516
show class-of-service fabric statistics ...........................................................517
show class-of-service forwarding-class ........................................................519
show class-of-service forwarding-table ........................................................520
show class-of-service forwarding-table classifier ..........................................522
show class-of-service forwarding-table classifier mapping ...........................523
show class-of-service forwarding-table drop-profile .....................................524
show class-of-service forwarding-table fabric scheduler-map ......................526
show class-of-service forwarding-table loss-priority-map..............................527
show class-of-service forwarding-table loss-priority-map mapping ...............528
show class-of-service forwarding-table rewrite-rule .....................................529
show class-of-service forwarding-table rewrite-rule mapping ......................530
xii ! Table of Contents

Table of Contents
show class-of-service forwarding-table scheduler-map ................................531

show class-of-service fragmentation-map ....................................................533
show class-of-service interface ....................................................................534
show class-of-service loss-priority-map ........................................................536
show class-of-service rewrite-rule ................................................................537
show class-of-service routing-instance..........................................................539
show class-of-service scheduler-map ...........................................................540
show class-of-service traffic-control-profile ..................................................542
show class-of-service virtual-channel............................................................543
show class-of-service virtual-channel-group..................................................544
Part 4 Services
Chapter 14 Compressed Real-Time Transport Protocol

clear services crtp statistics ..........................................................................548
show services crtp .......................................................................................549
show services crtp flows ..............................................................................551
Chapter 15 CoS Services Operational Mode Commands 553

clear services cos statistics ..........................................................................554
show services cos statistics .........................................................................555
Chapter 16 Data Link Switching Operational Mode Commands 559

clear dlsw reachability .................................................................................560
show dlsw capabilities..................................................................................561
show dlsw circuits........................................................................................562
show dlsw peers ..........................................................................................564
show dlsw reachability.................................................................................566
show llc2 redundancy ..................................................................................567
show llc2 redundancy interface statistics .....................................................568
show llc2 redundancy mac-translation .........................................................569
show llc2 redundancy track .........................................................................570
Chapter 17 Flow Collection and Monitoring Operational Mode Commands 573

clear services dynamic-flow-capture ............................................................575
clear passive-monitoring statistics ...............................................................576
clear services flow-collector statistics ..........................................................577
request services flow-collector change-destination primary interface ..........578
request services flow-collector change-destination secondary interface ......579
request services flow-collector test-file-transfer ...........................................580
show passive-monitoring error ....................................................................581
show passive-monitoring flow .....................................................................583
show passive-monitoring memory ..............................................................585
show passive-monitoring status ..................................................................586
show passive-monitoring usage ...................................................................587
show services accounting aggregation ........................................................588
show services accounting errors .................................................................591
show services accounting flow ...................................................................593
Table of Contents ! xiii

show services accounting flow-detail ..........................................................594

show services accounting memory .............................................................597
show services accounting packet-size-distribution .......................................598
show services accounting status...................................................................599
show services accounting usage ..................................................................600
show services dynamic-flow-capture content-destination ............................601
show services dynamic-flow-capture control-source ....................................602
show services dynamic-flow-capture statistics ............................................604
show services flow-collector file interface ...................................................606
show services flow-collector input interface .................................................608
show services flow-collector interface .........................................................609
Chapter 18 Intrusion Detection Service Operational Mode Commands 615

clear services ids ..........................................................................................616
clear services ids destination-table ...............................................................617
clear services ids pair-table ..........................................................................618
clear services ids source-table ......................................................................619
show services ids ........................................................................................620
Chapter 19 IP Security Operational Mode Commands 627

clear ike security-associations .....................................................................630
clear ipsec security-associations ..................................................................631
clear security pki ca-certificate .....................................................................632
clear security pki certificate-request .............................................................633
clear security pki crl .....................................................................................634
clear security pki local-certificate .................................................................635
clear services ipsec-vpn certificates..............................................................636
clear services ipsec-vpn ike security-associations ........................................637
clear services ipsec-vpn ipsec statistics .......................................................638
clear services ipsec-vpn ipsec security-associations .....................................639
request security certificate (signed) ..............................................................640
request security certificate (unsigned) ..........................................................641
request security key-pair .............................................................................642
request security pki ca-certificate enroll .......................................................643
request security pki ca-certificate load .........................................................644
request security pki crl load .........................................................................645
request security pki generate-certificate-request ..........................................646
request security pki generate-key-pair..........................................................648
request security pki local-certificate enroll ...................................................649
request security pki local-certificate load......................................................651
request ipsec switch ....................................................................................652
request services ipsec-vpn ipsec switch tunnel.............................................653
request system certificate add......................................................................654
show ike security-associations ....................................................................655
show ipsec certificates .................................................................................659
show ipsec redundancy ...............................................................................661
show ipsec security-associations .................................................................662
show security pki ca-certificate ....................................................................665
show security pki certificate-request ............................................................668
show security pki crl ....................................................................................670
show security pki local-certificate.................................................................672
show services ipsec-vpn certificates .............................................................674
show services ipsec-vpn ike security-associations .......................................677
xiv ! Table of Contents

Table of Contents
show services ipsec-vpn ipsec security-associations .....................................680

show services ipsec-vpn ipsec statistics .......................................................683
show system certificate................................................................................686
Chapter 20 Layer 2 Tunneling Protocol Operational Mode Commands 689

clear services l2tp multilink..........................................................................690
clear services l2tp session ............................................................................691
clear services l2tp tunnel statistics ...............................................................693
show services l2tp multilink ........................................................................694
show services l2tp session ..........................................................................696
show services l2tp summary........................................................................700
show services l2tp tunnel ............................................................................701
show services l2tp user ...............................................................................704
Chapter 21 Network Address Translation Operational Mode Commands 707

show services nat pool ................................................................................708
Chapter 22 Service Sets Operational Mode Commands 711

clear services service-sets statistics packet-drops ........................................712
show services service-sets cpu-usage ...........................................................713
show services service-sets memory-usage....................................................714
show services service-sets statistics packet-drops .......................................715
show services service-sets summary ............................................................716
Chapter 23 Stateful Firewall Operational Mode Commands 717

clear services stateful-firewall flows .............................................................718
clear services stateful-firewall sip-call ..........................................................721
clear services stateful-firewall sip-register ...................................................724
clear services stateful-firewall statistics ........................................................727
show services stateful-firewall conversations ...............................................728
show services stateful-firewall flows.............................................................732
show services stateful-firewall sip-call .........................................................736
show services stateful-firewall sip-register ...................................................740
show services stateful-firewall statistics........................................................744
show services stateful-firewall statistics application-protocol sip ..................750
Part 5 Indexes
Index........................................................................................................................ 755
Index of Commands............................................................................................ 765
Table of Contents ! xv
xvi ! Table of Contents

About This Guide
This preface provides the following guidelines for using the JUNOS Internet Software
System Basics and Services Command Reference and related Juniper Networks, Inc.,
technical documents:
! Objectives on page xvii
! Audience on page xix
! Using the Indexes on page xix
! Documentation Conventions on page xix
! Related Juniper Networks Documentation on page xxi
! Documentation Feedback on page xxiv
! Requesting Support on page xxiv
Objectives
This manual provides descriptions of JUNOS Internet software commands that you
use to monitor and troubleshoot basic system operations and services on the router.
For additional JUNOS Internet software commands, see these references:
! JUNOS Routing Protocols and Policies Command Reference
! JUNOS Interfaces Command Reference
NOTE: This reference documents Release 8.1 of the JUNOS Internet software. For
additional information about the JUNOS software—either corrections to or
information that might have been omitted from this reference—see the software
release notes at http://www.juniper.net/.
Objectives ! xvii
For information about configuration statements and guidelines related to the

commands described in this reference, see the following configuration guides:
! JUNOS CLI User Guide—Describes how to use the JUNOS command-line

interface (CLI) to configure, monitor, and manage Juniper Networks routing
platforms.
! JUNOS Software Installation and Upgrade Guide—Provides a description of

JUNOS software components and packaging, and includes detailed information
about how to initially configure, reinstall, and upgrade the JUNOS system
software.
! JUNOS System Basics Configuration Guide—Describes Juniper Networks routing

platforms, and provides information about how to configure basic system
parameters, supported protocols and software processes, authentication, and a
variety of utilities for managing your router on the network.
! JUNOS Services Interfaces Configuration Guide—Includes configuration

statements and guidelines for real-time performance monitoring (RPM) and all
services, such as Compressed Real-Time Transport Protocol (CRTP), Data Link
Switching (DLSw), flow collection and monitoring, and stateful firewall filters.
! JUNOS Class of Service Configuration Guide—Includes configuration statements

and guidelines for class of service (CoS) features.
! JUNOS Network Interfaces Configuration Guide—Includes configuration

statements and guidelines for bit error rate test (BERT) parameters and
Automatic Protection Switching (APS).
! JUNOS Network Management Configuration Guide—Includes configuration

statements and guidelines for accounting parameters and the Simple Network
Management Protocol (SNMP).
For information about related tasks performed by Network Operations Center

(NOC) personnel, see the following network operations guides:
! JUNOS Hardware Network Operations Guide
! JUNOS Baseline Network Operations Guide
Supported Routing Platforms

For the features described in this manual, the JUNOS software currently supports
the following routing platforms:
! J-series
! M-series
! T-series
xviii ! Supported Routing Platforms

About This Guide
Audience
This guide is designed for network administrators who are configuring and
monitoring a Juniper Networks routing platform.
To use this guide, you need a broad understanding of networks in general, the
Internet in particular, networking principles, and network configuration. You must
also be familiar with one or more of the following Internet routing protocols:
! Border Gateway Protocol (BGP)
! Distance Vector Multicast Routing Protocol (DVMRP)
! Intermediate System-to-Intermediate System (IS-IS)
! Internet Control Message Protocol (ICMP) router discovery
! Internet Group Management Protocol (IGMP)
! Multiprotocol Label Switching (MPLS)
! Open Shortest Path First (OSPF)
! Protocol-Independent Multicast (PIM)
! Resource Reservation Protocol (RSVP)
! Routing Information Protocol (RIP)
! Simple Network Management Protocol (SNMP)
Personnel operating the equipment must be trained and competent; must not
conduct themselves in a careless, willfully negligent, or hostile manner; and must
abide by the instructions provided by the documentation.
Using the Indexes

This guide contains two indexes: a standard index with topic entries, and an index
of commands.
Documentation Conventions
Table 1 defines notice icons used in this guide.
Table 1: Notice Icons
Icon Meaning Description

Informational note Indicates important features or instructions.
Caution Indicates a situation that might result in loss of data or

hardware damage.
Audience ! xix
Table 2 defines the text and syntax conventions used in this guide.
Table 2: Text and Syntax Conventions
Convention Element Example

Bold sans serif typeface Represents text that you type. To enter configuration mode, type the configure
command:
user@host> configure
Fixed-width typeface Represents output on the terminal screen. user@host> show chassis alarms
No alarms currently active
Italic typeface ! Introduces important new terms. ! A policy term is a named structure that defines
match conditions and actions.
! Identifies book names. ! JUNOS System Basics Configuration Guide
! Identifies RFC and Internet draft titles. ! RFC 1997, BGP Communities Attribute
Italic sans serif typeface Represents variables (options for which Configure the machine’s domain name:
you substitute a value) in commands or [edit]
configuration statements. root@# set system domain-name domain-name
Sans serif typeface Represents names of configuration ! To configure a stub area, include the stub
statements, commands, files, and statement at the [edit protocols ospf area area-id]
directories; IP addresses; configuration hierarchy level.
hierarchy levels; or labels on routing ! The console port is labeled CONSOLE.
platform components.
< > (angle brackets) Enclose optional keywords or variables. stub <default-metric metric>;
| (pipe symbol) Indicates a choice between the mutually broadcast | multicast
exclusive keywords or variables on either (string1 | string2 | string3)
side of the symbol. The set of choices is
often enclosed in parentheses for clarity.
# (pound sign) Indicates a comment specified on the rsvp { # Required for dynamic MPLS only
same line as the configuration statement
to which it applies.
[ ] (square brackets) Enclose a variable for which you can community name members [ community-ids ]
substitute one or more values.
Indention and braces ( { } ) Identify a level in the configuration [edit]
hierarchy. routing-options {
static {
route default {
; (semicolon) Identifies a leaf statement at a nexthop address;
configuration hierarchy level. retain;
}
}
}
J-Web GUI Conventions
Bold typeface Represents J-Web graphical user interface ! In the Logical Interfaces box, select All Interfaces.
(GUI) items you click or select. ! To cancel the configuration, click Cancel.
> (bold right angle bracket) Separates levels in a hierarchy of J-Web In the configuration editor hierarchy, select
selections. Protocols>Ospf.
xx ! Documentation Conventions
About This Guide
Related Juniper Networks Documentation

Table 3 lists the software and hardware guides and release notes for the supported
Juniper Networks routing platforms and describes the contents of each document.
Table 4 lists the books included in the Network Operations Guide series.
Table 3: Technical Documentation for Supported Routing Platforms (1 of 3)
Document Description
JUNOS Internet Software Configuration Guides
Class of Service Provides an overview of the class-of-service (CoS) functions of the JUNOS software
and describes how to configure CoS features, including configuring multiple
forwarding classes for transmitting packets, defining which packets are placed into
each output queue, scheduling the transmission service level for each queue, and
managing congestion through the random early detection (RED) algorithm.
CLI User Guide Describes how to use the JUNOS command-line interface (CLI) to configure, monitor,
and manage Juniper Networks routing platforms. This material was formerly
covered in the JUNOS System Basics Configuration Guide.
Feature Guide Provides a detailed explanation and configuration examples for several of the most
complex features in the JUNOS software.
High Availability Provides an overview of hardware and software resources that ensure a high level of
continuous routing platform operation and describes how to configure high
availability (HA) features such as nonstop routing (NSR) and graceful Routing Engine
switchover (GRES).
MPLS Applications Provides an overview of traffic engineering concepts and describes how to configure
traffic engineering protocols.
Multicast Protocols Provides an overview of multicast concepts and describes how to configure
multicast routing protocols.
Network Interfaces Provides an overview of the network interface functions of the JUNOS software and
describes how to configure the network interfaces on the routing platform.
Network Management Provides an overview of network management concepts and describes how to
configure various network management features, such as SNMP and accounting
options.
Policy Framework Provides an overview of policy concepts and describes how to configure routing
policy, firewall filters, forwarding options, and cflowd.
Routing Protocols Provides an overview of routing concepts and describes how to configure routing,
routing instances, and unicast routing protocols.
Secure Configuration Guide for Common Provides an overview of secure Common Criteria and JUNOS-FIPS protocols for the
Criteria and JUNOS-FIPS JUNOS Internet software and describes how to install and configure secure
Common Criteria and JUNOS-FIPS on a routing platform.
Services Interfaces Provides an overview of the services interfaces functions of the JUNOS software and
describes how to configure the services interfaces on the routing platform.
Software Installation and Upgrade Guide Provides a description of JUNOS software components and packaging, and includes
detailed information about how to initially configure, reinstall, and upgrade the
JUNOS system software. This material was formerly covered in the JUNOS System
Basics Configuration Guide.
System Basics Describes Juniper Networks routing platforms, and provides information about how
to configure basic system parameters, supported protocols and software processes,
authentication, and a variety of utilities for managing your router on the network.
Related Juniper Networks Documentation ! xxi

VPNs Provides an overview and describes how to configure Layer 2 and Layer 3 virtual
private networks (VPNs), virtual private LAN service (VPLS), and Layer 2 circuits.
Provides configuration examples.
JUNOS References
Hierarchy and RFC Reference Describes the JUNOS configuration mode commands. Provides a hierarchy
reference that displays each level of a configuration hierarchy, and includes all
possible configuration statements that can be used at that level. This material was
formerly covered in the JUNOS System Basics Configuration Guide.
Interfaces Command Reference Describes the JUNOS software operational mode commands you use to monitor and
troubleshoot interfaces.
Routing Protocols and Policies Command Describes the JUNOS software operational mode commands you use to monitor and
Reference troubleshoot routing protocols and policies, including firewall filters.
System Basics and Services Command Describes the JUNOS software operational mode commands you use to monitor and
Reference troubleshoot system basics, including commands for real-time monitoring and route
(or path) tracing, system software management, and chassis management. Also
describes commands for monitoring and troubleshooting services such as CoS, IP
Security (IPSec), stateful firewalls, flow collection, and flow monitoring.
System Log Messages Reference Describes how to access and interpret system log messages generated by JUNOS
software modules and provides a reference page for each message.
J-Web User Guide
J-Web Interface User Guide Describes how to use the J-Web GUI to configure, monitor, and manage Juniper
Networks routing platforms.
JUNOS API and Scripting Documentation
JUNOScript API Guide Describes how to use the JUNOScript application programming interface (API) to
monitor and configure Juniper Networks routing platforms.
JUNOS XML API Configuration Reference Provides reference pages for the configuration tag elements in the JUNOS XML API.
JUNOS XML API Operational Reference Provides reference pages for the operational tag elements in the JUNOS XML API.
JUNOS Configuration and Diagnostic Provides an overview, instructions for using, and examples of the commit script and
Automation Guide self-diagnosis features of the JUNOS software. This guide explains how to enforce
custom configuration rules defined in scripts that run at commit time, how to use
commit script macros to provide simplified aliases for frequently used configuration
statements, and how to configure diagnostic event policies and actions associated
with each policy.
NETCONF API Guide Describes how to use the NETCONF API to monitor and configure Juniper Networks
routing platforms.
JUNOS Comprehensive Index and Glossary
Comprehensive Index and Glossary Provides a complete index of all JUNOS software books, the JUNOScript API Guide,
and the NETCONF API Guide. Also provides a comprehensive glossary.
JUNOScope Documentation
JUNOScope Software User Guide Describes the JUNOScope software GUI, how to install and administer the software,
and how to use the software to manage routing platform configuration files and
monitor routing platform operations.
xxii ! Related Juniper Networks Documentation

About This Guide
J-series Services Router Documentation
Getting Started Guide Provides an overview, basic instructions, and specifications for J-series Services
Routers. The guide explains how to prepare your site for installation, unpack and
install the router and its components, install licenses, and establish basic
connectivity. Use the Getting Started Guide for your router model.
Basic LAN and WAN Access Configuration Explains how to configure the interfaces on J-series Services Routers for basic IP
Guide routing with standard routing protocols, ISDN backup, and digital subscriber line
(DSL) connections.
Advanced WAN Access Configuration Explains how to configure J-series Services Routers in virtual private networks
Guide (VPNs) and multicast networks, configure data link switching (DLSw) services, and
apply routing techniques such as policies, stateless and stateful firewall filters, IP
Security (IPSec) tunnels, and class-of-service (CoS) classification for safer, more
efficient routing.
Administration Guide Shows how to manage users and operations, monitor network performance,
upgrade software, and diagnose common problems on J-series Services Routers.
M-series and T-series Hardware Documentation
Hardware Guide Describes how to install, maintain, and troubleshoot routing platforms and
components. Each platform has its own hardware guide.
PIC Guide Describes the routing platform PICs. Each platform has its own PIC guide.
Release Notes
JUNOS Release Notes Summarize new features and known problems for a particular software release,
provide corrections and updates to published JUNOS, JUNOScript, and NETCONF
manuals, provide information that might have been omitted from the manuals, and
describe upgrade and downgrade procedures.
Hardware Release Notes Describe the available documentation for the routing platform and the supported
PICs, and summarize known problems with the hardware and accompanying
software. Each platform has its own release notes.
JUNOScope Software Release Notes Contain corrections and updates to the published JUNOScope manual, provide
information that might have been omitted from the manual, and describe upgrade
and downgrade procedures.
J-series Services Router Release Notes Briefly describe the J-series Services Router features, identify known hardware
problems, and provide upgrade and downgrade instructions.
Table 4: JUNOS Internet Software Network Operations Guides (1 of 2)
Book Description
Baseline Describes the most basic tasks for running a network using Juniper Networks
products. Tasks include upgrading and reinstalling JUNOS software, gathering basic
system management information, verifying your network topology, and searching
log messages.
Interfaces Describes tasks for monitoring interfaces. Tasks include using loopback testing and
locating alarms.
MPLS Describes tasks for configuring, monitoring, and troubleshooting an example MPLS
network. Tasks include verifying the correct configuration of the MPLS and RSVP
protocols, displaying the status and statistics of MPLS running on all routers in the
network, and using the layered MPLS troubleshooting model to investigate problems
with an MPLS network.
Related Juniper Networks Documentation ! xxiii

Table 4: JUNOS Internet Software Network Operations Guides (2 of 2)
Book Description
MPLS Log Reference Describes MPLS status and error messages that appear in the output of the show
mpls lsp extensive command. The guide also describes how and when to configure
Constrained Shortest Path First (CSPF) and RSVP trace options, and how to examine
a CSPF or RSVP failure in a sample network.
Hardware Describes tasks for monitoring M-series and T-series routing platforms.
Documentation Feedback
We encourage you to provide feedback, comments, and suggestions so that we can
improve the documentation. Send your comments to
[email protected], or fill out the documentation feedback form at
http://www.juniper.net/techpubs/docbug/docbugreport.html. If you are using e-mail,
be sure to include the following information with your comments:
! Document name
! Document part number
! Page number
! Software release version
Requesting Support
For technical support, open a support case using the Case Manager link at
http://www.juniper.net/support/ or call 1-888-314-JTAC (from the United States,
Canada, or Mexico) or 1-408-745-9500 (from elsewhere).
xxiv ! Documentation Feedback

Part 1
Monitoring and Testing Tools
! Connectivity Operational Mode Commands on page 3
! Interface Diagnostics Operational Mode Commands on page 23
! Real-Time Performance Monitoring Operational Mode Commands on page 41
! Real-Time Router Monitoring Operational Mode Commands on page 51
Monitoring and Testing Tools ! 1

2 ! Monitoring and Testing Tools

Chapter 1
Connectivity Operational Mode
Commands
Table 5 summarizes the command-line interface (CLI) commands you can use to
perform and monitor connectivity functions. Commands are listed in alphabetical
order.
Table 5: Connectivity Operational Mode Commands
Task Command
Check host reachability and network connectivity. ping on page 4
Check the reachability of a remote Asynchronous ping atm on page 7

Transfer Mode (ATM) node.
Check the operability of a remote Connectionless ping clns on page 8
Network Service (CLNS) node.
Check the operability of a Layer 2 circuit. ping mpls l2circuit on page 10
Check the operability of a Layer 2 virtual private ping mpls l2vpn on page 12
network (VPN).
Check the operability of a Layer 3 VPN. ping mpls l3vpn on page 14
Check the operability of a Multiprotocol Label ping mpls ldp on page 16
Switching (MPLS) connection.
Check the operability of MPLS label-switched path ping mpls lsp-end-point on page 18
(LSP) endpoint connections.
Check the operability of MPLS Resource ping mpls rsvp on page 20
Reservation Protocol (RSVP)-signaled LSP
connections.
NOTE: For information about related tasks performed by Network Operations

Center (NOC) personnel, see the JUNOS Baseline Network Operations Guide.
! 3
ping
Syntax ping host

<bypass-routing>
<count requests>
<detail>
<do-not-fragment>
<inet | inet6>
<interface source-interface>
<interval seconds>
<logical-router (all | logical-router-name)>
<loose-source value>
<no-resolve>
<pattern string>
<rapid>
<record-route>
<routing-instance routing-instance-name>
<size bytes>
<source source-address>
<strict strict-source value>
<tos type-of-service>
<ttl value>
<verbose>
<wait seconds>
Release Information Command introduced before JUNOS Release 7.4.
Description Check host reachability and network connectivity. The ping command sends
Internet Control Message Protocol (ICMP) ECHO_REQUEST messages to elicit ICMP
ECHO_RESPONSE messages from the specified host.
Type Ctrl+c to interrupt a ping command.
Options host—IP address or hostname of the remote system to ping.
bypass-routing—(Optional) Bypass the normal routing tables and send ping requests
directly to a system on an attached network. If the system is not on a directly
attached network, an error is returned. Use this option to ping a local system
through an interface that has no route through it.
count requests—(Optional) Number of ping requests to send. The range of values is

1 through 2,000,000,000. The default value is an unlimited number of
requests.
detail—(Optional) Include in the output the interface on which the ping reply was
received.
do-not-fragment—(Optional) Set the do-not-fragment (DF) bit in the IP header of the

ping packets.
inet—(Optional) Ping Packet Forwarding Engine IPv4 routes.
inet6—(Optional) Ping Packet Forwarding Engine IPv6 routes.
interface source-interface—(Optional) Interface to use to send the ping requests.
4 ! ping
Chapter 1: Connectivity Operational Mode Commands
interval seconds—(Optional) How often to send ping requests. The range of values,
in seconds, is 1 through infinity. The default value is 1.
logical-router (all | logical-router-name)—(Optional) Perform this operation on all

logical routers or on a particular logical router.
loose-source value—(Optional) Intermediate loose source route entry (IPv4). Open a

set of values.
no-resolve—(Optional) Do not attempt to determine the hostname that corresponds

to the IP address.
pattern string—(Optional) Specify a hexadecimal fill pattern to include in the ping

packet.
rapid—(Optional) Send ping requests rapidly. The results are reported in a single
message, not in individual messages for each ping request. By default, five ping
requests are sent before the results are reported. To change the number of
requests, include the count option.
record-route—(Optional) Record and report the packet’s path (IPv4).
routing-instance routing-instance-name—(Optional) Name of the routing instance for

the ping attempt.
size bytes—(Optional) Size of ping request packets. The range of values, in bytes, is
0 through 65,468. The default value is 56, which is effectively 64 bytes because
8 bytes of ICMP header data are added to the packet.
source source-address—(Optional) IP address of the outgoing interface. This address

is sent in the IP source address field of the ping request. If this option is not
specified, the default address is usually the loopback interface (lo.0).
strict—(Optional) Use the strict source route option (IPv4).
strict-source value—(Optional) Intermediate strict source route entry (IPv4). Open a

set of values.
tos type-of-service—(Optional) Set the type-of-service (ToS) field in the IP header of

the ping packets. The range of values is 0 through 255.
ttl value—(Optional) Time-to-live (TTL) value to include in the ping request (IPv6).
The range of values is 0 through 255
verbose—(Optional) Display detailed output.
wait seconds—(Optional) Delay, in seconds, after sending the last packet. If this
option is not specified, the default delay is 10 seconds. If this option is used
without the count option, a default count of 5 packets is used.
Required Privilege Level network
List of Sample Output ping host on page 6

ping host size size count count on page 6
ping host rapid on page 6
ping ! 5
Output Fields When you enter this command, you are provided feedback on the status of your
request. An exclamation point (!) indicates that an echo reply was received. A
period (.) indicates that an echo reply was not received within the timeout period.
An x indicates that an echo reply was received with an error code—these packets
are not counted in the received packets count. They are accounted for separately.
ping host user@host> ping skye

PING skye.net (192.168.169.254): 56 data bytes
64 bytes from 192.168.169.254: icmp_seq=0 ttl=253 time=1.028 ms
^C [abort]
ping host size size user@host> ping skye size 200 count 5
count count PING skye.net (192.168.169.254): 200 data bytes
--- skye.net ping statistics ---

5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 1.759/5.075/17.898 ms
ping host rapid user@host> ping skye rapid

PING skye.net (192.168.169.254): 56 data bytes
!!!!!
--- skye.net ping statistics ---
round-trip min/avg/max/stddev = 0.956/0.974/1.025/0.026 ms
6 ! ping
ping atm
Syntax ping atm interface interface-name vci vci

<brief>
<count count>
<end-to-end | segment>
<interval seconds>
<sequence-number sequence-number>
Description Check the reachability of a remote Asynchronous Transfer Mode (ATM) node. All
packets are 53 bytes.
Type Ctrl+c to interrupt a ping atm command.
Options interface interface-name—Interface to use to send the ATM ping requests. For ATM 1
and ATM 2 interfaces, you must include a logical unit number in the interface
name
vci vci—ATM point-to-point virtual circuit identifier. It can be a virtual circuit

identifier (vci) or a virtual private identifier (vpi.vci).
brief—(Optional) Display only the ATM ping summary statistics. These are
displayed after you type Ctrl+c to interrupt the ping atm command.
count count—(Optional) Number of ping requests to send. The range of values is 0

through 10,000. The default value is an unlimited number of requests.
end-to-end—(Optional) Cells are sent to the end node. This is the default.
segment—(Optional) Cells are sent only to the intermediate node.
in seconds, is 1 through 10,000. The default value is 1.
sequence-number sequence-number—(Optional) Starting sequence number

(correlation tag). The range of values is 0 through 65,468. The default value
is 1.
List of Sample Output ping atm on page 7
ping atm user@host> ping atm interface at-5/3/0 vci 0.128

53 byte oam cell received on (vpi=0 vci=128): seq=1
53 byte oam cell received on (vpi=0 vci=128): seq=2
^C[abort]
--- atmping statistics ---
5 cells transmitted, 5 cells received, 0% cell loss
ping atm ! 7
ping clns
Syntax ping clns host

<brief>
<count requests>
<detail>
<do-not-fragment>
<interval seconds>
<no-resolve>
<pattern string>
<rapid>
<size bytes>
<ttl value>
<verbose>
<wait seconds>
Description Check the reachability of a remote Connectionless Network Service (CLNS) node.
Type Ctrl+c to interrupt a ping clns command.
Options host—IP address or hostname of the remote system to ping.
brief—(Optional) Display brief information.
count requests—(Optional) Number of ping requests to send. The range of values is

1 through 2,000,000,000. The default is an unlimited number of requests.
detail—(Optional) Include in the output the interface on which the ping reply was
received.
do-not-fragment—(Optional) Set the do-not-fragment (DF) bit in the IP header of the

ping packets.
in seconds, is 1 through infinity. The default value is 1.

to the IP address.
pattern string—(Optional) Specify a hexadecimal fill pattern to include in the ping

packet.
rapid—(Optional) Send ping requests rapidly. The results are reported in a single
message, not in individual messages for each ping request. By default, five ping
requests are sent before the results are reported. To change the number of
request, include the count option.

the ping attempt.
8 ! ping clns
size bytes—(Optional) Size of ping request packets. The range of values, in bytes, is
0 through 65,468. The default value is 56, which is effectively 64 bytes because
8 bytes of ICMP header data are added to the packet.

specified, the default address is usually the loopback interface.
ttl value—(Optional) Time-to-live (TTL) value to include in the ping request (IPv6).
The range of values is 0 through 255.
verbose—(Optional) Display detailed output.
wait seconds—(Optional) Delay, in seconds, after sending the last packet. If this
option is not specified, the default delay is 10 seconds. If this option is used
without the count option, a default count of 5 packets is used.
List of Sample Output ping clns on page 9
ping clns user@host> ping clns 47.0005.9000.f800.0000.0108.0001.1921.6812.4058.00

PING 47.0005.9000.f800.0000.0108.0001.1921.6812.4058.00
(47.0005.9000.f800.0000.0108.0001.1921.6812.4058.00): 55 data bytes
64 bytes from 47.0005.9000.f800.0000.0108.0001.1921.6812.4058.00: seq=0 ttl=30
time=15.051 ms
time=10.370 ms
time=10.367 ms
--- ping statistics ---
round-trip min/avg/max/stddev = 10.367/11.929/15.051/2.207 ms
ping clns ! 9
ping mpls l2circuit
Syntax ping mpls l2circuit (interface interface-name | virtual-circuit virtual-circuit-id

neighbor prefix-name)
<count count>
<destination address>
<detail>
<exp forwarding-class>
<v1>
Description Check the operability of the Multiprotocol Label Switching (MPLS) Layer 2 circuit
connections.
Type Ctrl+c to interrupt a ping mpls l2circuit command.
Options interface interface-name—Ping an interface configured for the Layer 2 circuit on the
egress provider edge (PE) router.
virtual-circuit virtual-circuit-id neighbor prefix-name—Ping a combination of the virtual

circuit identifier on the egress PE router and the IPv4 prefix, testing the
integrity of the Layer 2 circuit between the ingress and egress PE routers.
count count—(Optional) Number of ping requests to send. If count is not specified,

five ping requests are sent. The range of values is 1 through 1,000,000. The
default value is 5.
destination address—(Optional) Specify an address other than the default

(127.0.0.1/32) for the ping echo requests. The address can be anything within
the 127/8 subnet.
detail—(Optional) Display detailed information about the echo requests sent and
received.
exp forwarding class—(Optional) Value of the forwarding class for the MPLS ping
packets.

v1—(Optional) Use the type 9 Layer 2 circuit type, length, and value (TLV).
Additional Information You must configure MPLS at the [edit protocols mpls] hierarchy level on the egress
PE router (the router receiving the MPLS echo packets) to ping a Layer 2 circuit. You
must also configure address 127.0.0.1/32 (or the address specified using the
destination option) on the egress PE router’s loopback interface. Otherwise, the
egress PE router does not have this forwarding entry and simply drops the
incoming ping packets.
10 ! ping mpls l2circuit

List of Sample Output ping mpls l2circuit interface detail on page 11

ping mpls l2circuit virtual-circuit detail on page 11
ping mpls l2circuit user@host> ping mpls l2circuit interface so-1/0/0.1

interface detail Request for seq 1, to interface 69, labels <100000, 100208>
Reply for seq 1, return code: Egress-ok, time: 0.439 ms
ping mpls l2circuit user@host> ping mpls l2circuit virtual-circuit 200 neighbor 10.255.245.122/32
virtual-circuit detail detail
Request for seq 1, to interface 68, labels <100048, 100128>
Reply for seq 1, return code: Egress-ok time: 0.539 ms
ping mpls l2circuit ! 11

ping mpls l2vpn
Syntax ping mpls l2vpn (instance instance-name local-site-id local-site-id-number remote-site-id

remote-site-id-number | interface interface-name)
<bottom-label-ttl>
<count count>
<detail>
Description Check the operability of Multiprotocol Label Switching (MPLS) Layer 2 virtual
private network (VPN) connections.
Type Ctrl+c to interrupt a ping mpls l2vpn command.
Options instance instance-name local-site-id local-site-id-number remote-site-id

remote-site-id-number—Ping a combination of the Layer 2 VPN routing instance
name, the local site identifier, and the remote site identifier, testing the
integrity of the Layer 2 VPN circuit (specified by the identifiers) between the
ingress and egress provider edge (PE) routers.
interface interface-name—Ping an interface configured for the Layer 2 VPN on the

egress PE router.
bottom-label-ttl—(Optional) Display the time-to-live value for the bottom label in the
label stack.

default value is 5.

the 127/8 subnet.
received.
packets.

12 ! ping mpls l2vpn

List of Sample Output ping mpls l2vpn instance on page 13

ping mpls l2vpn instance detail on page 13
ping mpls l2vpn user@host> ping mpls l2vpn instance vpn1 remote-site-id 1 local-site-id 2
instance !!!!!
--- lsping statistics ---
ping mpls l2vpn user@host> ping mpls l2vpn instance vpn1 remote-site-id 1 local-site-id 2 detail
instance detail Request for seq 1, to interface 68, labels <800001, 100176>
Reply for seq 1, return code: Egress-ok

ping mpls l2vpn ! 13

ping mpls l3vpn
Syntax ping mpls l3vpn prefix prefix-name

<l3vpn-name>
<bottom-label-ttl>
<count count>
<detail>
Description Check the operability of a Multiprotocol Label Switching (MPLS) Layer 3 virtual
private network (VPN) connection.
Type Ctrl+c to interrupt a ping mpls l3vpn command.
Options prefix prefix-name—Ping to test whether a prefix is present in a provider edge (PE)
router’s VPN routing and forwarding (VRF) table, by means of a Layer 3 VPN
destination prefix. This option does not test the connection between a PE
router and a customer edge (CE) router.
l3vpn-name—(Optional) Layer 3 VPN name.
bottom-label-ttl—(Optional) Display the time-to-live value for the bottom label in the
label stack.

default value is 5.

the 127/8 subnet.
received.
packets.

14 ! ping mpls l3vpn

List of Sample Output ping mpls l3vpn on page 15

ping mpls l3vpn detail on page 15
ping mpls l3vpn user@host> ping mpls l3vpn vpn1 prefix 10.255.245.122/32
!!!!!
ping mpls l3vpn detail user@host> ping mpls l3vpn vpn1 prefix 10.255.245.122/32 detail
ping mpls l3vpn ! 15

ping mpls ldp
Syntax ping mpls ldp fec

<count count>
<detail>
Description Check the operability of Multiprotocol Label Switching (MPLS) Label Distribution
Protocol (LDP)-signaled label-switched path (LSP) connections.
Type Ctrl+c to interrupt a ping mpls command.
Options fec—(Optional) Ping an LDP-signaled LSP using the forwarding equivalence class
(FEC) prefix and length.

default value is 5.

the 127/8 subnet.
received.
packets.

Additional Information If the LSP changes, the label and interface information displayed when the ping
command was issued continues to be used.
You must configure MPLS at the [edit protocols mpls] hierarchy level on the remote
router to ping an LSP terminating there. You must configure MPLS even if you
intend to ping only LDP forwarding equivalence classes (FECs).
On the egress router (the router receiving the MPLS echo packets), you must
configure the address 127.0.0.1/32 (or the address specified using the destination
option) on its loopback interface. If this address is not configured correctly, the
egress router does not have this forwarding entry and therefore simply drops the
incoming MPLS ping packets and replies with “ICMP host unreachable” messages.
List of Sample Output ping mpls ldp fec count on page 17
16 ! ping mpls ldp

ping mpls ldp fec count user@host> ping mpls ldp 10.255.245.222 count 10
!!!xxx...x
4 packets received with error status, not counted as received.
ping mpls ldp ! 17

ping mpls lsp-end-point
Syntax ping mpls lsp-end-point prefix-name

<count count>
<detail>
Description Check the operability of Multiprotocol Label Switching (MPLS) label-switched path
(LSP) endpoint connections.
Options prefix-name—Label Distribution Protocol (LDP) forwarding equivalence class (FEC)

prefix or Resource Reservation Protocol (RSVP) LSP endpoint address.

default value is 5.

the 127/8 subnet.
received.
packets.

List of Sample Output ping mpls lsp-end-point detail on page 19
18 ! ping mpls lsp-end-point

ping mpls lsp-end-point user@host> ping mpls lsp-end-point 10.255.245.119 detail

detail Route to end point address is via LDP FEC
Request for seq 1, to interface 67, label 100032
ping mpls lsp-end-point ! 19

ping mpls rsvp
Syntax ping mpls rsvp lsp-name

<count count>
<detail>
<standby standby-path-name>
Description Check the operability of Multiprotocol Label Switching (MPLS) Resource

Reservation Protocol (RSVP)-signaled label-switched path (LSP) connections.
Options lsp-name—Ping an RSVP-signaled LSP using an LSP name.

default value is 5.

the 127/8 subnet.
received.
packets.

standby standby-path-name—(Optional) Name of the standby path.
20 ! ping mpls rsvp

List of Sample Output ping mpls rsvp (Echo Reply Received) on page 21
ping mpls rsvp (Echo Reply with Error Code) on page 21
ping mpls rsvp lsp-name detail on page 21
ping mpls rsvp (Echo user@host> ping mpls rsvp test1

Reply Received) !!!!!
ping mpls rsvp (Echo user@host> ping mpls rsvp test2

Reply with Error Code) !!xxx
3 packets received with error status, not counted as received.
ping mpls rsvp lsp-name user@host> ping mpls rsvp to-green detail
detail Request for seq 1, to interface 67, labels <100095, 0, 0>
Request for seq 2, to interface 67, labels <100095, 0, 0>
ping mpls rsvp ! 21

22 ! ping mpls rsvp

Chapter 2
Interface Diagnostics Operational Mode
Commands
run diagnostics on router interfaces. Commands are listed in alphabetical order.
Table 6: Interface Diagnostics Operational Mode Commands
Task Command
Start a bit error rate test (BERT) on a DS0 interface. test interface ds0-bert-start on page 24
Stop a BERT on a DS0 interface. test interface ds0-bert-stop on page 25
Start a BERT on an E1 interface. test interface e1-bert-start on page 26
Stop a BERT on an E1 interface. test interface e1-bert-stop on page 27
Start a BERT on an E3 interface. test interface e3-bert-start on page 28
Stop a BERT on an E3 interface. test interface e3-bert-stop on page 29
Transmit over a facilities data link (FDL) to initiate or terminate a far-end test interface fdl-line-loop on page 30
line loopback.
Transmit over an FDL to initiate or terminate a far-end payload loopback. test interface fdl-payload-loop on page 31
Transmit the line loopback activate code word sequence on the interface’s test interface feac-loop-initiate on page 32
far-end alarm and control (FEAC) channel.
Transmit the line loopback deactivate code word sequence on the test interface feac-loop-terminate on page 33
interface’s FEAC channel.
Initiate or terminate a far-end line loopback. test interface inband-line-loop on page 34
Initiate or terminate a far-end payload loopback. test interface inband-payload-loop on page 35
Restart auto-negotiation on a Fast Ethernet or Gigabit Ethernet interface. test interface restart-auto-negotiation on page 36
Start a BERT on a T1 interface. test interface t1-bert-start on page 37
Stop a BERT on a T1 interface. test interface t1-bert-stop on page 38
Start a BERT on a T3 interface. test interface t3-bert-start on page 39
Stop a BERT on a T3 interface. test interface t3-bert-stop on page 40
NOTE: For information about how to configure interface test parameters, see the
JUNOS Network Interfaces Configuration Guide. For information about related tasks
performed by Network Operations Center (NOC) personnel, see the JUNOS
Interfaces Network Operations Guide.
! 23
test interface ds0-bert-start
Syntax test interface ds0-bert-start ds-fpc/pic/port
Description Start a bit error rate test (BERT) on a DS0 interface.
Options ds-fpc/pic/port—DS0 interface name.
Additional Information Before starting a BERT, you must disable the interface. To do so, include the disable
statement at the [edit interfaces interface-name] hierarchy level. You can run a BERT
on only one interface per PIC at a time.
Required Privilege Level view
List of Sample Output test interface ds0-bert-start on page 24
Output Fields To display the results of the BERT, use the show interfaces extensive command.
test interface user@host> test interface ds0-bert-start ds-1/0/0

ds0-bert-start
24 ! test interface ds0-bert-start

Chapter 2: Interface Diagnostics Operational Mode Commands
test interface ds0-bert-stop
Syntax test interface ds0-bert-stop ds-fpc/pic/port
Description Stop a bit error rate test (BERT) on a DS0 interface.
Options ds-fpc/pic/port—DS0 interface name.
List of Sample Output test interface ds0-bert-stop on page 25
test interface user@host> test interface ds0-bert-stop ds-1/0/0

ds0-bert-stop
test interface ds0-bert-stop ! 25

test interface e1-bert-start
Syntax test interface e1-bert-start interface-name
Description Start a bit error rate test (BERT) on an E1 interface.
Options interface-name—Interface name: e1-fpc/pic/port or ce1-fpc/pic/port<:channel>.
Additional Information Before starting a BERT, you must disable the interface. To do this, include the disable
List of Sample Output test interface e1-bert-start on page 26
test interface user@host> test interface e1-bert-start e1-1/0/0

e1-bert-start
26 ! test interface e1-bert-start

test interface e1-bert-stop
Syntax test interface e1-bert-stop interface-name
Description Stop a bit error rate test (BERT) on an E1 interface.
Options interface-name—Interface name: e1-fpc/pic/port or ce1-fpc/pic/port<:channel>.
List of Sample Output test interface e1-bert-stop on page 27
test interface user@host> test interface e1-bert-stop e1-1/0/0

e1-bert-stop
test interface e1-bert-stop ! 27

test interface e3-bert-start
Syntax test interface e3-bert-start e3-fpc/pic/port
Description Start a bit error rate test (BERT) on an E3 interface.
Options e3-fpc/pic/port—E3 interface name.
List of Sample Output test interface e3-bert-start on page 28
test interface user@host> test interface e3-bert-start e3-1/0/0

e3-bert-start
28 ! test interface e3-bert-start

test interface e3-bert-stop
Syntax test interface e3-bert-stop e3-fpc/pic/port
Description Stop a bit error rate test (BERT) on an E3 interface.
Options e3-fpc/pic/port—E3 interface name.
List of Sample Output test interface e3-bert-stop on page 29
test interface user@host> test interface e3-bert-stop e3-1/0/0

e3-bert-stop
test interface e3-bert-stop ! 29

test interface fdl-line-loop
Syntax test interface fdl-line-loop (ansi (initiate | terminate) | bellcore (initiate | terminate))
t1-fpc/pic/port<:channel>
Description Send commands over the facilities data link (FDL) on a T1 interface to initiate or
terminate a far-end line loopback using either an ANSI or Bellcore FDL command
code. If the far end of the connection is in C-bit parity mode and it has been
configured to accept line loopback requests from the near end, the far end executes
the request.See the ANSI T1.107 specification for more details.
NOTE: The following restrictions apply to this command:
! If you attach a SmartJack network interface unit (NIU) on the T1 connection

between an M-series router with a channelized DS3 IQ, channelized OC3 IQ,
or channelized OC12 IQ interface and a standard T1 interface, and you issue
the test interface fdl-line-loop bellcore initiate command on the channelized T1
interface, the loopback test might not function correctly.
! On Channelized DS3-to-DS1 and Multichannel DS3 PICs, this command can

only be initiated by T1 interfaces. These types of T1 interfaces cannot accept a
request for this test sent by another router.
! This command is not supported on the 4-port T1 PIC.
Options ansi—ANSI FDL command code.
bellcore—Bellcore FDL command code.
initiate—Initiate the far-end line loopback.
terminate—Terminate the far-end line loopback.
t1-fpc/pic/port<:channel>—Name of a T1 interface. The channel number indicates a

channelized interface.
List of Sample Output test interface fdl-line-loop on page 30
Output Fields To display the state and the number of times the interface has placed itself into
remote loopback, use the show interfaces extensive command.
test interface user@host> test interface fdl-line-loop ansi initiate t1-1/0/0

fdl-line-loop
30 ! test interface fdl-line-loop

test interface fdl-payload-loop
Syntax test interface fdl-payload-loop (ansi (initiate | terminate) | bellcore (initiate | terminate)
t1-fpc/pic/port<:channel>)
Description Send commands over the facilities data link (FDL) on a T1 interface to initiate or
terminate a far-end payload loopback using either an ANSI or Bellcore FDL
command code. If the far end of the connection is in C-bit parity mode and has
been configured to accept payload loopback requests from the near end, the far end
executes the request.See the ANSI T1.107 specification for more details.

initiate—Initiate the far-end payload loopback.
terminate—Terminate the far-end payload loopback.

List of Sample Output test interface fdl-payload-loop on page 31
test interface user@host> test interface fdl-payload-loop ansi initiate t1-1/0/0

fdl-payload-loop
test interface fdl-payload-loop ! 31

test interface feac-loop-initiate
Syntax test interface t3-fpc/pic/port<:channel> feac-loop-initiate
Description Have the interface transmit the word sequence for the line loopback activate code
on its far-end alarm and control (FEAC) channel. If the far end of the connection is
in C-bit parity mode and has been configured to accept remote loopback requests
from the near end, the far end places its interface into remote loopback.See the
ANSI T1.107 specification for more details.
NOTE: This command is not supported for T3 interfaces configured on DS3 and
Channelized OC12 PICs.
Options t3-fpc/pic/port<:channel>—Name of a T3 interface. The channel number indicates a

List of Sample Output test interface feac-loop-initiate on page 32
test interface user@host> test interface feac-loop-initiate t3-1/0/0

feac-loop-initiate
32 ! test interface feac-loop-initiate

test interface feac-loop-terminate
Syntax test interface t3-fpc/pic/port<:channel> feac-loop-terminate
Description Have the interface transmit the line loopback deactivate code word sequence on its
far-end alarm and control (FEAC) channel. If the far end of the connection is in C-bit
parity mode and has been configured to accept remote loopback requests from the
near end, the far end clears remote loopback on the interface. See the ANSI T1.107
specification for more details.
NOTE: This command is not supported for T3 interfaces configured on DS3 and
Channelized OC12 PICs.
Options t3-fpc/pic/port<:channel>—Name of a T3 interface. The channel number indicates a

List of Sample Output test interface feac-loop-terminate on page 33
test interface user@host> test interface feac-loop-terminate t3-1/0/0

feac-loop-terminate
test interface feac-loop-terminate ! 33

test interface inband-line-loop
Syntax test interface inband-line-loop (ansi (initiate | terminate) | bellcore (initiate | terminate)
t1-fpc/pic/port<:channel>
Description Send commands on a T1 interface to initiate or terminate a far-end line loopback

using either an ANSI or Bellcore FDL command code. If the far end of the
connection is in C-bit parity mode and it has been configured to accept line
loopback requests from the near end, the far end executes the request.


List of Sample Output test interface inband-line-loop on page 34
test interface user@host> test interface inband-line-loop ansi initiate t1-1/0/0

inband-line-loop
34 ! test interface inband-line-loop

test interface inband-payload-loop
Syntax test interface inband-payload-loop (ansi (initiate | terminate) | bellcore (initiate |

terminate) t1-fpc/pic/port<:channel>)
Description Send commands on a T1 interface to initiate or terminate a far-end payload

loopback using either an ANSI or Bellcore FDL command code. If the far end of the
connection is in C-bit parity mode and has been configured to accept payload
loopback requests from the near end, the far end executes the request.

t1-fpc/pic/port <:channel>—Name of a T1 interface. The channel number indicates a

Additional information See the ANSI T1.107 specification for more details.
List of Sample Output test interface inband-payload-loop on page 35
test interface user@host> test interface inband-payload-loop ansi initiate t1-1/0/0

inband-payload-loop
test interface inband-payload-loop ! 35

test interface restart-auto-negotiation
Syntax test interface restart-auto-negotiation interface-name
Release Information Command introduced in JUNOS Release 7.6.
Description Restarts auto-negotiation on a Fast Ethernet or Gigabit Ethernet interface.
Options interface-name—Interface name: fe-fpc/pic/port or ge-fpc/pic/port.
List of Sample Output test interface restart-auto-negotiation on page 36
Output Fields Use the show interfaces extensive fe-fpc/pic/port or show interfaces extensive
ge-fpc/pic/port to see the state for auto-negotiation.
test interface user@host> test interface restart-auto-negotiation fe-1/0/0

restart-auto-negotiation
36 ! test interface restart-auto-negotiation

test interface t1-bert-start
Syntax test interface t1-bert-start interface-name
Description Start a bit error rate test (BERT) on a T1 interface.
Options interface-name—Interface name: t1-fpc/pic/port or ct1-fpc/pic/port<:channel>.
List of Sample Output test interface t1-bert-start on page 37
test interface user@host> test interface t1-bert-start t1-1/0/0

t1-bert-start
test interface t1-bert-start ! 37

test interface t1-bert-stop
Syntax test interface t1-bert-stop interface-name
Description Stop a bit error rate test (BERT) on a T1 interface.
Additional Information To display the results of the BERT, use the show interfaces extensive command.
List of Sample Output test interface t1-bert-stop on page 38
test interface user@host> test interface t1-bert-stop t1-1/0/0

t1-bert-stop
38 ! test interface t1-bert-stop

test interface t3-bert-start
Syntax test interface t3-bert-start interface-name
Description Start a bit error rate test (BERT) on a T3 interface.
Additional Information Before starting a BERT, you must disable the interface. To do this, include the disable
on only one interface per PIC at a time. To display the results of the BERT, use the
show interfaces extensive command.
List of Sample Output test interface t3-bert-start on page 39
test interface user@host> test interface t3-bert-start t3-1/0/0

t3-bert-start
test interface t3-bert-start ! 39

test interface t3-bert-stop
Syntax test interface t3-bert-stop interface-name
Description Stop a bit error rate test (BERT) on a T3 interface.
Additional Information To display the results of the BERT, use the show interfaces extensive command.
List of Sample Output test interface t3-bert-stop on page 40
test interface user@host> test interface t3-bert-stop t3-1/0/0

t3-bert-stop
40 ! test interface t3-bert-stop

Chapter 3
Real-Time Performance Monitoring
Operational Mode Commands
monitor and troubleshoot real-time performance monitoring (RPM). Commands are
listed in alphabetical order.
Table 7: RPM Operational Mode Commands
Task Command
Show configured probe servers. show services rpm active-servers on page 42
Show the results of the last 50 completed probes show services rpm history-results on page 43
for each RPM instance.
Show probe results. show services rpm probe-results on page 46
NOTE: For information about how to configure RPM, see the JUNOS Services
Interfaces Configuration Guide.
! 41
show services rpm active-servers
Syntax show services rpm active-servers
Description Display the protocols and corresponding ports for which a router is configured as a
real-time performance monitoring (RPM) server.
Options This command has no options.
List of Sample Output show services rpm active-servers on page 42
Output Fields Table 8 lists the output fields for the show services rpm active-servers command.
Output fields are listed in the approximate order in which they appear.
Table 8: show services rpm active-servers Output Fields
Field Name Field Description

Protocol Protocol configured on the receiving probe server. The protocol
can be the User Datagram Protocol (UDP) or the Transmission
Control Protocol (TCP).
Port Port configured on the receiving probe server.
Destination interface name Output interface name for the probes.
show services rpm user@host> show services rpm active-servers

active-servers Protocol: TCP, Port: 50000, Destination interface name: lt-0/0/0.0
Protocol: UDP, Port: 50001, Destination interface name: lt-0/0/0.0
42 ! show services rpm active-servers

Chapter 3: Real-Time Performance Monitoring Operational Mode Commands
show services rpm history-results
Syntax show services rpm history-results

<brief | detail>
<owner owner>
<since time>
<test name>
Description Display standard information about the results of the last 50 probes for each
real-time performance monitoring (RPM) instance.
Options none—Display the results of the last 50 probes for all RPM instances.
brief | detail—(Optional) Display the specified level of output.
owner owner—(Optional) Display information for the specified probe owner.
since time—(Optional) Display information from the specified time. Specify time as
yyyy-mm-dd.hh:mm:ss.
test name—(Optional) Display information for the specified test.
List of Sample Output show services rpm history-results on page 44

show services rpm history-results detail on page 45
Output Fields Table 9 lists the output fields for the show services rpm history-results command.
Table 9: show services rpm history-results Output Fields
Field Name Field Description Level of Output

Owner Probe owner. All levels
Test Name of a test for a probe instance. All levels
Probe received Timestamp when the probe result was All levels
determined.
Round trip time Average ping round-trip time (RTT), in All levels
microseconds.
Probe results Result of a particular probe performed by a detail
remote host. The following information is
contained in the results:
! Response received—Timestamp when the
probe result was determined.
! Rtt—Average ping round-trip time (RTT), in
microseconds.
Results over current test Displays the results for the current test by probe detail
at the time each probe was completed, as well
as the status of the current test at the time the
probe was completed.
Probes sent Number of probes sent with the current test. detail
show services rpm history-results ! 43

Table 9: show services rpm history-results Output Fields

Probes received Number of probe responses received within the detail
current test.
Loss percentage Percentage of lost probes for the current test. detail
Measurement Increment of measurement. Possible values are detail
round-trip time delay and, for the probe type
icmp-pin-timestamp, the egress and ingress
delay:
! Minimum—Minimum RTT, ingress delay, or
egress delay measured over the course of the
current test.
! Maximum—Maximum RTT, ingress delay, or
current test.
! Average—Average RTT, ingress delay, or
current test.
! Jitter—Difference, in microseconds, between
the maximum and minimum RTT measured
over the course of the current test.
! Stddev—Standard deviation of the round-trip
time, in microseconds, measured over the
course of the current test.
show services rpm user@host> show services rpm history-results

history-results Owner, Test Probe received Round trip time
flintstone, 0 Tue Dec 28 15:56:22 2004 158 usec
44 ! show services rpm history-results

show services rpm user@host> show services rpm history-results detail

history-results detail Owner: flintstone, Test: 0
Probe results:
Response received, Tue Dec 28 15:56:39 2004
Rtt: 217 usec
Results over current test:
Probes sent: 1, Probes received: 1, Loss percentage: 0
Measurement: Round trip time
Minimum: 217 usec, Maximum: 217 usec, Average: 217 usec,
Jitter: 0 usec, Stddev: 0 usec
Owner: flintstone, Test: 0

Probe results:
Rtt: 141 usec

Probe results:
Rtt: 230 usec

Probe results:
Rtt: 248 usec
show services rpm history-results ! 45

show services rpm probe-results
Syntax show services rpm probe-results

<owner owner>
<test name>
Description Display the results of the most recent real-time performance monitoring (RPM)
probes.
Options none—Display all results of the most recent RPM probes.
owner owner—(Optional) Display information for the specified probe owner.
test name—(Optional) Display information for the specified test.
List of Sample Output show services rpm probe-results on page 49
Output Fields Table 10 lists the output fields for the show services rpm probe-results command.
Table 10: show services rpm probe-results Output Fields

Owner Owner name. When you configure the probe owner statement at
the [edit services rpm] hierarchy level, this field displays the
configured owner name. When you configure BGP neighbor
discovery through RPM, the output for this field is Rpm-Bgp-Owner.
Test Name of a test representing a collection of probes. When you
configure the test test-name statement at the [edit services rpm
probe owner] hierarchy level, the field displays the configured test
name. When you configure BGP neighbor discovery through RPM,
the output for this field is Rpm-BGP-Test-n, where n is a cumulative
number.
Target address Destination address used for the probes.
Source address Source address used for the probes.
Probe type Reflects the protocol configured on the receiving probe server. The
following protocol types can be configured: http-get,
http-metadata-get, icmp-ping, icmp-ping-timestamp, tcp-ping,
udp-ping, and udp-ping-timestamp.
Test size Number of probes within a test.
46 ! show services rpm probe-results


Routing Instance Name (BGP neighbor discovery) Name of the configured (if any) routing
instance, logical router name, or both, in which the probe is
configured:
! When a routing instance is defined within a logical router, the
logical router name is followed by the routing instance name. A
slash ( / ) is used to separate the two entities. For example, if the
routing instance called R1 is configured within the logical router
called LR, the name in the output field is LR/R1.
! When a routing instance is configured but the default logical
router is used, the name in the output field is the name of the
routing instance.
! When a logical router is configured but the default routing
instance is used, the name in the output field is the name of the
logical router followed by default. A slash ( / ) is used to separate
the two entities. For example, LR/default.
Probe results Result of a particular probe done by a remote host. The following
information is contained in the results:
! Response received—Timestamp when the probe result was
determined.
! Rtt—Average ping round-trip time (RTT), in microseconds.
Results over current test Probes are grouped into tests, and the statistics are calculated for
each test. If a test contains 10 probes, the average, minimum, and
maximum results are calculated from the results of those 10 probes.
If the command is issued while the test is in progress, the statistics
use information from the completed probes.
! Probes sent—Number of probes sent within the current test.
! Probes received—Number of probe responses received within the
current test.
! Loss percentage—Percentage of lost probes for the current test.
! Measurement—Increment of measurement. Possible values are
icmp-ping-timestamp, the egress delay and ingress delay.
! Minimum—Minimum RTT, ingress delay, or egress delay
measured over the course of the current test.
! Maximum—Maximum RTT, ingress delay, or egress delay
! Average—Average RTT, ingress delay, or egress delay measured
! Jitter—Jitter in microseconds.
! Stddev—Standard deviation in microseconds.
show services rpm probe-results ! 47


Results over last test Results for the most recently completed test. If the command is
issued while the first test is in progress, this information is not
displayed
! Probes sent—Number of probes sent for the most recently
completed test.
! Probes received—Number of probe responses received for the
most recently completed test.
! Loss percentage—Percentage of lost probes for the most recently
completed test.
! Test completed—Time the most recent test was completed.
icmp-ping-timestamp, the egress delay and ingress delay.
measured for the most recently completed test.
measured for the most recently completed test.
for the most recently completed test.
Results over all tests Displays statistics made for all the probes, independently of the
grouping into tests, as well as statistics for the current test.
! Probes sent—Number of probes sent in all tests.
! Probes received—Number of probe responses received in all tests.
! Loss percentage—Percentage of lost probes in all tests.
round-trip time delay and, for the probe types
icmp-ping-timestamp and udp-ping-timestamp, the egress delay and
ingress delay.

show services rpm user@host> show services rpm probe-results

probe-results Owner: p1, Test: t1
Target address: 10.8.4.1, Source address: 10.8.4.2, Probe type: http-get
Test size: 10 probes
Probe results:
Response received, Sun Dec 18 21:05:19 2005
Rtt: 665826 usec
Results over last test:
Test Completed on Sun Dec 18 21:05:02 2005
Results over all tests:
show services rpm user@host> show services rpm probe-results

probe-results (BGP Owner: Rpm-Bgp-Owner, Test: Rpm-Bgp-Test-1
Neighbor Discovery) Target address: 10.209.152.37, Probe type: icmp-ping, Test size: 5 probes
Routing Instance Name: LR1/RI1
Probe results:
Response received, Fri Oct 28 05:20:23 2005
Rtt: 662 usec
Results over all tests:
show services rpm probe-results ! 49


Chapter 4
Real-Time Router Monitoring
monitor files, interfaces, and traffic in real time. Commands are listed in
alphabetical order.
Table 11: Real-Time Router Monitoring Operational Mode Commands
Task Command
Monitor statistics for a physical interface. monitor interface on page 52
Monitor a Resource Reservation Protocol (RSVP) label-switched path (LSP). monitor label-switched-path on page 56
Display the status of monitored log and trace files. monitor list on page 59
Start displaying the system log or trace file and additional entries being added to monitor start on page 60
those files.
Stop displaying the system log or trace file. monitor stop on page 61
Monitor packet headers transmitted through network interfaces sent from or monitor traffic on page 62
received by the Routing Engine.
Display trace information about an IP multicast path. mtrace on page 67
Display trace information about a IP multicast path from a source to the router. mtrace from-source on page 68
Listen passively for IP multicast responses. mtrace monitor on page 71
Display trace information about an IP multicast path from the router to a mtrace to-gateway on page 72
gateway router.
Determine the route to a network system. traceroute on page 74
Monitor the route to a network system traceroute monitor on page 77
NOTE: For information about how to configure interface parameters, see the
JUNOS Network Interfaces Configuration Guide.
For information about how to configure IP multicast parameters, see the JUNOS
Multicast Protocols Configuration Guide.

(NOC) personnel, see the JUNOS Baseline Network Operations Guide.
! 51
monitor interface
Syntax monitor interface

<interface-name | traffic <detail>>
Description Display real-time statistics about interfaces, updating the statistics every second.
Check for and display common interface failures, such as SONET/SDH and T3
alarms, loopbacks detected, and increases in framing errors.
Options none—Display real-time statistics for all interfaces.
interface-name—(Optional) Display real-time statistics for the specified interface.
traffic—(Optional) Display traffic data for all active interfaces.
detail—(Optional) With traffic option only, display detailed output.
Additional Information The output of this command shows how much each field has changed since you
started the command or since you cleared the counters by using the c key.
For a description of the statistical information provided in the output of this

command, see the show interfaces extensive command for a particular interface
type in the JUNOS Interfaces Command Reference.
To control the output of the monitor interface interface-name command while it is

running, use the keys listed in Table 12. The keys are not case-sensitive.
Table 12: Output Control Keys for the monitor interface interface-name Command
Key Action
c Clears (returns to zero) the delta counters since monitor interface was started. This
does not clear the accumulative counter. To clear the accumulative counter, use the
clear interfaces interval command.
f Freezes the display, halting the display of updated statistics and delta counters.
i Displays information about a different interface. The command prompts you for the
name of a specific interface.
n Displays information about the next interface. The monitor interface command
displays the physical or logical interfaces in the same order as the show interfaces
terse command.
q or Esc Quits the command and returns to the command prompt.
t Thaws the display, resuming the update of the statistics and delta counters.
52 ! monitor interface
Chapter 4: Real-Time Router Monitoring Operational Mode Commands
To control the output of the monitor interface traffic command while it is running,
use the keys listed in Table 13. The keys are not case-sensitive.
Table 13: Output Control Keys for the monitor interface traffic Command
Key Action
b Displays the statistics in units of bytes and bytes per second (bps).
c Clears (return to 0) the delta counters in the Current Delta column. The statistics
counters are not cleared.
d Displays the Current Delta column instead of the rate column—in bps or packets per
second (pps).
p Displays the statistics in units of packets and packets per second (pps).
r Displays the rate column—in bps and pps—instead of the Delta column.
Required Privilege Level trace
List of Sample Output monitor interface (Physical) on page 54

monitor interface (Logical) on page 55
monitor interface traffic on page 55
monitor interface traffic detail on page 55
Output Fields Table 14 describes the output fields for the monitor interface command. Output
fields are listed in the approximate order in which they appear.
Table 14: monitor interface Output Fields

router1 Hostname of the router. All levels
Seconds How long the monitor interface command has been running or how long since All levels
you last cleared the counters.
Time Current time (UTC). All levels
Delay x/y/z Time difference between when the statistics were displayed and the actual clock All levels
time.
! x—Time taken for the last polling (in milliseconds).
! y—Minimum time taken across all pollings (in milliseconds).
! z—Maximum time taken across all pollings (in milliseconds).
Interface Short description of the interface, including its name, status, and encapsulation. All levels
Link State of the link: Up, Down, or Test. All levels
Current delta Cumulative number for the counter in question since the time shown in the All levels
Seconds field, which is the time since you started the command or last cleared
the counters.
Statistics For an explanation of the interface statistics, see the description of the All levels
show interfaces extensive command for a particular interface type in the JUNOS
Interfaces Command Reference.
Description With the traffic option, displays the interface description configured at the detail
[edit interfaces interface-name] hierarchy level.
monitor interface ! 53
monitor interface user@host> monitor interface so-0/0/0

(Physical) router1 Seconds: 19 Time: 15:46:29
Interface: so-0/0/0, Enabled, Link is Up

Encapsulation: PPP, Keepalives, Speed: OC48
Traffic statistics: Current Delta
Input packets: 6045 (0 pps) [11]
Input bytes: 6290065 (0 bps) [13882]
Output packets: 10376 (0 pps) [10]
Output bytes: 10365540 (0 bps) [9418]
Encapsulation statistics:
Input keepalives: 1901 [2]
Output keepalives: 1901 [2]
NCP state: Opened
LCP state: Opened
Error statistics:
Input errors: 0 [0]
Input drops: 0 [0]
Input framing errors: 0 [0]
Policed discards: 0 [0]
L3 incompletes: 0 [0]
L2 channel errors: 0 [0]
L2 mismatch timeouts: 0 [0]
Carrier transitions: 1 [0]
Output errors: 0 [0]
Output drops: 0 [0]
Aged packets: 0 [0]
Active alarms : None
Active defects: None
SONET error counts/seconds:
LOS count 1 [0]
LOF count 1 [0]
SEF count 1 [0]
ES-S 0 [0]
SES-S 0 [0]
SONET statistics:
BIP-B1 458871 [0]
BIP-B2 460072 [0]
REI-L 465610 [0]
BIP-B3 458978 [0]
REI-P 458773 [0]
Received SONET overhead:
F1 : 0x00 J0 : 0x00 K1 : 0x00
K2 : 0x00 S1 : 0x00 C2 : 0x00
C2(cmp) : 0x00 F2 : 0x00 Z3 : 0x00
Z4 : 0x00 S1(cmp) : 0x00
Transmitted SONET overhead:
F1 : 0x00 J0 : 0x01 K1 : 0x00
K2 : 0x00 S1 : 0x00 C2 : 0xcf
F2 : 0x00 Z3 : 0x00 Z4 : 0x00
Next='n', Quit='q' or ESC, Freeze='f', Thaw='t', Clear='c', Interface='i'
54 ! monitor interface
monitor interface user@host> monitor interface so-1/0/0.0

(Logical) host name Seconds: 16 Time: 15:33:39
Delay: 0/0/1
Interface: so-1/0/0.0, Enabled, Link is Down
Flags: Hardware-Down Point-To-Point SNMP-Traps
Encapsulation: PPP
Local statistics: Current delta
Input bytes: 0 [0]
Output bytes: 0 [0]
Input packets: 0 [0]
Output packets: 0 [0]
Remote statistics:
Input bytes: 0 (0 bps) [0]
Output bytes: 0 (0 bps) [0]
Input packets: 0 (0 pps) [0]
Output packets: 0 (0 pps) [0]
Traffic statistics:
Destination address: 192.168.8.193, Local: 192.168.8.21
Next='n', Quit='q' or ESC, Freeze='f', Thaw='t', Clear='c', Interface='i'
monitor interface traffic user@host> monitor interface traffic

host name Seconds: 15 Time: 12:31:09
Interface Link Input packets (pps) Output packets (pps)

so-1/0/0 Down 0 (0) 0 (0)
so-1/1/0 Down 0 (0) 0 (0)
so-1/1/1 Down 0 (0) 0 (0)
so-1/1/2 Down 0 (0) 0 (0)
so-1/1/3 Down 0 (0) 0 (0)
t3-1/2/0 Down 0 (0) 0 (0)
t3-1/2/1 Down 0 (0) 0 (0)
t3-1/2/2 Down 0 (0) 0 (0)
t3-1/2/3 Down 0 (0) 0 (0)
so-2/0/0 Up 211035 (1) 36778 (0)
so-2/0/1 Up 192753 (1) 36782 (0)
so-2/0/2 Up 211020 (1) 36779 (0)
so-2/0/3 Up 211029 (1) 36776 (0)
so-2/1/0 Up 189378 (1) 36349 (0)
so-2/1/1 Down 0 (0) 18747 (0)
so-2/1/2 Down 0 (0) 16078 (0)
so-2/1/3 Up 0 (0) 80338 (0)
at-2/3/0 Up 0 (0) 0 (0)
at-2/3/1 Down 0 (0) 0 (0)
Bytes=b, Clear=c, Delta=d, Packets=p, Quit=q or ESC, Rate=r, Up=^U, Down=^D
monitor interface traffic user@host> monitor interface traffic detail

detail host name Seconds: 15 Time: 12:31:09
Interface Link Input packets (pps) Output packets (pps) Description
t1-0/1/1:0 Up 19769 (0) 0 (0) To-OSAKA-1

...
Bytes=b, Clear=c, Delta=d, Packets=p, Quit=q or ESC, Rate=r, Up=^U, Down=^D
monitor interface ! 55
monitor label-switched-path
Syntax monitor label-switched-path lsp-name
Description Display the real-time status of the specified Resource Reservation Protocol (RSVP)
label-switched path (LSP).
Options lsp-name—Name of the LSP.
Additional information You can track the amount of traffic traversing an RSVP LSP and observe its essential
parameters, such as uptime, ingress and egress addresses, labels, routes, and ports.
Values are typically sampled every second. The display also allows you to scroll to
other currently running LSPs. You cannot use this command to display information
about static LSPs or Label Distribution Protocol (LDP)-signaled LSPs.
The output of this command shows how much each field has changed since you
started the command or since you cleared the counters by using the c key. To
control the output of the monitor label-switched-path command while it is running,
use the keys listed in Table 15. The keys are not case-sensitive.
Table 15: Output Control Keys for the monitor mpls Command
Key Action
c Clears the screen and refreshes the display for this LSP.
f Freezes the display, preventing new information from being displayed.
l Monitors a different LSP. After you type l, you can type the new LSP name.
n Displays information about the next LSP (whose name is alphabetically higher than
the current LSP name) configured on the router.
p Goes to the previous LSP (whose name is alphabetically lower than the current LSP
name) configured on the router.
t Thaws, or restarts, the data display for this LSP.
List of Sample Output monitor label-switched-path on page 58
56 ! monitor label-switched-path
Output Fields Table 16 describes the output fields for the monitor label-switched-path command.
Table 16: monitor label-switched-path Output Fields

(1) Displays the following information:
! hostname—Name of the router.
! Seconds—Time elapsed since this display was started.
! Time—Current local time.
(2) Delay—Length of the time delay, in milliseconds, required to obtain the

information in the monitor display. The first number shows the current sampling
delay. The second number shows the shortest delay recorded to date. The third
number shows the worst delay recorded to date. This delay can vary substantially
depending on the system load.
(3) Displays the following:
! To—Destination address of the LSP.
! From—Originating address of the LSP.
! State—Current state of the LSP: Up or Down.

! LSPName—Name of the LSP.
! Type—Type of LSP: Ingress, Egress, or Transit.

! Label in—Incoming label of the LSP.
! Label out—Outgoing label of the LSP.
(6) Port number—The port number for the sending router, the port number for the
receiving router, and the protocol ID. For Multiprotocol Label Switching (MPLS)
traffic engineering applications, the protocol ID is always 0.
(7/8) Record route—All intermediate and egress router addresses for this LSP.
(9/10/11) Displays traffic statistics:
! Output packets—Number of packets that have traversed this LSP, and the
change (delta) in the number since the last sample, typically 1 second ago.
! Output bytes—Number of bytes that have traversed this LSP, and the change
(delta) in the number since the last sample, typically 1 second ago.
(12) Displays any errors the router encountered while attempting to retrieve
information on the LSP.
(13) Lists the keyboard commands you can use to navigate to other LSPs. For a
description of the keyboard commands, see Table 15 on page 56.
monitor label-switched-path ! 57
monitor user@host> monitor label-switched-path

label-switched-path (1) host Seconds: 112 Time: 15:32:22
(2) Delay: 0/0/0
(3) To 10.10.10.16, From 10.10.10.17, state: Up
(4) LSPname: k, type: Ingress
(5) Label in: -, Label out: 126000
(6) Port number: sender 1, receiver 45583, protocol 0
(7) Record Route: <self> 192.168.224.196
(8) 192.168.224.202 192.168.224.179
(9) Traffic statistics: Current delta
(10) Output packets: 0 [0]
(11) Output bytes: 0 [0]
(12)
(13)Next='n', Prev='p', Quit='q' or ESC, Freeze='f', Thaw='t', Clear='c',
LSP='l'
58 ! monitor label-switched-path
monitor list
Syntax monitor list
Description Display the status of monitored log and trace files.
Options This command has no options
Additional Information Log files are generated by the routing protocol process or by system logging. The log
files generated by system logging are configured with the syslog statement at the
[edit system] hierarchy level and the options statement at the [edit routing-options]
hierarchy level. The trace files generated by the routing protocol process are those
configured with traceoptions statements at the [edit routing-options], [edit interfaces],
and [edit protocols protocol ] hierarchy levels.
See Also monitor start on page 60

monitor stop on page 61
List of Sample Output monitor list on page 59
Output Fields Table 17 describes the output fields for the monitor list command. Output fields are
listed in the approximate order in which they appear.
Table 17: monitor list Output Fields

monitor start Indicates the file is being monitored.
“filename” Name of the file that is being monitored.
Last changed Date and time at which the file was last modified.
monitor list user@host> monitor list

monitor start "vrrpd" (Last changed Dec 03:11:06 20)
monitor start "cli-commands" (Last changed Nov 07:3)
monitor list ! 59
monitor start
Syntax monitor start filename
Description Start displaying the system log or trace file and additional entries being added to
those files.
Options filename—Specific log or trace file.
files generated by system logging are configured with the syslog statement at the
[edit system] hierarchy level and the options statement at the [edit routing-options]
hierarchy level. The trace files generated by the routing protocol process are
configured with traceoptions statements at the [edit routing-options], [edit interfaces],
and [edit protocols protocol ] hierarchy levels.
See Also monitor list on page 59

monitor stop on page 61
List of Sample Output monitor start on page 60
Output Fields Table 18 describes the output fields for the monitor start command. Output fields
are listed in the approximate order in which they appear.
Table 18: monitor start Output Fields

***filename*** Name of the file from which entries are being displayed. This line is
displayed initially and when the command switches between log files.
Date and time Timestamp for the log entry.
monitor start user@host> monitor start system-log

*** system-log***
Jul 20 15:07:34 hang sshd[5845]: log: Generating 768 bit RSA key.
Jul 20 15:07:35 hang sshd[5845]: log: RSA key generation complete.
Jul 20 15:07:35 hang sshd[5845]: log: Connection from 204.69.248.180 port 912
Jul 20 15:07:37 hang sshd[5845]: log: RSA authentication for root accepted.
Jul 20 15:07:37 hang sshd[5845]: log: ROOT LOGIN as 'root' from trip.jcmax.com
Jul 20 15:07:37 hang sshd[5845]: log: Closing connection to 204.69.248.180
60 ! monitor start
monitor stop
Syntax monitor stop filename
Description Stop displaying the system log or trace file.
Options filename—Specific log or trace file.
files generated by system logging are those configured with the syslog statement at
the [edit system] hierarchy level and the options statement at the
[edit routing-options] hierarchy level. The trace files generated by the routing
protocol process are those configured with traceoptions statements at the
[edit routing-options], [edit interfaces], and [edit protocols protocol ] hierarchy levels.
See Also monitor list on page 59

monitor start on page 60
List of Sample Output monitor stop on page 61
Output Fields This command produces no output.
monitor stop user@host> monitor stop
monitor stop ! 61
monitor traffic
Syntax monitor traffic

<brief | detail | extensive>
<absolute-sequence>
<count count>
<interface interface-name>
<layer2-headers>
<matching matching>
<no-domain-names>
<no-promiscuous>
<no-resolve>
<no-timestamp>
<print-ascii>
<print-hex>
<size size>
Description Display packet headers transmitted through network interfaces sent from or
received by the Routing Engine.
NOTE: Using the monitor traffic command can degrade router performance. Not
including options, such as count or a matching expression, can slow packet
throughput on your router.
Options none—(Optional) Display all packet headers transmitted through all network
interfaces sent from or received by the Routing Engine.
brief | detail | extensive—(Optional) Display the specified level of output.
absolute-sequence—(Optional) Display absolute TCP sequence numbers.
count count—(Optional) Specify the number of packet headers to display (0 through

1,000,000). The monitor traffic command quits automatically after displaying
the number of packets specified.
interface interface-name—(Optional) Specify the interface on which monitor traffic

displays packet data. If no interface is specified, the monitor traffic command
displays packet data arriving on the lowest-numbered interface.
layer2-headers—(Optional) Display the link-level header on each line.
matching matching—(Optional) Display packet headers that match a regular

expression. Use matching expressions to define the level of detail with which
the monitor traffic command filters and displays packet data. See “Additional
Information” on page 63.
no-domain-names—(Optional) Suppress the display of the domain portion of

hostnames. With the no-domain-names option enabled, the monitor traffic
command displays only team for the hostname team.company.net.
no-promiscuous—(Optional) Do not put the interface into promiscuous mode.
62 ! monitor traffic
no-resolve—(Optional) Suppress symbolic addressing.
no-timestamp—(Optional) Suppress timestamps on displayed packets.
print-ascii—(Optional) Display each packet in ASCII format.
print-hex—(Optional) Display each packet, except the link-level header, in

hexadecimal format.
size size—(Optional) Receive the specified number of bytes for each packet. The
default size is 68 bytes and is adequate for capturing IP, ICMP, UDP, and TCP
packet data. The monitor traffic command truncates displayed packets if the
matched data exceeds the configured size.
Additional Information In the monitor traffic command, you can specify an expression to match by using
the matching option and including the expression in quotation marks:
monitor traffic matching “expression”
Replace expression with one or more of the match conditions listed in Table 19.
Table 19: Match Conditions for the monitor traffic Command (1 of 2)
Match Type Condition Description

Entity host [address | hostname] Matches packets that contain the specified address or hostname.
The host match condition can be prepended with the protocol match
conditions arp, ip, or rarp, or any of the directional match conditions.
network address Matches packets with source or destination addresses containing the
specified network number.
network address mask mask Matches packets containing the specified network address and subnet mask.
port [port-number | port-name] Matches packets containing the specified source or destination TCP or UDP
port number or port name.
In place of the numeric port address, you can specify a text synonym, such as
bgp (179), dhcp (67), or domain (53) (the port numbers are also listed).
Directional dst Matches packets going to the specified destination. This match condition can
be prepended to any of the entity type match conditions.
src Matches packets from a specified source. This match condition can be
prepended to any of the entity type match conditions.
src and dst Matches packets that contain the specified source and destination addresses.
This match condition can be prepended to any of the entity type match
conditions.
src or dst Matches packets containing either of the specified addresses. This match
condition can be prepended to any of the entity type match conditions.
Packet Length less value Matches packets shorter than or equal to the specified value, in bytes.
greater value Matches packets longer than or equal to the specified value, in bytes.
monitor traffic ! 63
Table 19: Match Conditions for the monitor traffic Command (2 of 2)
Match Type Condition Description

Protocol arp Matches all ARP packets.
ether Matches all Ethernet packets.
ether [broadcast | multicast] Matches broadcast or multicast Ethernet frames. This match condition can be
prepended with src and dst.
ether protocol Matches packets with the specified Ethernet address or Ethernet packets of
[address | (arp | ip | rarp)] the specified protocol type.
The ether protocol arguments arp, ip, and rarp are also independent match
conditions, so they must be preceded by a backslash (\) when used in the
ether protocol match condition.
icmp Matches all ICMP packets.
ip Matches all IP packets.
ip [broadcast | multicast] Matches broadcast or multicast IP packets.
ip protocol Matches packets with the specified address or protocol type.
[address | (icmp | igrp |
tcp | udp)] The ip protocol arguments icmp, tcp, and udp are also independent match
conditions, so they must be preceded by a backslash (\) when used in the ip
protocol match condition.
isis Matches all IS-IS routing messages.
rarp Matches all RARP packets.
tcp Matches all TCP datagrams.
udp Matches all UDP datagrams.
To combine expressions, use the logical operators listed in Table 20.
Table 20: Logical Operators for the monitor traffic Command
Logical Operator
(Highest to Lowest
Precedence) Description
! Logical NOT. If the first condition does not match, the next condition is
evaluated.
&& Logical AND. If the first condition matches, the next condition is
evaluated. If the first condition does not match, the next condition is
skipped.
|| Logical OR. If the first condition matches, the next condition is skipped.
If the first condition does not match, the next condition is evaluated.
() Group operators to override default precedence order. Parentheses are
special characters, each of which must be preceded by a backslash (\).
You can use relational operators to compare arithmetic expressions composed of

integer constants, binary operators, a length operator, and special packet data
accessors.
The arithmetic expression matching condition uses the following syntax:
monitor traffic matching "ether[0] & 1 != 0" "arithmetic_expression

relational_operator arithmetic_expression"
The packet data accessor uses the following syntax:
protocol [byte-offset <size>]
The optional size field represents the number of bytes examined in the packet
header. The available values are 1, 2, or 4 bytes.
The following sample command captures all multicast traffic:
user@host> monitor traffic matching "ether[0] & 1 != 0"
To specify match conditions that have a numeric value, use the arithmetic and
relational operators listed in Table 21.
NOTE: Because the Packet Forwarding Engine removes Layer 2 header information
before sending packets to the Routing Engine, the monitor traffic command cannot
apply match conditions to inbound traffic.
Table 21: Arithmetic and Relational Operators for the monitor traffic Command
Arithmetic or
Relational
Operator Description
Arithmetic Operator
+ Addition operator.
- Subtraction operator.
/ Division operator.
& Bitwise AND.
* Bitwise exclusive OR.
| Bitwise inclusive OR.
Relational Operator (Highest to Lowest Precedence)
<= If the first expression is less than or equal to the second, the packet
matches.
>= If the first expression is greater than or equal to the second, the packet
matches.
< If the first expression is less than the second, the packet matches.
> If the first expression is greater than the second, the packet matches.
= If the compared expressions are equal, the packet matches.
!= If the compared expressions are unequal, the packet matches.
Required Privilege Level trace and maintenance
List of Sample Output monitor traffic count on page 66

monitor traffic detail count on page 66
monitor traffic extensive (Absolute Sequence) on page 66
monitor traffic extensive (Relative Sequence) on page 66
monitor traffic extensive count on page 66
monitor traffic interface on page 66
monitor traffic ! 65
request.
monitor traffic count user@host> monitor traffic count 2

listening on fxp0
04:35:49.814125 In my-server.home.net.1295 > my-server.work.net.telnet: . ack
4122529478 win 16798 (DF)
04:35:49.814185 Out my-server.work.net.telnet > my-server.home.net.1295: P
1:38(37) ack 0 win 17680 (DF) [tos 0x10]
monitor traffic detail user@host> monitor traffic detail count 2

count listening on fxp0
04:38:16.265864 In my-server.home.net.1295 > my-server.work.net.telnet: . ack
4122529971 win 17678 (DF) (ttl 121, id 6812)
04:38:16.265926 Out my-server.work.net.telnet.telnet > my-server.home.net.1295:
P 1:38(37) ack 0 win 17680 (DF) [tos 0x10] (ttl 6)
monitor traffic user@host> monitor traffic extensive no-domain-names no-resolve no-timestamp

extensive count 20 matching "tcp" absolute-sequence
(Absolute Sequence) listening on fxp0
In 207.17.136.193.179 > 192.168.4.227.1024: . 4042780859:4042780859(0) ack
1845421797 win 16384 <nop,nop,timestamp 4935628 965951> [tos 0xc0] (ttl )
In 207.17.136.193.179 > 192.168.4.227.1024: P 4042780859:4042780912(53) ack
1845421797 win 16384 <nop,nop,timestamp 4935628 965951>: BGP [|BGP UPDAT)
In 192.168.4.227.1024 > 207.17.136.193.179: P 1845421797:1845421852(55) ack
...
monitor traffic user@host> monitor traffic extensive no-domain-names no-resolve no-timestamp

extensive count 20 matching "tcp"
(Relative Sequence) listening on fxp0
In 172.24.248.221.1680 > 192.168.4.210.23: . 396159737:396159737(0) ack
1664980689 win 17574 (DF) (ttl 121, id 50003)
Out 192.168.4.210.23 > 172.24.248.221.1680: P 1:40(39) ack 0 win 17680 (DF) [tos
0x10] (ttl 64, id 5394)
In 207.17.136.193.179 > 192.168.4.227.1024: P 4042775817:4042775874(57) ack
...
monitor traffic user@host> monitor traffic extensive count 5 no-domain-names no-resolve

extensive count listening on fxp0
13:18:17.406933 In 192.168.4.206.2723610880 > 172.17.28.8.2049: 40 null (ttl
64, id 38367)
13:18:17.407577 In 172.17.28.8.2049 > 192.168.4.206.2723610880: reply ok 28
null (ttl 61, id 35495)
13:18:17.541140 In 0:e0:1e:42:9c:e0 0:e0:1e:42:9c:e0 9000 60:
0000 0100 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000
13:18:17.591513 In 172.24.248.156.4139 > 192.168.4.210.23: .
3556964918:3556964918(0) ack 295526518 win 17601 (DF) (ttl 121, id 14)
13:18:17.591568 Out 192.168.4.210.23 > 172.24.248.156.4139: P 1:40(39) ack 0 win
17680 (DF) [tos 0x10] (ttl 64, id 52376)
monitor traffic interface user@host> monitor traffic interface fxp0

listening on fxp0.0
18:17:28.800650 In server.home.net.723 > host1-0.lab.home.net.log
18:17:28.800733 Out host2-0.lab.home.net.login > server.home.net.7
18:17:28.817813 In host30.lab.home.net.syslog > host40.home0
18:17:28.817846 In host30.lab.home.net.syslog > host40.home0
...
mtrace
Syntax mtrace source

Description Display trace information about an IP multicast path.
Options source—Source hostname or address.
routing-instance routing-instance-name—(Optional) Trace a particular routing

instance.
Additional Information The mtrace command for multicast traffic is similar to the traceroute command
used for unicast traffic. Unlike traceroute, mtrace traces traffic backwards, from the
receiver to the source.
List of Sample Output mtrace source on page 67
Output Fields Table 22 describes the output fields for the mtrace command. Output fields are
Table 22: mtrace Output Fields

Mtrace from IP address of the receiver.
to IP address of the source.
via group IP address of the multicast group (if any).
Querying full reverse path Indicates the full reverse path query has begun.
number-of-hops Number of hops from the source to the named router.
router-name Name of the router for this hop.
address Address of the router for this hop.
protocol Protocol used (for example, PIM).
Round trip time Average round trip time, in microseconds (ms).
total ttl of Time-to-live (TTL) threshold.
mtrace source user@host> mtrace 192.1.4.2

Mtrace from 192.1.4.2 to 192.1.1.2 via group 0.0.0.0
Querying full reverse path... * *
0 routerA.lab.mycompany.net (192.1.1.2)
-1 routerB.lab.mycompany.net (192.1.2.2) PIM thresh^ 1
-2 routerC.lab.mycompany.net (192.1.3.2) PIM thresh^ 1
-3 hostA.lab.mycompany.net (192.1.4.2)
Round trip time 2 ms; total ttl of 2 required.
mtrace ! 67
mtrace from-source
Syntax mtrace from-source source source

<brief | detail>
<extra-hops extra-hops>
<group group>
<interval interval>
<loop>
<max-hops max-hops>
<max-queries max-queries>
<multicast-response | unicast-response>
<no-resolve>
<no-router-alert>
<response response>
<ttl ttl>
<wait-time wait-time>
Description Display trace information about an IP multicast path from a source to this router. If
a group address is given, additional information, such as packet rates and losses,
can be gathered.
Options source source—Source hostname or address.
extra-hops extra-hops—(Optional) Number of hops to take after reaching a

nonresponsive router. The range of values is 0 through 255.
group group—(Optional) Group address for which to trace the path. The default
group address is 0.0.0.0.
interval interval—(Optional) Number of seconds to wait before gathering statistics

again. The default value is 10 seconds.
loop—(Optional) Loop indefinitely, displaying rate and loss statistics.
max-hops max-hops—(Optional) Maximum hops to trace toward source. The range of

values is 0 through 255. The default value is 32 hops.
max-queries max-queries—(Optional) Maximum number of query attempts for any

hop. The range of values is 1 through 32. The default is 3.
multicast-response—(Optional) Always request the response using multicast.
no-resolve—(Optional) Do not attempt to display addresses symbolically.
no-router-alert—(Optional) Do not use the router-alert IP option.
response response—(Optional) Send trace response to a host or multicast address.
routing-instance routing-instance-name—(Optional) Trace a particular

routing instance.
68 ! mtrace from-source
ttl ttl—(Optional) IP time-to-live (TTL) value. The range of values is 0 through 255.
Local queries to the multicast group use a value of 1. Otherwise, the default
value is 127.
unicast-response—(Optional) Always request the response using unicast.
wait-time wait-time—(Optional) Number of seconds to wait for a response. The

default value is 3.
List of Sample Output mtrace from-source on page 70
Output Fields Table 23 describes the output fields for the mtrace from-source command. Output
Table 23: mtrace from-source Output Fields

source Source address.
Response Dest Response destination address.
Overall Average packet rate for all traffic at each hop.
Packet Statistics for Traffic From Number of packets lost, number of packets sent, percentage of
packets lost, and average packet rate at each hop.
Receiver IP address receiving the multicast.
Query source IP address sending the mtrace query.
mtrace from-source ! 69
mtrace from-source user@host> mtrace from-source source 192.1.4.2 group 225.1.1.1

-3 hostA.lab.mycompany.net (192.1.4.2)
Waiting to accumulate statistics...Results after 10 seconds:
Source Response Dest Overall Packet Statistics For Traffic From

192.1.4.2 192.1.1.2 Packet 192.1.4.2 To 225.1.1.1
v __/ rtt 2 ms Rate Lost/Sent = Pct Rate
192.1.2.1
192.1.3.2 routerC.lab.mycompany.net
v ^ ttl 2 0/0 = -- 0 pps
192.1.4.1
192.1.2.2 routerB.lab.mycompany.net
v \__ ttl 3 ?/0 0 pps
192.1.1.2 192.1.1.2
Receiver Query Source
70 ! mtrace from-source
mtrace monitor
Syntax mtrace monitor
Description Listen passively for IP multicast responses.
To exit mtrace monitor, type Ctrl+c.
Options none—Trace the master instance.
List of Sample Output mtrace monitor on page 71
Output Fields Table 24 describes the output fields for the mtrace monitor command. Output fields
Table 24: mtrace monitor Output Fields

Mtrace query at Date and time of the query.
by Address of the host issuing the query.
resp to Response destination.
qid Query ID number.
packet from...to IP address of the query source and default group destination.
from...to IP address of the multicast source and the response address.
via group IP address of the group to trace.
mxhop Maximum hop setting.
mtrace monitor user@host> mtrace monitor

Mtrace query at Oct 22 13:36:14 by 192.1.3.2, resp to 224.0.1.32, qid 74a5b8
packet from 192.1.3.2 to 224.0.0.2
from 192.1.3.2 to 192.1.3.38 via group 224.1.1.1 (mxhop=60)
Mtrace query at Oct 22 13:36:17 by 192.1.3.2, resp to 224.0.1.32, qid 1d07ba

packet from 192.1.3.2 to 224.0.0.2
Mtrace query at Oct 22 13:36:20 by 192.1.3.2, resp to same, qid 2fea1d

packet from 192.1.3.2 to 224.0.0.2
Mtrace query at Oct 22 13:36:30 by 192.1.3.2, resp to same, qid 7c88ad

packet from 192.1.3.2 to 224.0.0.2
mtrace monitor ! 71
mtrace to-gateway
Syntax mtrace to-gateway gateway gateway

<brief | detail>
<extra-hops extra-hops>
<group group>
<interval interval>
<loop>
<max-hops max-hops>
<max-queries max-queries>
<multicast-response | unicast-response>
<no-resolve>
<no-router-alert>
<response response>
<ttl ttl>
<unicast-response>
<wait-time wait-time>
Description Display trace information about a multicast path from this router to a gateway
router.
Options gateway gateway—Send the trace query to a gateway multicast address.
extra-hops extra-hops—(Optional) Number of hops to take after reaching a

nonresponsive router: from 0 through 255.
group group—(Optional) Group address for which to trace the path. The default
group address is 0.0.0.0.
interface interface-name—(Optional) Source address for sending the trace query.
interval interval—(Optional) Number of seconds to wait before gathering statistics

again. The default value is 10.
loop—(Optional) Loop indefinitely, displaying rate and loss statistics.
max-hops max-hops—(Optional) Maximum hops to trace toward the source. The

range of values is 0 through 255. The default value is 32 hops.
max-queries max-queries—(Optional) Maximum number of query attempts for any

hop. The range of values is 1 through 32. The default value is 3.
multicast-response—(Optional) Always request the response using multicast.
no-resolve—(Optional) Do not attempt to display addresses symbolically.
no-router-alert—(Optional) Do not use the router-alert IP option.
response response—(Optional) Send trace response to a host or multicast address.
72 ! mtrace to-gateway
routing-instance routing-instance-name—(Optional) Trace a particular routing

instance.
ttl ttl—(Optional) IP time-to-live value. The range of values is 0 through 255. Local
queries to the multicast group use TTL 1. Otherwise, the default value is 127.
unicast-response—(Optional) Always request the response using unicast.
wait-time wait-time—(Optional) Number of seconds to wait for a response. The

default value is 3.
List of Sample Output mtrace to-gateway on page 73
Output Fields Table 25 describes the output fields for the mtrace to-gateway command. Output
Table 25: mtrace to-gateway Output Fields

mtrace to-gateway user@host> mtrace to-gateway gateway 192.1.3.2 group 225.1.1.1

interface 192.1.1.73 brief
-1 routerA.lab.mycompany.net (192.1.1.2) PIM thresh^ 1
mtrace to-gateway ! 73
traceroute
Syntax traceroute host

<as-number-lookup>
<bypass-routing>
<clns>
<gateway address>
<inet | inet6>
<logical router (all | logical-router-name)>
<no-resolve>
<tos value>
<ttl value>
<wait seconds>
Description Display the route packets take to a specified network host. Use traceroute as a
debugging tool to locate points of failure in a network.
Options host—IP address or name of remote host.
as-number-lookup—(Optional) Display the autonomous system (AS) number of each

intermediate hop on the path from the host to the destination.
bypass-routing—(Optional) Bypass the normal routing tables and send requests

directly to a system on an attached network. If the system is not on a
directly-attached network, an error is returned. Use this option to display a
route to a local system through an interface that has no route through it.
clns—(Optional) Trace the route belonging to Connectionless Network Service

(CLNS).
gateway address—(Optional) Address of a router through which the route transits.
inet | inet6—(Optional) Trace the route belonging to IPv4 or IPv6, respectively.
interface interface-name—(Optional) Name of the interface over which to send

packets.


to the IP address.

the traceroute attempt.
source source-address—(Optional) Source address of the outgoing traceroute

packets.
tos value—(Optional) Value to include in the IP type-of-service (ToS) field. The range
of values is 0 through 255.
74 ! traceroute
ttl value—(Optional) Maximum time-to-live value to include in the traceroute

request. The range of values is 0 through 128.
wait seconds—(Optional) Maximum time to wait for a response to the traceroute

request.
List of Sample Output traceroute on page 75

traceroute as-number-lookup host on page 75
traceroute noresolve on page 75
traceroute (Between CE Routers, Layer 3 VPN) on page 75
traceroute (Through an MPLS LSP) on page 76
Output Fields Table 26 describes the output fields for the traceroute command. Output fields are
Table 26: traceroute Output Fields

traceroute to IP address of the receiver.
hops max Maximum number of hops allowed.
byte packets Size of packets being sent.
traceroute user@host> traceroute santacruz

traceroute to green.company.net (10.156.169.254), 30 hops max, 40 byte packets
1 blue23 (10.168.1.254) 2.370 ms 2.853 ms 0.367 ms
2 red14 (10.168.255.250) 0.778 ms 2.937 ms 0.446 ms
3 yellow (10.156.169.254) 7.737 ms 89.905 ms 0.834 ms
traceroute user@host> traceroute as-number-lookup 10.100.1.1

as-number-lookup host traceroute to 10.100.1.1 (10.100.1.1), 30 hops max, 40 byte packets
1 10.39.1.1 (10.39.1.1) 0.779 ms 0.728 ms 0.562 ms
2 10.39.1.6 (10.39.1.6) [AS 32] 0.657 ms 0.611 ms 0.617 ms
3 10.100.1.1 (10.100.1.1) [AS 10, 40, 50] 0.880 ms 0.808 ms 0.774 ms
traceroute noresolve user@host> traceroute santacruz noresolve

traceroute to green.company.net (10.156.169.254), 30 hops max, 40 byte packets
1 10.168.1.254 0.458 ms 0.370 ms 0.365 ms
2 10.168.255.250 0.474 ms 0.450 ms 0.444 ms
3 10.156.169.254 0.931 ms 0.876 ms 0.862 ms
traceroute user@host> traceroute vpn09

(Between CE Routers, traceroute to vpn09.skybank.net (10.255.14.179), 30 hops max, 40
Layer 3 VPN) byte packets
1 10.39.10.21 (10.39.10.21) 0.598 ms 0.500 ms 0.461 ms
2 10.39.1.13 (10.39.1.13) 0.796 ms 0.775 ms 0.806 ms
MPLS Label=100006 CoS=0 TTL=1 S=1
3 vpn09.skybank.net (10.255.14.179) 0.783 ms 0.716 ms 0.686
traceroute ! 75
traceroute user@host> traceroute mpls1

(Through an MPLS LSP) traceroute to 10.168.1.224 (10.168.1.224), 30 hops max, 40 byte packets
1 mpls1-sr0.company.net (10.168.200.101) 0.555 ms 0.393 ms 0.367 ms
MPLS Label=1024 CoS=0 TTL=1
2 mpls5-lo0.company.net (10.168.1.224) 0.420 ms 0.394 ms 0.401 ms
76 ! traceroute
traceroute monitor
Syntax traceroute monitor host

<count value>
<inet | inet 6>
<interval seconds>
<no resolve>
<size value>
<summary>
Release Information Command introduced in JUNOS Release 8.0
Description Displays live monitoring of each hop in the route packets take to a specified
network host. Use traceroute monitor as a debugging tool to locate points of failure
in a network.
Options host—IP address or name of remote host.
count value—Number of ping requests, in packets, to send in summary mode. The

default value is 10.
inet | inet6—(Optional) Trace the route belonging to IPv4 or IPv6, respectively.
interval seconds—(Optional) Number of seconds to wait before sending ping

requests. The default value is 1.
no resolve—(Optional) Do not attempt to display addresses symbolically.
size value—Receive the specified number of bytes for each packet. The range is 0
through 65468 bytes. The default value is 64.
source source-address—(Optional) Source address of the outgoing traceroute

packets.
summary—Generate and display summary.
List of Sample Output traceroute monitor on page 78
Output Fields Table 27 describes the output fields for the traceroute monitor command. Output
Table 27: traceroute monitor Output Fields

Host to be provided
Loss% to be provided
Snt to be provided
Last to be provided
Avg to be provided
Best to be provided
traceroute monitor ! 77
Table 27: traceroute monitor Output Fields

Wrst to be provided
StDev to be provided
traceroute monitor user@host> traceroute monitor 10.16.0.1
Loss% Snt Last Avg Best Wrst StDev

Host
1. 10.17.41.254 0.0% 17 0.7 1.0 0.6 5.4 1.2
2. secret.net 0.0% 17 0.6 1.0 0.6 6.6 1.4
3. top-secret.net 0.0% 17 0.6 0.6 0.6 0.6 0.0
78 ! traceroute monitor
Part 2
System Management
! Accounting Operational Mode Commands on page 81
! Chassis Operational Mode Commands on page 89
! Command-Line Interface Operational Mode Commands on page 225
! File Management Operational Mode Commands on page 243
! Packet Forwarding Engine Operational Mode Commands on page 259
! Remote System Access Operational Mode Commands on page 305
! Simple Network Management Protocol Operational Mode Commands on

page 311
! System Software Operational Mode Commands on page 333
System Management ! 79
80 ! System Management
Chapter 5
Accounting Operational Mode
Commands
monitor and troubleshoot accounting options. Commands are listed in alphabetical
order.
Table 28: Accounting Operational Mode Commands
Task or Information to Monitor Command

Display accounting statistics. show accounting profile on page 82
Display records. show accounting records on page 86
An accounting profile requires a collection interval, specific fields and counter

names on which to collect statistics, and a file to contain the data. You can
configure the following types of accounting profiles:
! Interface—Collects error and statistic information for input and output packets
on a particular physical or logical interface.
! Filter—Collects count statistics for firewall filters.
! Routing Engine—Collects Routing Engine statistics, including uptime and CPU

load.
! Class usage—Collects statistics for particular source and destination classes,

maintaining packet counts based on the entry and exit points for traffic passing
through the network:
! Source class usage (SCU) tracks traffic originating from specific prefixes on
the provider core and destined for specific prefixes on the customer edge.
! Destination class usage (DCU) tracks traffic originating from the customer
edge and destined for specific prefixes on the provider core router.
NOTE: For information about configuring accounting profiles, see the JUNOS
Network Management Configuration Guide.
! 81
show accounting profile
Syntax show accounting profile profile-name
Description Display accounting profile information.
Options profile-name—Name of the accounting profile.
List of Sample Output show accounting profile (Interface) on page 84

show accounting profile (Filter) on page 84
show accounting profile (Destination Class) on page 85
show accounting profile (Routing Engine) on page 85
Output Fields Table 29 lists the output fields for the show accounting profile command. Output
fields are listed in the approximate order in which they appear..
Table 29: show accounting profile Output Fields

Profile Name of the accounting profile.
Sampling interval Configured interval, in minutes, for statistic collection.
Profile Usage Count Number of items configured for collecting accounting statistics.
file information Information about the accounting profile log, including:
! File—Name of accounting profile log. If no name is explicitly
provided, the name of the accounting profile is used. All
statistics files are placed in the /var/log directory.
! maximum size—Configured size. When the size is exceeded,
the log file closes and a new log file opens.
! maximum number—Configured maximum number of log
files.
! bytes written—Number of bytes written to the log file.
Transfer Interval Length of time (in minutes) the file remains open, receiving
statistics before it is closed, transferred, and rotated. When
either the time or the file size is exceeded, the file is closed and
a new one opened, whether or not a transfer site is specified.
Next Scheduled Transfer Time at which the next transfer occurs.
82 ! show accounting profile

Chapter 5: Accounting Operational Mode Commands

Column Labels Names of sampled statistics. This list varies depending on the
configuration:
! profile-layout—List of data fields reported, in the order they
appear in the output.
! epoch-timestamp—Number of seconds since the epoch.
! interfaces—(For interface, filter, and destination class
profiles) Name of the interfaces on which the filter is applied.
! filter-name—(For filter profiles) Name of the filter.
! counter-name—(For filter profiles) Name of the counter.
! packet-count—(For filter and destination class profiles)
Number of packets for the counter.
! byte-count—(For filter and destination class profiles) Number
of bytes for the counter.
! input-bytes—(For interface profiles) Input bytes.
! input-errors—(For interface profiles) Generic input error
packets.
! input-multicast—(For interface profiles) Input packets arriving
by multicast.
! input-packets—(For interface profiles) Input packets.
! input-unicast—(For interface profiles) Input unicast packets.
! output-bytes—(For interface profiles) Output bytes.
! output-errors—(For interface profiles) Generic output error
packets.
! output-multicast—(For interface profiles) Output packets sent
by multicast.
! output-packets—(For interface profiles) Output packets.
! output-unicast—(For interface profiles) Output unicast
packets.
! no-proto—(For interface profiles) Packets for unsupported
protocol.
! snmp-index—(For interface profiles) SNMP index.
! destination-class-name—(For destination class profiles)
Configured destination class name.
! host name—(For Routing Engine profiles) Hostname for the
router.
! date-yyyymmdd—(For Routing Engine profiles) Date, in
YYYYMMDD format.
! timeofday-hhmmss—(For Routing Engine profiles) Time of
day, in HHMMSS format.
! uptime—(For Routing Engine profiles) Time since the last
reboot, in seconds.
! cpu1min—(For Routing Engine profiles) Average system load
over the last 1 minute.
! cpu5min—(For Routing Engine profiles) Average system load
over the last 5 minutes.
! cpu15min—(For Routing Engine profiles) Average system
load over the last 15 minutes.
Interface name Name of the interface configured for this accounting profile.
show accounting profile ! 83


Filter name Name of the filter configured for this accounting profile.
routing-engine-stats Routing Engine accounting profile.
Next Scheduled Collection Time for next collection of statistics for the named interface.
show accounting profile user@host> show accounting profile if_prof

(Interface) Profile if_prof
Sampling interval: 1 minute(s), Profile Usage Count: 2
File accounting_profile_stats: maximum size 1048576, maximum number 5, bytes
written 2196
Transfer Interval: 15 minute(s), Next Scheduled Transfer: 2001-06-17-18:00:45
Column Labels:
profile-layout
epoch-timestamp
interface-name
snmp-index
input-bytes
output-bytes
input-packets
output-packets
input-unicast
output-unicast
input-multicast
output-multicast
no-proto
input-errors
output-errors
Interface Name Next Scheduled Collection

fxp0.0 2001-06-18-18:00:30
fxp0 2001-06-18-18:01:00
show accounting profile user@host> show accounting profile filter_profile

(Filter) Profile filter_profile
written 822
Column Labels:
profile-layout
epoch-timestamp
interfaces
filter-name
counter-name
packet-count
byte-count
Filter Name Next Scheduled Collection

myfiltero 2001-06-03-04:32:59
84 ! show accounting profile

show accounting profile user@host> show accounting profile dcu1

(Destination Class) Profile dcu1
written 901
Column Labels:
profile-layout
epoch-timestamp
interface-name
destination-class-name
packet-count
byte-count

so-0/3/3 2001-06-03-04:34:00
show accounting profile user@host> show accounting profile rep1

(Routing Engine) Profile rep1
written 901
Column Labels:
profile-layout
epoch-timestamp
hostname
date-yyyymmdd
timeofday-hhmmss
uptime
cpu1min
cpu5min
cpu15min

routing-engine-stats 2001-06-18-18:02:31
show accounting profile ! 85

show accounting records
Syntax show accounting records profile-name

<since time>
<utc_timestamp>
Description Display accounting records for the specified accounting profile.
Options profile-name—Name of the accounting profile.
since time—(Optional) Display accounting statistics since the specified time

(YYYY-MM-DD-HH:MM:SS).
utc_timestamp—(Optional) Display the timestamp in Coordinated Universal Time

(UTC) format.
List of Sample Output show accounting records on page 87

show accounting records utc-timestamp on page 87
show accounting records (Since Time) on page 87
show accounting records (Filter Profile) on page 88
show accounting records (Destination Class Profile) on page 88
show accounting records (Routing Engine Profile) on page 88
Output Fields Table 30 lists the output fields for the show accounting records command. Output
fields are listed in the approximate order in which they appear..
Table 30: show accounting records Output Fields

Timestamp Date and time of sample.
Interface Name (For interface profiles) Name and SNMP index of the interface
for the accounting profile.
Filter name (For filter profiles) Name of the filter.
Interfaces (For filter profiles) Name of the interfaces for the accounting
profile.
Counter name (For filter profiles) Name of the counter.
Destination Class (For destination class profiles) Name of the destination class.
Input Bytes (For interface profiles) Input bytes.
Output Bytes (For interface profiles) Output bytes.
Input Packets (For interface profiles) Input packets.
Output Packets (For interface profiles) Output packets.
Input Unicast Packets (For interface profiles) Input unicast packets.
Output Unicast Packets (For interface profiles) Output unicast packets
Input Multicast Packets (For interface profiles) Input packets arriving by multicast.
Output Multicast Packets (For interface profiles) Output packets sent by multicast.
Unsupported Protocol Packets (For interface profiles) Packets for unsupported protocols.
86 ! show accounting records

Table 30: show accounting records Output Fields

Input Errors (For interface profiles) Generic input error packets.
Output Errors (For interface profiles) Generic output error packets.
Host Name (For Routing Engine profiles) Hostname for the router.
Date (For Routing Engine profiles) Date, in YYYYMMDD format.
Time of Day (For Routing Engine profiles) Time of day, in HHMMSS format.
Uptime (For Routing Engine profiles) Time since the last reboot, in
seconds.
Average CPU Load (1 min) (For Routing Engine profiles) Average system load over the last
1 minute.
5 minutes.
15 minutes.
show accounting user@host> show accounting records if_prof

records Timestamp: 2000-10-03-00:30:41, Interface Name: fxp0 (SNMP Index 1)
32663634 Input Bytes
3487515 Output Bytes
158000 Input Packets
33296 Output Packets
158000 Input Unicast Packets
33296 Output Unicast Packets
0 Input Multicast Packets
0 Output Multicast Packets
0 Unsupported Protocol Packets
0 Input Errors
0 Output Errors
show accounting user@host> show accounting records if_prof utc_timestamp

records utc-timestamp Timestamp: 2001-06-18-18:01:00, Interface Name: fxp0 (SNMP Index 1)
0 Input Errors
0 Output Errors
show accounting user@host> show accounting records if_prof since 2000-10-03-00:10:41

records (Since Time) Timestamp: 2000-10-03-00:30:41, Interface Name: fxp0 (SNMP Index 1)
0 Input Errors
0 Output Errors
show accounting records ! 87

show accounting user@host> show accounting records filter_profile

records (Filter Profile) Timestamp: 2000-10-03-00:30:41, Filter Name: ap_filter, Interfaces: fxp0.0
Counter Name: c1
2440 Packets
223509 Bytes
show accounting user@host> show accounting records dcu1

records (Destination Timestamp: 2000-10-03-00:30:41, Interface: so-2/0/0.0, Destination Class: gold
Class Profile) 0 Packets
0 Bytes
show accounting user@host> show accounting records rep1

records (Routing Engine Timestamp: 2000-10-03-00:30:41
Profile) Host Name: andro
Date: 20010618
Time of Day: 183130
Uptime: 88260
Average CPU Load (1 min): 0.000000
88 ! show accounting records

Chapter 6
Chassis Operational Mode Commands
monitor the router chassis. Commands are listed in alphabetical order.
Table 31: Chassis Operational Mode Commands (1 of 3)
Task CLI Command

(T-series and M320 routers only) Clear or stop a text message on the clear chassis display message on page 92
craft interface.
(T-series and M320 routers only) Change Control Board (CB) status request chassis cb on page 93
information.
(M7i and M10i routers only) Control the operation of the Compact request chassis cfeb on page 94
Forwarding Engine Board (CFEB).
(M20, M40, M40e, M160, and M320 routers, and T-series routing request chassis fpc on page 95
platform only) Control the operation of the Flexible PIC Concentrator
(FPC).
(M40e, M160, and M320 routers, and T-series routing platform only) request chassis fpm resync on page 96
Resynchronize the Front Panel Module (FPM) craft interface status
(Routing matrix only) Control the operation of a T640 routing node request chassis lcc on page 97
(or line-card chassis) that is connected to a TX matrix platform.
(M40e and M160 routers only) Control the operation of the request chassis mcs on page 98
Miscellaneous Control Subsystem (MCS).
(M40e and M160 routers only) Control the operation of the Packet request chassis pcg on page 99
Forwarding Engine (PFE) clock generator (PCG).
Control the operation of a Physical Interface Card (PIC). request chassis pic on page 100
For routers with multiple Routing Engines, control which Routing request chassis routing-engine master on page 101
Engine is the master.
(T-series routing platform only) Control the operation of the specified request chassis scg on page 104
SONET Clock Generator (SCG).
(M40e and M160 routers only) Control which Switching and request chassis sfm master switch on page 106
Forwarding Module (SFM) is master.
(M40e and M160 routers only) Control the operation of the specified request chassis sfm on page 105
SFM .
(M320 routers and T-series routing platform only) Control the request chassis sib on page 107
operation of the specified Switch Interface Board (SIB).
(T-series routing platform only) Restart the specified Switch Processor request chassis spmb restart on page 108
Mezzanine Board (SPMB) on the Control Board (CB).
(M320 routers only) Change the external clock source used for request chassis synchronization switch on page 110
chassis synchronization.
! 89
Task CLI Command

Send a message to the router’s craft interface. set chassis display message on page 111
Display chassis alarm status. show chassis alarms on page 113
(M7i and M10i routers only) Change and display CFEB status show chassis cfeb on page 115
information.
View information that is currently displayed on the craft interface. show chassis craft-interface on page 117
Display environmental information about the routing platform show chassis environment on page 122
chassis, including the temperature and information about the fans,
power supplies, and Routing Engine.
(T-series and M320 routers only) Display CB environmental show chassis environment cb on page 131
information.
(M20, M40, M40e, M160, and M320 routers, and T-series routing show chassis environment fpc on page 134
platform only) Display FPC environmental status information.
(M20, M40, M40e, M160, and M320 routers, and T-series routing show chassis environment fpm on page 138
platform only) Change and display FPM status information.
(M40e and M160 routers only) Display MCS environmental status show chassis environment mcs on page 141
information.
Display generic environmental information. show chassis environment on page 122
(M40e and M160 routers only) Display PCG environmental status show chassis environment pcg on page 143
information.
(M40e, M160, and M320 routers, and T-series routing platform only) show chassis environment pem on page 145
Display Power Entry Module (PEM) environmental status
information.
Display Routing Engine environmental status information. show chassis environment routing-engine on page 148
(T-series routing platform only) Display SCG environmental show chassis environment scg on page 150
information.
(M40e and M160 routers only) Display SFM environmental show chassis environment sfm on page 152
information.
(M320 routers and T-series routing platform only) Display SIB show chassis environment sib on page 155
environmental information.
(M10i, M40e, M160, and M320 routers, and T-series routing platform show chassis ethernet-switch on page 159
only) Display information about the ports on the Control Board (CB)
Ethernet switch.
(M320 routers and T-series routing platform only) Display the state of show chassis fabric fpcs on page 165
the electrical and optical switch fabric links between the FPCs and
the SIBs.
(T-series routing platform only) Display the state of the electrical and show chassis fabric sibs on page 168
optical switch fabric links:
! Between the SIBs in the TX Matrix platform and the SIBs in the
T640 routing nodes.
! Between the T640 SIBs and the FPCs in a T640 routing node.
(T-series routing platform only) Display the state of the switching show chassis fabric topology on page 171
fabric topology for the SIB connection between the TX Matrix
platform and the T640 routing nodes.
(M5 and M10 routers only). Display FEB status information. show chassis feb on page 175
Display the version levels of the firmware running on the SCB, SFM, show chassis firmware on page 176
SSB, FEB, and FPCs.
90 !
Chapter 6: Chassis Operational Mode Commands
Task CLI Command

(J-series Services Routers only) Display status of the forwarding show chassis forwarding on page 178
process (fwdd).
(M20, M40, M40e, M160, and M320 routers, and T-series routing show chassis fpc on page 179
platform only) Display FPC status information.
Display hardware inventory. show chassis hardware on page 183
(Routing matrix only) Display the status of all T640 routing nodes (or show chassis lccs on page 199
line-card chassis) connected to the TX Matrix platform.
Display chassis location information. show chassis location on page 200
Display MAC address information. show chassis mac-addresses on page 202
Display PIC status information. show chassis pic on page 204
Display the information about one or more Routing Engines. show chassis routing-engine on page 206
(M40 router only) Display System Control Board (SCB) status show chassis scb on page 212
information.
(M40e and M160 routers only) Change and display SFM status show chassis sfm on page 213
information.
(M320 routers and T-series routing platform only) Display SIB status show chassis sibs on page 215
information.
(T-series routing platform only) Display SPMB status information. show chassis spmb on page 217
(T-series routing platform only) Display SPMB Switch Interface Board show chassis spmb sibs on page 219
(SIB) status information.
(M320 routers only) Display information about the external clock show chassis synchronization on page 223
source currently used for chassis synchronization.
NOTE: For information about how to configure chassis parameters, such as

conditions that activate the alarm LEDs on the router’s craft interface, properties
for specific Physical Interface Cards (PICs), and redundancy, see the JUNOS
System Basics Configuration Guide.

(NOC) personnel, see the JUNOS Hardware Network Operations Guide.
! 91
clear chassis display message
Syntax clear chassis display message
Description (M40e, M160, and M320 routers and the T-series routing platform only) Clear or
stop a text message on the craft interface display, which is on the front of the router.
The craft interface alternates the display of text messages with standard craft
interface messages, switching between messages every 2 seconds. By default, the
text message is displayed for 5 minutes. The craft interface display has four
20-character lines.
Required Privilege Level clear
See Also set chassis display message on page 111

show chassis craft-interface on page 117
List of Sample Output clear chassis display message on page 92
Output Fields See show chassis craft-interface on page 117 for an explanation of output fields.
clear chassis display The following example displays and then clears the text message on the craft
message interface display:
user@host> show chassis craft-interface

Red alarm: LED off, relay off
Yellow alarm: LED off, relay off
Host OK LED: On
Host fail LED: Off
FPCs 0 1 2 3 4 5 6 7
-------------------------------
Green . . * . . * * .
Red . . . . . . . .
LCD screen:
+--------------------+
|NOC contact Dusty |
|(888) 526-1234 |
+--------------------+
user@host> clear chassis display message

Host OK LED: On
Host fail LED: Off
FPCs 0 1 2 3 4 5 6 7
-------------------------------
Green . . * . . * * .
Red . . . . . . . .
LCD screen:
+--------------------+
|host |
|Up: 0+17:05:47 |
| |
|Temperature OK |
+--------------------+
92 ! clear chassis display message

request chassis cb
Syntax request chassis cb (offline | online) slot slot-number
Description (M320 routers and T-series routing platforms only) Control the operation of the
Control Board (CB).
Options offline—Take the CB offline.
online—Bring the CB online.
slot slot-number—CB slot number:
! Routing Matrix only—If you specify the number of the T640 routing node
by using the lcc number option (the recommended method), replace
slot-number with a value from 0 through 7. Otherwise, replace slot-number
with a value from 0 through 31. For example, the following commands
have the same result:
user@host> request chassis cb lcc 1 slot 1 offline

user@host> request chassis cb slot 9 offline
! M320 router—Replace slot-number with a value from 0 through 1.
Required Privilege Level maintenance
List of Sample Output request chassis cb on page 93
request.
request chassis cb user@host> request chassis cb offline slot 1

Backup CB 1 cannot be set offline, backup RE is online
request chassis cb ! 93
request chassis cfeb
Syntax request chassis cfeb (offline | online | restart)
Description (M7i and M10i routers only) Control the operation of the Compact Forwarding
Engine Board (CFEB).
Options offline—Take the CFEB offline.
online—Bring the CFEB online.
restart—Restart the CFEB.
See Also show chassis cfeb on page 115
List of Sample Output request chassis cfeb on page 94
request.
request chassis cfeb user@host> request chassis cfeb offline

CFEB Offlined
94 ! request chassis cfeb

request chassis fpc
Syntax request chassis fpc (offline | online | restart) slot slot-number
Syntax request chassis fpc (offline | online | restart) slot slot-number

(Routing Matrix) <lcc number >
Description (M20, M40, M40e, M160, and M320 routers, and T-series routing platform only)
Control the operation of the Flexible PIC Concentrator (FPC).
Options offline—Take the FPC offline.
online—Bring the FPC online.
restart—Restart the FPC.
slot slot-number—FPC slot number:
! M20 router—0 through 3.
! Routing matrix only—If you specify the number of the T640 routing node
user@host> request chassis fpc lcc 1 slot 1 offline

user@host> request chassis fpc slot 9 offline
! Other routing platforms—0 through 7.
lcc number—(Routing matrix only) (Optional) Control the FPC in a specified T640
routing node that is connected to a TX Matrix platform. Replace number with a
value from 0 through 3.
See Also show chassis fpc on page 179
List of Sample Output request chassis fpc on page 95
request.
request chassis fpc user@host> request chassis fpc online slot 0

FPC 0 already online
request chassis fpc ! 95

request chassis fpm resync
Syntax request chassis fpm resync
Syntax request chassis fpm resync (lcc number | scc)

(Routing Matrix)
Description (M40e, M160, and M320 routers, and T-series routing platform only) Resynchronize
the Front Panel Module (FPM) craft interface status.
Options lcc number—(Routing matrix only) Resynchronize the craft interface status on a
specified T640 routing node that is connected to a TX Matrix platform. Replace
number with a value from 0 through 3.
scc—(Routing matrix only) Resynchronize the craft interface status on the

TX Matrix platform (or switch-card chassis).
List of Sample Output request chassis fpm resync on page 96
request.
request chassis fpm user@host> request chassis fpm resync

resync Front Panel resynced
96 ! request chassis fpm resync

request chassis lcc
Syntax request chassis lcc (offline | online) slot slot-number

(Routing Matrix)
Description (Routing matrix only) Control the operation of a T640 routing node
(or line-card chassis) that is connected to a TX matrix platform.
Options offline—Take the T640 routing node offline.
online—Bring the T640 routing node online.
slot slot-number—Slot number of a T640 routing node that is connected to a

TX Matrix platform. Replace slot-number with a value from 0 through 3.
See Also show chassis lccs on page 199
List of Sample Output request chassis lcc on page 97
request.
request chassis lcc user@host> request chassis lcc offline slot 0
request chassis lcc ! 97

request chassis mcs
Syntax request chassis mcs (offline | online | restart) slot slot-number
Description (M40e and M160 routers only) Control the operation of the Miscellaneous Control
Subsystem (MCS).
Options offline—Take the MCS offline.
online—Bring the MCS online.
restart—Restart the MCS.
slot slot-number—MCS slot number. Replace slot-number with a 0 or 1.
List of Sample Output request chassis mcs on page 98
request.
request chassis mcs user@host> request chassis mcs online slot 0

MCS 0 appears to be online already
98 ! request chassis mcs

request chassis pcg
Syntax request chassis pcg (offline | online) slot slot-number
Description (M40e and M160 routers) Control the operation of the Packet Forwarding Engine
(PFE) clock generator (PCG).
Options offline—Take the PCG offline.
online—Bring the PCG online.
slot slot-number—PCG slot number. Replace slot-number with a 0 or 1.
List of Sample Output request chassis pcg on page 99
request.
request chassis pcg user@host> request chassis pcg online slot 0

PCG 1 appears to be already online
request chassis pcg ! 99

request chassis pic
Syntax request chassis pic (offline | online) fpc-slot slot-number pic-slot slot-number
Syntax request chassis pic (offline | online) fpc-slot slot-number pic-slot slot-number
(Routing Matrix) <lcc number>
Description Control the operation of the Physical Interface Card (PIC).
Options offline—Take the PIC offline.
online—Bring the PIC online.
fpc-slot slot-number—Flexible PIC Concentrator (FPC) slot number. Replace

slot-number with a value appropriate for your routing platform:
! M5, M7i, M10, and M10i routers—0 or 1.
! M20 routers—0 through 3.
! M40, M40e, M160, M320, T320 routers, and T640 nodes—0 through 7.
user@host> request chassis pic fpc-slot 1 lcc 1 pic-slot 0 offline

user@host> request chassis pic fpc-slot 9 pic-slot 0 offline
pic-slot slot-number—PIC slot number. For the M-series routing platform, the T640
routing node, and the routing matrix, it can be 0, 1, 2, or 3. For the T320 router,
it can be 0 or 1.
lcc number—(Routing matrix only) (Optional) Control the PIC in a specified T640
routing node that is connected to a TX Matrix platform. Replace number with a
value from 0 through 3.
See Also show chassis pic on page 204
List of Sample Output request chassis pic on page 100
request.
request chassis pic user@host> request chassis pic pic-slot 0 online fpc-slot 0
FPC 0, PIC 0 is already online
100 ! request chassis pic

request chassis routing-engine master
Syntax request chassis routing-engine master (acquire | release | switch)

<force>
<no-confirm>
Syntax request chassis routing-engine master (acquire | release | switch)

(Routing Matrix) (lcc number | scc | all chassis)
<force>
<no-confirm>

all-chassis option added in JUNOS Release 8.0.
Description For routers with multiple Routing Engines, control which Routing Engine is the
master.
CAUTION: (Routing matrix only) Within the routing matrix, we recommend that all
Routing Engines run the same JUNOS software release. If you run different JUNOS
releases on the Routing Engines and a change in mastership occurs on any backup
Routing Engine in the routing matrix, one or all T640 routing nodes might become
logically disconnected from the TX Matrix platform and cause data loss. For more
information, see the TX Matrix Platform Hardware Guide or the JUNOS System
Options acquire—Attempt to become the master Routing Engine.
release—Request that the other Routing Engine become the master.
switch—Toggle mastership between Routing Engines.
lcc number—(Routing matrix only) T640 routing node (or line-card chassis) that is
connected to a TX Matrix platform. Replace number with a value from
0 through 3.
scc—(Routing matrix only) TX Matrix platform (or switch-card chassis).
all-chassis—(Routing matrix only) Available only with the switch option. Switch
mastership on all Routing Engines in a TX Matrix platform.
force—(Optional) Available only with the acquire option. Force the change to a new
master Routing Engine.
no-confirm—(Optional) Do not request confirmation for the switch.
request chassis routing-engine master ! 101

Additional Information
NOTE: Because both Routing Engines are always running, the transition from one
to the other as the master Routing Engine is immediate. However, the changeover
interrupts communication to the System and Switch Board (SSB).The SSB takes
several seconds to reinitialize the Flexible PIC Concentrators (FPCs) and restart the
Physical Interface Cards (PICs). Interior Gateway Protocol (IGP) and Border
Gateway Protocol (BGP) convergence times depend on the specific
network environment.
By default, the Routing Engine in slot 0 (RE0) is the master and the Routing Engine
in slot 1 (RE1) is the backup. To change the default master Routing Engine, include
the routing-engine statement at the [edit chassis redundancy] hierarchy level in the
configuration. For more information, see the JUNOS System Basics Configuration
Guide.
To have the backup Routing Engine become the master Routing Engine, use the
request chassis routing-engine master switch command. If you use this command to
change the master, and then restart the chassis software for any reason, the master
reverts to the default setting.
If you configure both Routing Engines as masters, when the chassis software
restarts for any reason, the Routing Engine in slot 0 becomes the master and the
one in slot 1 becomes the backup.
NOTE: Although the configurations on the two Routing Engines do not have to be
the same and are not automatically synchronized, we recommend making both
configurations the same.
When both Routing Engines are configured as master or when both are configured
as backup, and both Routing Engines become operational at the same time, the
Routing Engine in slot 0 becomes the master.
See Also show chassis routing-engine on page 206
List of Sample Output request chassis routing-engine master acquire on page 102
request chassis routing-engine master switch on page 103
request.
request chassis user@host> request chassis routing-engine master acquire

routing-engine master
acquire warning: Traffic will be interrupted while the PFE is re-initialized
warning: The other routing engine's file system could be corrupted

Reset other routing engine and become master ? [yes,no] (no)
102 ! request chassis routing-engine master

request chassis user@host> request chassis routing-engine master switch

routing-engine master
switch warning: Traffic will be interrupted while the PFE is re-initialized
Toggle mastership between Routing Engines ? [yes,no] (no) yes
Resolving mastership...
Complete. The other Routing Engine becomes the master.
Switch mastership back to the local Routing Engine:
user@host> request chassis routing-engine master switch
warning: Traffic will be interrupted while the PFE is re-initialized

Toggle mastership between routing engines ? [yes,no] (no) yes
Resolving mastership...
Complete. The local routing engine becomes the master.
request chassis routing-engine master ! 103

request chassis scg
Syntax request chassis scg (offline | online) slot slot-number
Syntax request chassis scg lcc number (offline | online) slot slot-number
(Routing Matrix)
Description (T-series routing platform only) Control the operation of the specified SONET Clock
Generator (SCG).
Options lcc number—(Routing matrix only) Change the SCG status on a specified T640
routing node (or line-card chassis) that is connected to a TX Matrix platform.
Replace number with a value from 0 through 3.
offline—Take the SCG offline. When you change the SCG status to offline, the unit is
not powered down.
online—Bring the SCG online.
slot slot-number—SCG slot number. Replace slot-number with 0 or 1.
See Also show chassis environment scg on page 150
List of Sample Output request chassis scg on page 104
request.
request chassis scg user@host> request chassis scg online slot 0

Online initiated, use "show chassis environment scg" to verify
104 ! request chassis scg

request chassis sfm
Syntax request chassis sfm (offline | online | restart) slot slot-number
Description (M40e and M160 routers only) Control the operation of the specified Switching and
Forwarding Module (SFM).
Options offline—Take the SFM offline.
online—Bring the SFM online.
restart—Restart the SFM.
slot slot-number—SFM slot number. Replace slot-number with a value from

0 through 3.
See Also show chassis sfm on page 213
List of Sample Output request chassis sfm (M40e) on page 105

request chassis sfm (M160) on page 105
request.
request chassis sfm user@host> request chassis sfm slot 1 restart

(M40e) M40e router:
error: SFM 0 is transitioning to online state.
request chassis sfm user@host> request chassis sfm slot 1 restart

(M160) M160 router:
Restart initiated, use "show chassis sfm" to verify
request chassis sfm ! 105

request chassis sfm master switch
Syntax request chassis sfm master switch

<no-confirm>
Description (M40e and M160 routers only) Control which Switching and Forwarding Module
(SFM) is master.
Options no-confirm—(Optional) Do not display a switch warning or query.
Additional Information By default, the SFM in slot 0 (SFM0) is the master and the SFM in slot 1 (SFM1) is
the backup. If you use this command to change the master, and then restart the
chassis software for any reason, the master reverts to the default setting. To change
the default master SFM, include the sfm statement at the [edit chassis redundancy]
hierarchy level in the configuration. For more information, see the JUNOS System
All installed SFMs are always working together to forward packets. If an SFM fails,
the other SFMs take over and traffic continues to flow uninterrupted.
See Also show chassis sfm on page 213
List of Sample Output request chassis sfm master switch on page 106
request chassis sfm master switch no-confirm on page 106
request.
request chassis sfm user@host> request chassis sfm master switch

master switch warning: Traffic will be interrupted while the PFE is re-initialized
Toggle mastership between system forwarding module? [yes,no] (no) yes
Switch initiated, use “show chassis sfm” to verify
request chassis sfm user@host> request chassis sfm master switch no-confirm
master switch Switch initiated, use “show chassis sfm” to verify
no-confirm
106 ! request chassis sfm master switch

request chassis sib
Syntax request chassis sib (offline | online) slot slot-number
Syntax request chassis sib (all-chassis | lcc number | scc) (offline | online) slot slot-number
(Routing Matrix) (start-receiver number | stop-receiver number)
Description (M320 routers and T-series routing platform only) Control the operation of the
specified Switch Interface Board (SIB).
Options all-chassis—(Routing matrix only) Controls the operation of the SIB in the specified
slot on the TX Matrix platform and on all T640 routing nodes.
lcc number—(Routing matrix only) T640 routing node (or line-card chassis) that is
0 through 3.
offline—Take the SIB offline.
online—Bring the SIB online.
slot slot-number—SIB slot number. For the T640 routing node and a routing matrix,
replace slot-number with a value from 0 through 4. For the T320 router, replace
slot-number with a value from 0 through 2.
start-receiver number—(Routing matrix only) Start the SIB optical receiver.

stop-receiver number—(Routing matrix only) Stop the SIB optical receiver.

See Also show chassis sibs on page 215
List of Sample Output request chassis sib on page 107
request.
request chassis sib user@host> request chassis sib slot 0 online

Online initiated, use "show chassis sibs" to verify
request chassis sib ! 107

request chassis spmb restart
Syntax request chassis spmb restart slot slot-number
Syntax request chassis spmb restart (lcc number | scc) slot slot-number
(Routing Matrix)
Description (T-series routing platform only) Restart the specified Switch Processor Mezzanine
Board (SPMB) on the Control Board (CB).
Options lcc number—(Routing matrix only) T640 routing node (or line-card chassis) that is
0 through 3.
slot slot-number—CB slot number. Replace slot-number with 0 or 1.
See Also show chassis spmb on page 217

show chassis spmb sibs on page 219
List of Sample Output request chassis spmb restart on page 108
request.
request chassis spmb user@host> request chassis spmb restart slot 0

restart
108 ! request chassis spmb restart

request chassis ssb master switch
Syntax request chassis ssb master switch

<no-confirm>
Description (M20 router only) Control which System and Switch Board (SSB) is master.
Options no-confirm—(Optional) Do not request confirmation for the switch.
Additional Information By default, the SSB in slot 0 (SSB0) is the master and the SSB in slot 1 (SSB1) is the
backup. If you use this command to change the master, and then restart the chassis
software for any reason, the master reverts to the default setting. To change the
default master SSB, include the ssb statement at the [edit chassis redundancy]
hierarchy level in the configuration. For more information, see the JUNOS System
The configurations on the two SSBs do not have to be the same, and they are not
automatically synchronized. If you configure both SSBs as masters, when the
chassis software restarts for any reason, the SSB in slot 0 becomes the master and
the one in slot 1 becomes the backup.
The switchover from the primary SSB to the backup SSB is immediate. The SSB
takes several seconds to reinitialize the Flexible PIC Concentrators (FPCs) and
restart the Physical Interface Cards (PICs). The Interior Gateway Protocol (IGP) and
Border Gateway Protocol (BGP) convergence times depend on the specific network
environment.
See Also show chassis ssb on page 221
List of Sample Output request chassis ssb master switch on page 109
request chassis ssb master switch no-confirm on page 109
request.
request chassis ssb user@host> request chassis ssb master switch

master switch warning: Traffic will be interrupted while the PFE is re-initialized
Toggle mastership between system switch boards ? [yes,no] (no) yes
Switch initiated, use “show chassis ssb” to verify
request chassis ssb user@host> request chassis ssb master switch no-confirm
master switch Switch initiated, use “show chassis ssb” to verify
no-confirm
request chassis ssb master switch ! 109

request chassis synchronization switch
Syntax request chassis synchronization switch (external-a | external-b)
Description (M320 routers only) Change the external clock source used for chassis
synchronization.
Options external-a—(Routing matrix only) Change the synchronization source to external

source A.
external-b—(Routing matrix only) Change the synchronization source to external

source B.
See Also show chassis synchronization on page 223
List of Sample Output request chassis synchronization switch external-a on page 110
request. Not configured indicates that the source is not configured. Present indicates
that the source is configured and present. Qualified indicates that the source is being
used for synchronization.
request chassis user@host> request chassis synchronization switch external-a

synchronization switch switching to external-a, status: qualified
external-a
110 ! request chassis synchronization switch

set chassis display message
Syntax set chassis display message “message”

<permanent>
Syntax set chassis display message “message” (lcc number | scc)

(Routing Matrix) <permanent>
Description Display or stop a text message on the craft interface display, which is on the front of
the router. The craft interface alternates the display of text messages with standard
craft interface messages, switching between messages every 2 seconds. By default,
the text message is displayed for 5 minutes. The craft interface display has four
20-character lines.
Options “message”—Message to display on the craft interface display. If the message is

longer than 20 characters, it wraps onto the next line. If a word does not fit on
one line, the entire word moves down to the next line. Any portion of the
message that does not fit on the display is truncated. An empty pair of
quotation marks (“”) deletes the text message from the craft interface display.
lcc number—(Routing matrix only) Display the text message on the craft interface
display of a specified T640 routing node (or line-card chassis) that is connected
to a TX Matrix platform. Replace number with a value from 0 through 3.
scc—(Routing matrix only) Display the text message on the craft interface display
of the TX Matrix platform (or switch-card chassis).
permanent—(Optional) Display a text message on the craft interface display

permanently.
See Also clear chassis display message on page 92

show chassis craft-interface on page 117
List of Sample Output set chassis display message (Creating) on page 112
set chassis display message (Deleting) on page 112
Output Fields See the show chassis craft-interface on page 117 for an explanation of output fields.
set chassis display message ! 111

set chassis display The following example shows how to set the display message and verify the result:
message (Creating)
user@host> set chassis display message “NOC contact Dusty (888) 555-1234”
message sent

Host OK LED: On
Host fail LED: Off
FPCs 0 1 2 3 4 5 6 7
-------------------------------
Green . . * . . * * .
Red . . . . . . . .
LCD screen:
+--------------------+
|NOC contact Dusty |
|(888) 555-1234 |
+--------------------+
set chassis display The following example shows how to delete the display message and verify that the
message (Deleting) message is removed:
user@host> set chassis display message ""

message sent

Host OK LED: On
Host fail LED: Off
FPCs 0 1 2 3 4 5 6 7
-------------------------------
Green . . * . . * * .
Red . . . . . . . .
LCD screen:
+--------------------+
|host |
|Up: 0+17:05:47 |
| |
|Temperature OK |
+--------------------+
112 ! set chassis display message

show chassis alarms
Syntax show chassis alarms
Syntax show chassis alarms

(Routing Matrix) <lcc number | scc>
Description Display information about the conditions that have been configured to trigger
alarms.
Options none—(Routing matrix only) Display information about the conditions that have
been configured to trigger alarms on the TX Matrix platform and its attached
T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Show information about a specified

T640 routing node (or line-card chassis) that is connected to a TX Matrix
platform. Replace number with a value from 0 through 3.
scc—(Routing matrix only) (Optional) Show information about the TX Matrix

platform (or switch-card chassis).
Additional Information You cannot clear the alarms for chassis components. Instead, you must remedy the
cause of the alarm. When a chassis alarm is lit, it indicates that you are running the
router in a manner that we do not recommend.
You can manually silence external devices connected to the alarm relay contacts by
pressing the alarm cutoff button, located on the craft interface. Silencing the device
does not remove the alarm messages from the display (if present on the router) or
extinguish the alarm LEDs. In addition, new alarms that occur after you silence an
external device reactivate the external device.
List of Sample Output show chassis alarms (Alarms Active) on page 114
show chassis alarms (No Alarms Active) on page 114
show chassis alarms (Alarms Active on a Routing Matrix) on page 114
show chassis alarms (Backup Routing Engine) on page 114
Output Fields Table 32 lists the output fields for the show chassis alarms command. Output fields
Table 32: show chassis alarms

Alarm time Date and time the alarm was first recorded.
Class Severity class for this alarm: Minor or Major.
Description Information about the alarm.
show chassis alarms ! 113

show chassis alarms user@host> show chassis alarms

(Alarms Active) 3 alarms are currently active
Alarm time Class Description
2000-02-07 10:12:22 UTC Major fxp0: ethernet link down
2000-02-07 10:11:54 UTC Minor YELLOW ALARM - PEM 1 Removed
2000-02-07 10:11:03 UTC Minor YELLOW ALARM - Lower Fan Tray Removed

(No Alarms Active) No alarms are currently active

(Alarms Active on a scc-re0:
Routing Matrix) --------------------------------------------------------------------------
8 alarms currently active
2004-08-05 18:43:53 PDT Minor LCC 0 Minor Errors
2004-08-05 18:43:53 PDT Minor SIB 3 Not Online
2004-08-05 18:43:52 PDT Major SIB 2 Absent
2004-08-05 18:43:33 PDT Major LCC 2 Major Errors
2004-08-05 18:43:28 PDT Major LCC 0 Major Errors
2004-08-05 18:43:05 PDT Minor LCC 2 Minor Errors
lcc0-re0:
--------------------------------------------------------------------------
2004-08-05 18:43:28 PDT Major PEM 0 Not OK
lcc2-re0:
--------------------------------------------------------------------------
2004-08-05 18:43:05 PDT Minor PEM 1 Absent

(Backup Routing 2 alarms are currently active
Engine) Alarm time Class Description
2005-04-07 10:12:22 PDT Minor Host 1 Boot from alternate media
2005-04-07 10:11:54 PDT Major Host 1 compact-flash missing in Boot List
114 ! show chassis alarms

show chassis cfeb
Syntax show chassis cfeb
Description (M7i and M10i routers only) Display status information about the Compact
Forwarding Engine Board (CFEB).
See Also request chassis cfeb on page 94
List of Sample Output show chassis cfeb (M7i) on page 116

show chassis cfeb (M10i) on page 116
Output Fields Table 33 lists the output fields for the show chassis cfeb command. Output fields are
Table 33: show chassis cfeb

State Status of the CFEB: Online or Offline.
Intake Temperature Temperature of the air before flowing past the CFEB.
Exhaust Temperature Temperature of the air after flowing past the CFEB.
CPU utilization Percentage of CPU being used by the CFEB processor.
Interrupt utilization Of the total CPU being used by the CFEB processor, the percentage
being used for interrupts
Heap Utilization Percentage of heap space (dynamic memory) being used by the
CFEB processor. If this number exceeds 80 percent, there may be a
software problem (memory leak).
Buffer Utilization Percentage of buffer space being used by the CFEB processor for
buffering internal messages
Total CPU DRAM Amount of DRAM available to the CFEB CPU.
Internet Processor II Information about the CFEB processor.
Start time Time when the Routing Engine detected that the CFEB was
running.
Uptime How long the Routing Engine has been connected to the CFEB and,
therefore, how long the Flexible PIC Concentrator (FPC) has been
up and running.
show chassis cfeb ! 115

show chassis cfeb user@host> show chassis cfeb

(M7i) CFEB status:
State Online
Intake Temperature 27 degrees C / 80 degrees F
Exhaust Temperature 33 degrees C / 91 degrees F
CPU utilization 3 percent
Interrupt utilization 0 percent
Heap utilization 8 percent
Buffer utilization 21 percent
Total CPU DRAM 128 MB
Internet Processor II Version 1, Foundry IBM, Part number 164
Start time: 2003-06-11 11:41:22 PDT
Uptime: 1 hour, 39 minutes, 31 seconds
show chassis cfeb user@host> show chassis cfeb

(M10i) CFEB status:
Slot 0 information:
State Master
Intake temperature 35 degrees C / 95 degrees F
Exhaust temperature 43 degrees C / 109 degrees F
Start time: 2004-11-01 03:24:15 PST
Uptime: 12 hours, 56 minutes, 18 seconds
Slot 1 information:
State Backup
116 ! show chassis cfeb

show chassis craft-interface
Syntax show chassis craft-interface
Syntax show chassis craft-interface

Description For routers that have a display on the craft interface, show the messages that are
currently displayed. On all routers, except for the M20, you must enter this
command on the master Routing Engine.
Options none—(Routing matrix only) Show messages that are currently displayed on the
craft interface on the TX Matrix platform and its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Show messages for a specified T640
scc—(Routing matrix only) (Optional) Show messages for the TX Matrix platform
(or switch-card chassis).
See Also set chassis display message on page 111

clear chassis display message on page 92
List of Sample Output show chassis craft-interface (M20) on page 118

show chassis craft-interface (M40) on page 118
show chassis craft-interface (M160) on page 119
show chassis craft-interface (Routing Matrix) on page 119
Output Fields Table 34 lists the output fields for the show chassis craft-interface command. Output
Table 34: show chassis craft-interface Output Fields

LCD screen or Contents of the Front Panel Module display:
FPM Display Contents ! router-name—Name of the router.
! Up—How long the router has been operational, in days, hours,
minutes, and seconds.
! message—Information about the router traffic load, the power
supply status, the fan status, and the temperature status. The
display of this information changes every 2 seconds. If a text
message has been created with the set chassis display
command, this message appears on all four lines of the craft
interface display. The display alternates between the text
message and the standard system status messages every
2 seconds.
Front Panel System LEDs Status of the Front Panel System LEDs. A dot (.) indicates the LED
is not lit. An asterisk (*) indicates the LED is lit.
Front Panel Alarm Indicators Status of the Front Panel Alarm Indicators. A dot (.) indicates the
relay is off. An asterisk (*) indicates the relay is active.
show chassis craft-interface ! 117

Table 34: show chassis craft-interface Output Fields

Front Panel FPC LEDs Status of the Front Panel Flexible PIC Concentrator (FPC) LEDs. A
dot (.) indicates the LED is not lit. An asterisk (*) indicates it is lit.
CB LEDs Status of the Control Board (CB) LEDs. A dot (.) indicates the LED
is not lit. An asterisk (*) indicates the LED is lit.
MCS and SFM LEDs Status of the Miscellaneous Control Subsystem (MCS) and
Switching and Forwarding Module (SFM) LEDs. A dot (.) indicates
the LED is not lit. An asterisk (*) indicates the LED is lit. When
neither a dot nor an asterisk is displayed, there is no board in that
slot.
SIB LEDs Status of the Switch Interface Board (SIB) LEDs. A dot (.) indicates
the LED is not lit. An asterisk (*) indicates the LED is lit.
SCG LEDs Status of the SONET Clock Generator (SCG) LEDs. A dot (.)
indicates the LED is not lit. An asterisk (*) indicates the LED is lit.
show chassis user@host> show chassis craft-interface

craft-interface (M20) Red alarm: LED off, relay off
Yellow alarm: LED on, relay on
Host OK LED: On
Host fail LED: Off
FPCs 0 1 2 3
-------------------
Green . * * .
Red . . . .
LCD screen:
+--------------------+
|host |
|1 Alarm active |
|Y: FERF |
| |
+--------------------+

craft-interface (M40) Front Panel LCD Display: enabled

Host OK LED: On
Host Fail LED: Off
NICs 0 1 2 3 4 5 6 7
-------------------------------
Green * . * . * . * .
Red . . . . . . . .
LCD Screen:
+--------------------+
|host |
|Up: 27+18:52:37 |
| |
|52.649kpps Load |
+--------------------+
118 ! show chassis craft-interface


craft-interface (M160) FPM Display contents:
+--------------------+
|hosts |
|Up: 1+16:46 |
| |
|Fans OK |
+--------------------+
Front Panel System LEDs:

Host 0 1
------------------------
OK . *
Fail . .
Master . *
Front Panel Alarm Indicators:

-----------------------------
Red LED .
Yellow LED .
Major relay .
Minor relay .
Front Panel FPC LEDs:

FPC 0 1 2 3 4 5 6 7
------------------------------------
Red . . . . . . . .
Green * * . . . . . .
MCS and SFM LEDs:

MCS 0 1 SFM 0 1 2 3
--------------------------------------
Amber . . .
Green . . .
Blue * * *

craft-interface scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
FPM Display contents:
+--------------------+
|bradley |
|8 Alarms active |
|R: SIB 2 Absent |
|R: SIB 1 Absent |
+--------------------|

Routing Engine 0 1
--------------------------
OK * .
Fail . .
Master * .

-----------------------------
Red LED *
Yellow LED *
Major relay *
Minor relay *

CB LEDs:
CB 0 1
--------------
Amber . .
Green * .
Blue * .
SIB LEDs:
SIB 0 1 2 3 4
--------------------------
Fail . . . . .
OK . . . . *
Active . . . . *
lcc0-re0:
--------------------------------------------------------------------------
+--------------------+
|hybrid |
|5 Alarms active |
|R: SIB 2 Absent |
|R: SIB 1 Absent |
+--------------------|

Routing Engine 0 1
--------------------------
OK * .
Fail . .
Master * .

-----------------------------
Red LED *
Yellow LED *
Major relay *
Minor relay *

FPC 0 1 2 3 4 5 6 7
------------------------------------
Red . . . . . . . .
Green . * * . . . . .
CB LEDs:
CB 0 1
--------------
Amber . .
Green * .
Blue * .
SCG LEDs:
SCG 0 1
--------------
Amber . .
Green * .
Blue * .
SIB LEDs:
SIB 0 1 2 3 4
--------------------------
Red . . . . .
Green . . . . *
120 ! show chassis craft-interface

lcc2-re0:
--------------------------------------------------------------------------
+--------------------+
|prius |
|5 Alarms active |
|R: SIB 2 Absent |
|R: SIB 1 Absent |
+--------------------|

Routing Engine 0 1
--------------------------
OK * .
Fail . .
Master * .

-----------------------------
Red LED *
Yellow LED *
Major relay *
Minor relay *

FPC 0 1 2 3 4 5 6 7
------------------------------------
Red . . . . . . . .
Green * * * . . . . .
CB LEDs:
CB 0 1
--------------
Amber . .
Green * .
Blue * .
SCG LEDs:
SCG 0 1
--------------
Amber . .
Green * .
Blue * .
SIB LEDs:
SIB 0 1 2 3 4
--------------------------
Red . . . . .
Green . . . . *

show chassis environment
Syntax show chassis environment
Syntax show chassis environment

Description Display environmental information about the routing platform chassis, including
the temperature and information about the fans, power supplies, and Routing
Engine.
Options none—(Routing matrix only) Display environmental information about the

TX Matrix platform and its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display chassis environmental

information for a specified T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Display chassis environmental information

about the TX Matrix platform (or switch-card chassis).
LIst of Sample Output show chassis environment (J2300) on page 123

show chassis environment (J4300 or J6300) on page 123
show chassis environment (M5) on page 123
show chassis environment (M7i) on page 124
show chassis environment (M10i) on page 124
show chassis environment (M40e) on page 125
show chassis environment (T320) on page 127
show chassis environment (T640) on page 128
show chassis environment (Routing Matrix) on page 128
122 ! show chassis environment

Output Fields Table 35 lists the output fields for the show chassis environment command. Output
Table 35: show chassis environment Output Fields

Class Item, Status, Measurement
Power Power information:
! (M5, M10, M20, and M40 routers only) Information about each
power supply. Status can be OK, Testing (during initial
power-on), Failed, or Absent.
! (M7i, M10i, M40e, M160, and M320 routers, and T-series
routing platform only) Information about the Power Entry
Modules. Status can be OK, Testing (during initial power-on),
Check, Failed, or Absent.
Temp Temperature of air flowing through the chassis. Measurement
indicates degrees in Centigrade (C) and Farenheit (F).
Fan Information about the fans. Status can be OK, Testing (during
initial power-on), Failed, or Absent. Measurement indicates if fans
are spinning at normal or high speed.
Misc Information about other components of the chassis:
! On some routing platforms, it indicates the status of one or
more additional components.
! On the M160 router, Misc includes CIP (Connector Interface
Panel). OK indicates the CIP is present.
! On the T640 routing node, Misc includes CIP and SPMB (Switch
Processor Mezzanine Board). OK indicates the item is present.
show chassis user@host> show chassis environment

environment (J2300) Class Item Status Measurement
Temp Routing Engine OK 40 degrees C / 104 degrees F
Fan Fan OK

environment (J4300 or Class Item Status Measurement
J6300) Temp Routing Engine OK 41 degrees C / 105 degrees F
Fan Fan 0 OK
Fan 1 OK

environment (M5) Class Item Status Measurement
Power Power Supply A OK
Power Supply B Absent
Temp FPC 0 OK 30 degrees C / 86 degrees F
FEB OK 33 degrees C / 91 degrees F
PS Intake OK 27 degrees C / 80 degrees F
PS Exhaust OK 27 degrees C / 80 degrees F
Routing Engine OK 34 degrees C / 93 degrees F
Fans Left Fan 1 OK Spinning at normal speed
Left Fan 2 OK Spinning at normal speed
Misc Craft Interface OK
show chassis environment ! 123


environment (M7i) Class Item Status Measurement
Power Power Supply 0 OK
Power Supply 1 Absent
Temp Intake OK 22 degrees C / 71 degrees F
FPC 0 OK 23 degrees C / 73 degrees F
Power Supplies OK 23 degrees C / 73 degrees F
CFEB Intake OK 24 degrees C / 75 degrees F
CFEB Exhaust OK 29 degrees C / 84 degrees F
Fans Fan 1 OK Spinning at normal speed
Fan 2 OK Spinning at normal speed

Power Supply B Failed
FEB OK 34 degrees C / 93 degrees F
PS Intake OK 31 degrees C / 87 degrees F
PS Exhaust OK 34 degrees C / 93 degrees F
Fans Left Fan 1 OK Spinning at normal speed

environment (M10i) Class Item Status Measurement
Power Power Supply 0 OK
Power Supply 1 OK
Temp Intake OK 26 degrees C / 78 degrees F
Lower Power Supplies OK 29 degrees C / 84 degrees F
Upper Power Supplies OK 28 degrees C / 82 degrees F
CFEB Intake OK 27 degrees C / 80 degrees F
CFEB Exhaust OK 36 degrees C / 96 degrees F
Routing Engine 0 OK 31 degrees C / 87 degrees F
Fans Fan Tray 0 Fan 1 OK Spinning at normal speed
Fan Tray 0 Fan 2 OK Spinning at normal speed
Fan Tray 1 Fan 1 Absent


Power Supply A OK 22 degrees C / 71 degrees F
SSB 0 OK 30 degrees C / 86 degrees F
Backplane OK 22 degrees C / 71 degrees F
Routing Engine 1 Testing
Fans Rear Fan OK Spinning at normal speed
Front Upper Fan OK Spinning at normal speed
Front Middle Fan OK Spinning at normal speed
Front Bottom Fan OK Spinning at normal speed

SCB OK 26 degrees C / 78 degrees F
Backplane @ A1 OK 28 degrees C / 82 degrees F
Backplane @ A2 OK 23 degrees C / 73 degrees F
Fans Top Impeller OK Spinning at normal speed
Bottom impeller OK Spinning at normal speed
Rear Left Fan OK Spinning at normal speed
Rear Center Fan OK Spinning at normal speed
Rear Right Fan OK Spinning at normal speed

environment (M40e) Class Item Status Measurement
Power PEM 0 OK
PEM 1 Absent
Temp PCG 0 OK 44 degrees C / 111 degrees F
PCG 1 OK 47 degrees C / 116 degrees F
MCS 0 OK 45 degrees C / 113 degrees F
SFM 0 SPP OK 40 degrees C / 104 degrees F
SFM 0 SPR OK 44 degrees C / 111 degrees F
FPM CMB OK 28 degrees C / 82 degrees F
FPM Display OK 28 degrees C / 82 degrees F
Fans Rear Bottom Blower OK Spinning at normal speed
Rear Top Blower OK Spinning at normal speed
Front Top Blower OK Spinning at normal speed
Fan Tray Rear Left OK Spinning at normal speed
Fan Tray Rear Right OK Spinning at normal speed

Fan Tray Front Left OK Spinning at normal speed

Fan Tray Front Right OK Spinning at normal speed
Misc CIP OK

Power PEM 0 OK
PEM 1 Absent
Temp PCG 0 OK 45 degrees C / 113 degrees F
PCG 1 Absent
Routing Engine 1 Absent
FPM CMB OK 31 degrees C / 87 degrees F
Fans Rear Bottom Blower OK Spinning at normal speed
Rear Top Blower OK Spinning at normal speed
Front Top Blower OK Spinning at normal speed
Fan Tray Rear Left OK Spinning at normal speed
Fan Tray Rear Right OK Spinning at normal speed
Fan Tray Front Left OK Spinning at normal speed
Fan Tray Front Right OK Spinning at normal speed
Misc CIP OK

Temp PEM 0 Absent
PEM 1 Absent
PEM 2 OK
PEM 3 OK
CB 0 OK 36 degrees C / 96 degrees F
SIB 0 OK 38 degrees C / 100 degrees F
FPC 0 Intake OK 28 degrees C / 82 degrees F
FPC 0 Exhaust OK 40 degrees C / 104 degrees F
FPM GBUS OK 30 degrees C / 86 degrees F

Fan Top Left Front fan OK Spinning at normal speed

Top Right Rear fan OK Spinning at normal speed
Top Right Front fan OK Spinning at normal speed
Top Left Rear fan OK Spinning at normal speed
Bottom Left Front fan OK Spinning at normal speed
Bottom Right Rear fan OK Spinning at normal speed
Bottom Right Front fan OK Spinning at normal speed
Bottom Left Rear fan OK Spinning at normal speed
Rear Fan 1 (TOP) OK Spinning at normal speed
Rear Fan 2 OK Spinning at normal speed
Rear Fan 7 (Bottom) OK Spinning at normal speed
Misc CIP OK

environment (T320) Class Item Status Measurement
Power PEM 0 OK
PEM 1 Absent
Temp SCG 0 OK 28 degrees C / 82 degrees F
SCG 1 OK 28 degrees C / 82 degrees F
FPC 0 Top OK 38 degrees C / 100 degrees F
FPC 0 Bottom OK 32 degrees C / 89 degrees F
Fans Top Left Front fan OK Spinning at normal speed
Top Left Middle fan OK Spinning at normal speed
Top Right Middle fan OK Spinning at normal speed
Bottom Left Middle fan OK Spinning at normal speed
Bottom Right Middle fan OK Spinning at normal speed
Rear Tray Top fan OK Spinning at normal speed
Rear Tray Second fan OK Spinning at normal speed
Rear Tray Middle fan OK Spinning at normal speed
Rear Tray Fourth fan OK Spinning at normal speed
Rear Tray Bottom fan OK Spinning at normal speed
Misc CIP OK
SPMB 0 OK
SPMB 1 OK


environment (T640) Class Item Status Measurement
Temp PEM 0 Absent
PEM 1 OK 22 degrees C / 71 degrees F
Routing Engine 0 Present
CB 0 Present
SIB 0 Absent
SIB 1 Absent
SIB 2 Absent
SIB 3 Absent
SIB 4 Absent
FPC 4 Top Testing
FPC 4 Bottom Testing
FPC 5 Top Testing
FPC 6 Top Testing
FPM Display Absent
Fourth Blower from top OK Spinning at normal speed
Bottom Blower OK Spinning at normal speed
Middle Blower OK Spinning at normal speed
Top Blower OK Spinning at normal speed
Second Blower from top OK Spinning at normal speed
Misc CIP OK
SPMB 0 OK
SPMB 1 OK

environment scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
Class Item Status Measurement
Temp PEM 0 Absent
PEM 1 OK 29 degrees C / 84 degrees F
SIB 0 (B) OK 44 degrees C / 111 degrees F


Rear Tray Third fan OK Spinning at normal speed
Rear Tray Fifth fan OK Spinning at normal speed
Rear Tray Sixth fan OK Spinning at normal speed
Rear Tray Seventh fan OK Spinning at normal speed
Misc CIP 0 OK
CIP 1 OK
SPMB 0 OK
SPMB 1 OK
lcc0-re0:
--------------------------------------------------------------------------
Temp PEM 0 OK 29 degrees C / 84 degrees F
PEM 1 Absent
SCG 1 Absent
Rear Tray Third fan OK Spinning at normal speed
Rear Tray Fifth fan OK Spinning at normal speed
Rear Tray Sixth fan OK Spinning at normal speed
Rear Tray Seventh fan OK Spinning at normal speed
Misc CIP OK
SPMB 0 OK
SPMB 1 OK

lcc2-re0:
--------------------------------------------------------------------------
Temp PEM 0 OK 29 degrees C / 84 degrees F
PEM 1 Absent
SCG 1 Absent
...

show chassis environment cb
Syntax show chassis environment cb

<slot>
Syntax show chassis environment cb

<slot>
Description (M320 routers and T-series routing platform only) Display environmental
information about the Control Boards (CBs).
Options none—Display environmental information about all CBs. For the routing matrix
only, display environmental information about all CBs on the TX Matrix
platform and its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display environmental information

about the CBs in a specified T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Display environmental information about the

CBs in the TX Matrix platform (or switch-card chassis).
slot—(Optional) Display environmental information about the specified CB. Replace

slot with 0 or 1.
List of Sample Output show chassis environment cb (M320) on page 132

show chassis environment cb (Routing Matrix) on page 132
Output Fields Table 36 lists the output fields for the show chassis environment cb command.
Table 36: show chassis environment cb Output Fields
State Status of the CB: Online or Offline. If two CBs are installed and online, one is
functioning as the master, and the other is the standby.
Temperature Temperature of the air flowing past the CB.
Power Power required and measured on the CB. The left column displays the
required power, in volts. The right column displays the measured power, in
millivolts.
BUS Revision Revision level of the generic bus device.
FPGA Revision Revision level of the field-programmable gate array (FPGA)
show chassis environment cb ! 131

show chassis user@host> show chassis environment cb

environment cb (M320) CB 0 status:
State Online Master
Temperature 29 degrees C / 84 degrees F
Power:
1.8 V 1805 mV
2.5 V 2501 mV
3.3 V 3293 mV
4.6 V 4725 mV
5.0 V 5032 mV
12.0 V 11975 mV
3.3 V bias 3286 mV
8.0 V bias 7589 mV
BUS Revision 40
FPGA Revision 7
CB 1 status:
State Online Standby
Power:
1.8 V 1802 mV
2.5 V 2482 mV
3.3 V 3289 mV
4.6 V 4720 mV
5.0 V 5001 mV
12.0 V 11946 mV
3.3 V bias 3274 mV
8.0 V bias 7562 mV
BUS Revision 40
FPGA Revision 7
show chassis user@host> show chassis environment cb

environment cb --------------------------------------------------------------------------
(Routing Matrix) CB 0 status:
State Online Master
Power:
1.8 V 1797 mV
2.5 V 2477 mV
3.3 V 3311 mV
4.6 V 4727 mV
5.0 V 5015 mV
12.0 V 12185 mV
3.3 V bias 3304 mV
8.0 V bias 7870 mV
BUS Revision 40
FPGA Revision 1
CB 1 status:
...
lcc0-re0:
--------------------------------------------------------------------------
CB 0 status:
State Online Master
Power:
1.8 V 1787 mV
2.5 V 2473 mV
3.3 V 3306 mV
4.6 V 4793 mV
5.0 V 5025 mV
12.0 V 12156 mV
132 ! show chassis environment cb

3.3 V bias 3289 mV

8.0 V bias 7609 mV
BUS Revision 40
FPGA Revision 5
CB 1 status:
....
BUS Revision 40
FPGA Revision 5
lcc2-re0:
--------------------------------------------------------------------------
CB 0 status:
State Online Master
...
CB 1 status:
...
show chassis environment cb ! 133

show chassis environment fpc
Syntax show chassis environment fpc

<slot>
Syntax show chassis environment fpc

<slot>
Description (M40e, M160, and M320 routers, and T-series routing platform only) Display about
Flexible PIC Concentrator (FPC) environmental information.
Options none—Display environmental information about all FPCs. For the routing matrix
only, display environmental information about all FPCs on the TX Matrix

about the FPC in a T640 routing node (or line-card chassis) that is connected to
a TX Matrix platform. Replace number with a value from 0 through 3.
slot—(Optional) Display environmental information about an individual FPC:
by using the lcc number option (the recommended method), replace slot
with a value from 0 through 7. Otherwise, replace slot with a value from
0 through 31. For example, the following commands have the same result:
user@host> show chassis environment fpc 1 lcc 1

user@host> show chassis environment fpc 9
! Other routing platforms—Replace slot with a value from 0 through 7.
List of Sample Output show chassis environment fpc (M160) on page 135
show chassis environment fpc (M320) on page 135
show chassis environment fpc (T-series) on page 136
show chassis environment fpc lcc (Routing Matrix) on page 137
Output Fields Table 37 lists the output fields for the show chassis environment fpc command.
Table 37: show chassis environment fpc Output Fields

State Status of the FPC: Unknown, Empty, Present, Ready, Announce online, Online,
Offline, or Diagnostics.
Temperature (M40e and M160 routers only) Temperature of the air flowing past the FPC.
Temperature Intake (M320 routers only) Temperature of the air flowing into the chassis.
Temperature Top (T-series routing platform only) Temperature of the air flowing past the top
of the FPC.
Temperature Exhaust (M320 routers only) Temperature of the air flowing out of the chassis.
134 ! show chassis environment fpc

Table 37: show chassis environment fpc Output Fields

Temperature Bottom (T-series routing platform only) Temperature of the air flowing past the
bottom of the FPC.
Temperature MMBO (T640 routing node only) Temperature of the air flowing past the type 3
FPC.
Temperature MMB1 (M320 routers and T-series routing platform only) Temperature of the air
flowing past the type 1, type 2, and type 3 FPC.
Power Information about the voltage supplied to the FPC. The left column
displays the required power, in volts. The right column displays the
measured power, in millivolts.
CMB Revision Revision level of the chassis management bus device (M-series routing
or platform) or bus (T-series routing platform).
BUS revision
show chassis user@host> show chassis environment fpc

environment fpc FPC 0 status:
(M160) State Online
Power:
1.5 V 1500 mV
2.5 V 2509 mV
3.3 V 3308 mV
5.0 V 4991 mV
5.0 V bias 4952 mV
8.0 V bias 8307 mV
CMB Revision 12
FPC 1 status:
State Online
Power:
1.5 V 1498 mV
2.5 V 2501 mV
3.3 V 3319 mV
5.0 V 5020 mV
5.0 V bias 5025 mV
8.0 V bias 8307 mV
CMB Revision 12

(M320) State Online
Temperature Intake 27 degrees C / 80 degrees F
Temperature Exhaust 38 degrees C / 100 degrees F
Temperature MMB1 31 degrees C / 87 degrees F
Power:
1.5 V 1487 mV
1.5 V * 1494 mV
1.8 V 1821 mV
2.5 V 2533 mV
3.3 V 3323 mV
5.0 V 5028 mV
3.3 V bias 3296 mV
5.0 V bias 4984 mV
CMB Revision 16
FPC 1 status:
State Online
show chassis environment fpc ! 135


Power:
1.5 V 1504 mV
1.5 V * 1499 mV
1.8 V 1820 mV
2.5 V 2529 mV
3.3 V 3328 mV
5.0 V 5013 mV
3.3 V bias 3294 mV
5.0 V bias 4984 mV
CMB Revision 16
FPC 2 status:
State Online
Power:
1.5 V 1498 mV
1.5 V * 1487 mV
1.8 V 1816 mV
2.5 V 2531 mV
3.3 V 3324 mV
5.0 V 5025 mV
3.3 V bias 3277 mV
5.0 V bias 5013 mV
CMB Revision 17
FPC 3 status:
...

(T-series) State Online
Temperature Top 42 degrees C / 107 degrees F
Temperature Bottom 36 degrees C / 96 degrees F
Power:
1.8 V 1959 mV
2.5 V 2495 mV
3.3 V 3344 mV
5.0 V 5047 mV
1.8 V bias 1787 mV
3.3 V bias 3291 mV
5.0 V bias 4998 mV
8.0 V bias 7343 mV
BUS Revision 40
FPC 1 status:
State Online
Power:
1.8 V 1956 mV
2.5 V 2498 mV
3.3 V 3340 mV
5.0 V 5023 mV
1.8 V bias 1782 mV
3.3 V bias 3277 mV
5.0 V bias 4989 mV
8.0 V bias 7289 mV
BUS Revision 40
136 ! show chassis environment fpc

FPC 2 status:
State Online
Power:
1.8 V 1963 mV
2.5 V 2503 mV
3.3 V 3340 mV
5.0 V 5042 mV
1.8 V bias 1797 mV
3.3 V bias 3311 mV
5.0 V bias 5013 mV
8.0 V bias 7221 mV
BUS Revision 40
show chassis user@host> show chassis environment fpc lcc 0

environment fpc lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
FPC 1 status:
State Online
Temperature MMB0 Absent
Power:
1.8 V 1813 mV
2.5 V 2504 mV
3.3 V 3338 mV
5.0 V 5037 mV
1.8 V bias 1797 mV
3.3 V bias 3301 mV
5.0 V bias 5013 mV
8.0 V bias 7345 mV
BUS Revision 40
FPC 2 status:
State Online
Power:
1.8 V 1791 mV
2.5 V 2517 mV
3.3 V 3308 mV
5.0 V 5052 mV
1.8 V bias 1797 mV
3.3 V bias 3289 mV
5.0 V bias 4991 mV
8.0 V bias 7477 mV
BUS Revision 40
show chassis environment fpc ! 137

show chassis environment fpm
Syntax show chassis environment fpm
Syntax show chassis environment fpm

Description (M40e, M160, and M320 routers, and T-series routing platform only) Display
environmental information about the front panel module in the router.
Options none—(Routing matrix only) Display environmental information about the front
panel modules (craft interfaces) on the TX Matrix platform and its attached
T640 routing nodes.

about the front panel module (craft interface) on a specified T640 routing node
(or line-card chassis) that is connected to a TX Matrix platform. Replace number
with a value from 0 through 3.

front panel module (craft interface) on the TX Matrix platform
List of Sample Output show chassis environment fpm (M40e and M160) on page 139
show chassis environment fpm (M320) on page 139
show chassis environment fpm (T-series) on page 139
show chassis environment fpm lcc (Routing Matrix) on page 140
show chassis environment fpm scc (Routing Matrix) on page 140
Output Fields Table 38 lists the output fields for the show chassis environment fpm command.
Table 38: show chassis environment fpm Output Fields

State FPM status: Online or Offline.
FPM CMB Voltage (M40e and M160 routers only) Information about the voltage supplied
to the FPM chassis management bus (CMB) device. The left column
FPM GBUS Voltage (M320 routers and T-series routing platform only) Information about
the voltage supplied to the FPM generic bus (GBUS) device. The left
column displays the required power, in volts. The right column displays
the measured power, in millivolts.
FPM Display Voltage Information about the voltage supplied to the FPM display. The left
column displays the required power, in volts. The right column displays
the measured power, in millivolts.
FPM CMB Temperature (M40e and M160 routers only) Temperature of the air flowing past the
FPM CMB device
FPM GBUS Temperature (M320 routers and T-series routing platform only) Temperature of the
air flowing past the FPM GBUS device.
138 ! show chassis environment fpm

Table 38: show chassis environment fpm Output Fields

FPM Display Temperature Temperature of the air flowing past the FPM display.
CMB Revision (M40e and M160 routers only) Revision level of the CMB device.
GBUS Revision (M320 routers and T-series routing platform only) Revision level of the
GBUS device.
show chassis user@host> show chassis environment fpm

environment fpm (M40e FPM status:
and M160) State Online
FPM CMB Voltage:
5.0 V bias 5030 mV
8.0 V bias 8083 mV
FPM Display Voltage:
5.0 V bias 4998 mV
FPM CMB temperature 34 degrees C / 93 degrees F
FPM Display temperature 35 degrees C / 95 degrees F
CMB Revision 12

environment fpm FPM status:
(M320) State Online
FPM GBUS Voltage:
5.0 V 5006 mV
1.8 V bias 1799 mV
3.3 V bias 3294 mV
5.0 V bias 4998 mV
8.0 V bias 7682 mV
FPM GBUS temperature 30 degrees C / 86 degrees F
GBUS Revision 51

environment fpm FPM status:
(T-series) State Online
FPM GBUS Voltage:
1.8 V bias 1787 mV
3.3 V bias 3286 mV
5.0 V bias 4991 mV
8.0 V bias 7162 mV
5.0 V 4996 mV
GBUS Revision 37
show chassis environment fpm ! 139

show chassis user@host> show chassis environment fpm lcc 0

environment fpm lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
FPM status:
State Online
FPM GBUS Voltage:
1.8 V bias 1797 mV
3.3 V bias 3294 mV
5.0 V bias 5015 mV
8.0 V bias 7470 mV
5.0 V 5018 mV
GBUS Revision 37
show chassis user@host> show chassis environment fpm scc

environment fpm scc scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
FPM status:
State Online
FPM GBUS Voltage:
1.8 V bias 1789 mV
3.3 V bias 3296 mV
5.0 V bias 5003 mV
8.0 V bias 7592 mV
5.0 V 5010 mV
GBUS Revision 37
140 ! show chassis environment fpm

show chassis environment mcs
Syntax show chassis environment mcs

<slot>
Description (M40e and M160 routers only) Display environmental information about the
Miscellaneous Control Subsystems (MCSs).
Options none—Display environmental information about both MCSs.
slot—(Optional) Display environmental information about an individual MCS.

Replace slot with 0 or 1.
List of Sample Output show chassis environment mcs (M40e) on page 141
show chassis environment mcs (M160) on page 142
Output Fields Table 39 lists the output fields for the show chassis environment mcs command.
Table 39: show chassis environment mcs Output Fields

State Status of the MCS: Present, Online, Offline, or Empty. Also indicates
Master or Standby.
Temperature Temperature of the air flowing past the MCS.
Power Information about the voltage supplied to the MCS. The left column
FPGA Revision Revision level of the field-programmable gate array (FPGA) revision.
show chassis user@host> show chassis environment mcs

environment mcs MCS 0 status:
(M40e) State Online Master
Power:
3.3 V 3283 mV
5.0 V 5013 mV
12.0 V 11721 mV
5.0 V bias 5025 mV
8.0 V bias 8229 mV
BUS Revision 12
FPGA Revision 13
MCS 1 status:
Power:
3.3 V 3296 mV
5.0 V 4971 mV
12.0 V 11814 mV
5.0 V bias 4976 mV
8.0 V bias 8241 mV
show chassis environment mcs ! 141

BUS Revision 12
FPGA Revision 13
show chassis user@host> show chassis environment mcs

environment mcs MCS 0 status:
(M160) State Online Master
Power:
3.3 V 3306 mV
5.0 V 4993 mV
12.0 V 11799 mV
5.0 V bias 4993 mV
8.0 V bias 8288 mV
BUS Revision 12
FPGA Revision 13
142 ! show chassis environment mcs

show chassis environment pcg
Syntax show chassis environment pcg

<slot>
Description (M40e and M160 routers only) Display environmental information about the Packet
Forwarding Engine clock generators (PCGs).
Options none—Display environmental information about both PCGs.
slot—(Optional) Display environmental information about an individual PCG.

List of Sample Output show chassis environment pcg (M40e) on page 143
show chassis environment pcg (M160) on page 144
Output Fields Table 40 lists the output fields for the show chassis environment pcg command.
Table 40: show chassis environment pcg Output Fields

PCG slot status Slot number: 0 or 1.
State Status of PCG: Present, Online, Offline, or Empty. If Online, it can be the
Master clock or the Standby clock.
Temperature Temperature of the air flowing past the PCG.
Frequency Frequency setting and measurement for the PCG.
Power Information about the voltage supplied to the PCG. The left column
show chassis user@host> show chassis environment pcg

environment pcg PCG 0 status:
(M40e) State Online - Master clock
Frequency:
Setting 125.00 MHz
Measurement 124.95 MHz
Power:
3.3 V 3266 mV
5.0 V bias 4964 mV
8.0 V bias 8112 mV
BUS Revision 12
PCG 1 status:
State Online - Standby
Frequency:
Setting 125.00 MHz
show chassis environment pcg ! 143

Power:
3.3 V 3271 mV
5.0 V bias 4979 mV
8.0 V bias 8117 mV
BUS Revision 12
show chassis user@host> show chassis environment pcg

environment pcg PCG 0 status:
(M160) State Online - Master clock
Frequency:
Setting 125.00 MHz
Power:
3.3 V 3286 mV
5.0 V bias 5010 mV
8.0 V bias 8183 mV
BUS Revision 12
PCG 1 status:
Frequency:
Setting 125.00 MHz
Power:
3.3 V 3288 mV
5.0 V bias 4993 mV
8.0 V bias 8197 mV
BUS Revision 12
144 ! show chassis environment pcg

show chassis environment pem
Syntax show chassis environment pem

<slot>
Syntax show chassis environment pem

<slot>
Description (M40e, M160, and M320 routers, and T-series routing platform only) Display Power
Entry Module (PEM) environmental status information.
Options none—Display environmental information about both PEMs. For the routing matrix
only, display environmental information about the PEMs, the TX Matrix
platform, and its attached T640 routing nodes.

about the PEM in a specified T640 routing node (or line-card chassis) that is
0 through 3.

PEM in the TX Matrix platform (or switch-card chassis).
slot—(Optional) Display environmental information about an individual PEM.

List of Sample Output show chassis environment pem (M40e) on page 146
show chassis environment pem (M160) on page 146
show chassis environment pem (M320) on page 146
show chassis environment pem (T320) on page 146
show chassis environment pem (T640) on page 147
show chassis environment pem lcc (Routing Matrix) on page 147
show chassis environment pem scc (Routing Matrix) on page 147
Output Fields Table 41 lists the output fields for the show chassis environment pem command.
Table 41: show chassis environment pem Output Fields

PEM slot status Number of the PEM slot.
State Status of the PEM.
Temperature Temperature of the air flowing past the PEM.
AC Input Status of the AC input for the specified component
AC Output Status of the AC output for the specified component.
DC input Status of the DC input for the specified component.
DC output Status of the DC output for the specified component.
show chassis environment pem ! 145

Table 41: show chassis environment pem Output Fields

Load (Not available on M40e or M160 routers) Information about the load on
supply, in percentage of rated current being used.
Voltage (M160, M320, and T640 routers, and TX Matrix platform only)
Information about voltage supplied to the PEM.
Current (T640 routing nodes and TX Matrix platform only) Information about
the PEM current.
Power (T640 routing nodes and TX Matrix platform only) Information about
the PEM power.
SCG/CB/SIB (T640 routing nodes and TX Matrix platform only) SONET Clock
Generator/Control Board/Switch Interface Board.
show chassis user@host> show chassis environment pem

environment pem PEM 0 status:
(M40e) State Online
Temperature OK
AC input OK
DC output OK

(M160) State Online
Temperature OK
DC input OK
DC output OK
Load Less than 20 percent
Voltage:
48.0 V input 54833 mV
48.0 V fan supply 50549 mV
8.0 V bias 8239 mV
5.0 V bias 5006 mV

(M320) State Online
Temperature OK
DC input OK
48.0 V input 51853 mV
8.0 V bias 8449 mV
5.0 V bias 4998 mV
PEM 3 status:
State Online
Temperature OK
DC input OK
48.0 V input 51717 mV
8.0 V bias 8442 mV
5.0 V bias 4998 mV

(T320) State Online
Temperature OK
DC input: OK
146 ! show chassis environment pem


(T640) State Online
DC input: OK
DC output: Voltage Current Power Load
FPC 0 56875 606 34 4
FPC 1 57016 525 29 3
FPC 2 0 0 0 0
FPC 3 0 0 0 0
FPC 4 0 0 0 0
FPC 5 0 0 0 0
FPC 6 57158 1581 90 12
FPC 7 0 0 0 0
SCG/CB/SIB 56750 1125 63 5
show chassis user@host> show chassis environment pem 0 lcc 0

environment pem lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
PEM 0 status:
State Present
DC input: Check
FPC 0 0 0 0 0
FPC 1 0 0 0 0
FPC 2 0 0 0 0
FPC 3 0 0 0 0
FPC 4 0 0 0 0
FPC 5 0 0 0 0
FPC 6 0 0 0 0
FPC 7 0 0 0 0
SCG/CB/SIB 0 0 0 0
show chassis user@host> show chassis environment pem scc

environment pem scc scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
PEM 1 status:
State Online
DC input: OK
SIB 0 0 0 0 0
SIB 1 0 0 0 0
SIB 2 0 0 0 0
SIB 3 56550 0 0 0
SIB 4 55958 6912 386 51
show chassis environment pem ! 147

show chassis environment routing-engine
Syntax show chassis environment routing-engine

<slot>
Syntax show chassis environment routing-engine

<slot>
Description Display Routing Engine environmental status information.
Options none—Display environmental information about all Routing Engines. For the
routing matrix only, display environmental information about all Routing
Engines on the TX Matrix platform and its attached T640 routing nodes.

about the Routing Engine in a specified T640 routing node (or line-card chassis)
that is connected to a TX Matrix platform. Replace number with a value from
0 through 3.

Routing Engine in the TX Matrix platform (or switch-card chassis).
slot—(Optional) Display environmental information about an individual Routing

Engine. On the J-series routing platform and on M5, M7i, M10, and M40
routers, replace slot with 0. On M10i, M20, M40e, M160, and M320 routers, and
the T-series routing platform, replace slot with 0 or 1.
List of Sample Output show chassis environment routing-engine (Nonredundant) on page 148
show chassis environment routing-engine (Redundant) on page 149
Output Fields Table 42 lists the output fields for the show chassis environment routing-engine
command. Output fields are listed in the approximate order in which they appear.
Table 42: show chassis environment routing-engine Output Fields

Routing engine slot status Number of the Routing Engine slot: 0 or 1.
State Status of the Routing Engine: Online Master or Online Standby.
Temperature Temperature of the air flowing past the Routing Engine.
show chassis user@host> show chassis environment routing-engine

environment Routing Engine 0 status:
routing-engine State Online Master
(Nonredundant) Temperature 27 degrees C / 80 degrees
148 ! show chassis environment routing-engine

show chassis user@host> show chassis environment routing-engine

environment Route Engine 0 status:
routing-engine State: Online Master
(Redundant) Temperature: 26 degrees C / 78 degrees F
Route Engine 1 status:
State: Online Standby
Temperature: 26 degrees C / 78 degrees F
show chassis environment routing-engine ! 149

show chassis environment scg
Syntax show chassis environment scg

<slot>
Syntax show chassis environment scg

<slot>
Description Display SONET Clock Generator (SCG) environmental information.
Options none—Display environmental information about all SCGs. For the routing matrix
only, display environmental information about all SCGs on the TX Matrix

about the SCG in a specified T640 routing node (or line-card chassis) that is
0 through 3.
slot—(Optional) Display environmental information about the SCG. Replace slot

with 0 or 1.
List of Sample Output show chassis environment scg (T-series) on page 151
show chassis environment scg lcc (Routing Matrix) on page 151
Output Fields Table 43 lists the output fields for the show chassis environment scg command.
Table 43: show chassis environment scg Output Fields

SCG slot status Number of the SCG slot: 0 or 1.
State Status of the SCG: Online or Offline. If two SCGs are installed and
online, one is functioning as the master, and the other is the standby.
Temperature Temperature of the air flowing past the SCG.
Power Power on the SCG. The left column displays required power, in volts.
The right column displays measured power, in millivolts.
150 ! show chassis environment scg

show chassis user@host> show chassis environment scg

environment scg SCG 0 status:
(T-series) State Online - Master clock
Power:
GROUND 0 mV
3.3 V 3297 mV
5.0 V 5050 mV
5.6 V 5682 mV
1.8 V bias 1787 mV
3.3 V bias 3277 mV
5.0 V bias 4984 mV
8.0 V bias 8400 mV
BUS Revision 40
SCG 1 status:
Power:
GROUND 0 mV
3.3 V 3317 mV
5.0 V 5057 mV
5.6 V 5689 mV
1.8 V bias 1794 mV
3.3 V bias 3296 mV
5.0 V bias 4991 mV
8.0 V bias 8410 mV
BUS Revision 40
show chassis user@host> show chassis environment scg lcc 0 0

environment scg lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
SCG 0 status:
State Online - Master clock
Power:
GROUND 0 mV
3.3 V 3321 mV
5.0 V 5062 mV
5.6 V 5682 mV
1.8 V bias 1789 mV
3.3 V bias 3289 mV
5.0 V bias 4993 mV
8.0 V bias 7807 mV
BUS Revision 40
show chassis environment scg ! 151

show chassis environment sfm
Syntax show chassis environment sfm

<slot>
Description (M40e and M160 routers only) Display Switching and Forwarding Module (SFM)
environmental information.
Options none—Display environmental information about all SFMs.
slot—(Optional) Display environmental information about an individual SFM.

Replace slot with a value from 0 through 3.
List of Sample Output show chassis environment sfm (M40e) on page 153
show chassis environment sfm (M160) on page 153
Output Fields Table 44 lists the output fields for the show chassis environment sfm command.
Table 44: show chassis environment sfm Output Fields

SFM slot status SFM slot number: 0 or 1 on an M40e router, or 0, 1, 2, or 3 on an
M160 router.
State Status of the SFM: Online or Offline. If two SFMs are installed and
online, one is functioning as the master, and the other is marked as
the standby.
SPP Temperature Temperature of the air flowing past the Switch Plane Processor card.
SPR Temperature Temperature of the air flowing past the Switch Plane Router card.
SPP Power Information about the voltage supplied to the Switch Plane
Processor card. The left column displays the required power, in volts.
The right column displays the measured power, in millivolts.
SPR Power Information about the voltage supplied to the Switch Plane Router.
The left column displays the required power, in volts. The right
column displays the measured power, in millivolts.
CMB Revision Revision level of the Chassis Management Bus (CMB) device.
152 ! show chassis environment sfm

show chassis user@host> show chassis environment sfm

environment sfm SFM 0 status:
(M40e) State Online
SPP temperature 40 degrees C / 104 degrees F
SPR temperature 44 degrees C / 111 degrees F
SPP Power:
1.5 V 1501 mV
2.5 V 2472 mV
3.3 V 3293 mV
5.0 V 5028 mV
5.0 V bias 4964 mV
SPR Power:
1.5 V 1501 mV
2.5 V 2483 mV
3.3 V 3308 mV
5.0 V 5035 mV
5.0 V bias 4981 mV
8.0 V bias 8239 mV
CMB Revision 12
SFM 1 status:
SPP Power:
1.5 V 1503 mV
2.5 V 2483 mV
3.3 V 3284 mV
5.0 V 5045 mV
5.0 V bias 4993 mV
SPR Power:
1.5 V 1498 mV
2.5 V 2472 mV
3.3 V 3284 mV
5.0 V 5035 mV
5.0 V bias 4991 mV
8.0 V bias 8231 mV
CMB Revision 12
show chassis user@host> show chassis environment sfm

environment sfm SFM 0 status:
(M160) State Online
SPP Power:
1.5 V 1504 mV
2.5 V 2474 mV
3.3 V 3290 mV
5.0 V 5015 mV
5.0 V bias 4962 mV
SPR Power:
1.5 V 1498 mV
2.5 V 2482 mV
3.3 V 3299 mV
5.0 V 5020 mV
5.0 V bias 4971 mV
8.0 V bias 8229 mV
CMB Revision 12
SFM 1 status:
State Online
show chassis environment sfm ! 153

SPP Power:
1.5 V 1499 mV
2.5 V 2466 mV
3.3 V 3274 mV
5.0 V 5025 mV
5.0 V bias 4984 mV
SPR Power:
1.5 V 1496 mV
2.5 V 2470 mV
3.3 V 3279 mV
5.0 V 5020 mV
5.0 V bias 4993 mV
8.0 V bias 8222 mV
CMB Revision 12
SFM 2 status:
State Online
SPP Power:
1.5 V 1504 mV
2.5 V 2471 mV
3.3 V 3294 mV
5.0 V 5045 mV
5.0 V bias 4981 mV
SPR Power:
1.5 V 1496 mV
2.5 V 2470 mV
3.3 V 3293 mV
5.0 V 5028 mV
5.0 V bias 4971 mV
8.0 V bias 8214 mV
CMB Revision 12
SFM 3 status:
State Online
SPP Power:
1.5 V 1505 mV
2.5 V 2484 mV
3.3 V 3296 mV
5.0 V 5040 mV
5.0 V bias 4984 mV
SPR Power:
1.5 V 1503 mV
2.5 V 2488 mV
3.3 V 3302 mV
5.0 V 5037 mV
5.0 V bias 4993 mV
8.0 V bias 8249 mV
CMB Revision 12
154 ! show chassis environment sfm

show chassis environment sib
Syntax show chassis environment sib

<slot>
Syntax show chassis environment sib

(Routing Matrix) <lcc number| scc>
<slot>
Description (M320 routers and T-series routing platform only) Display Switch Interface Boards
(SIB) environmental information.
Options none—Display environmental information about all SIBs. For the routing matrix
only, display environmental information about all SIBs on the TX Matrix

about the SIB in a specified T640 routing node (or line-card chassis) that is
0 through 3.

SIB in the TX Matrix platform (or switch-card chassis).
slot—(Optional) Display environmental information about the specified SIB. For the
M320 router, replace slot with a value from 0 through 3. For the T640 routing
node and routing matrix, replace slot with a value from 0 through 4. For the
T320 router, replace slot with a value from 0 through 2.
List of Sample Output show chassis environment sib (M320) on page 156
show chassis environment sib 1 (T640) on page 157
show chassis environment sib scc (Routing Matrix) on page 157
show chassis environment sib ! 155

Output Fields Table 45 lists the output fields for the show chassis environment sib command.
Table 45: show chassis environment sib Output Fields

SIB slot status SIB slot number:
! 0 through 3 on an M320 router.
! 0 or 2 on a T320 router.
! 0 through 4 on a T640 router.
State Status of the SIB: Online, Offline, or Spare (T640 routing node only).
Only four of the five T640 router SIBs are active at any time. The
fifth one is marked Spare. It is activated if there is a fault on one of
the active SIBs.
Temperature Temperature of the air flowing past the SIB.
Power Information about the voltage supplied to the SIB. The left column
show chassis user@host> show chassis environment sib

environment sib (M320) SIB 0 status:
State Online
Power:
GROUND 0 mV
1.8 V 1805 mV
2.5 V 2498 mV
3.3 V 3306 mV
1.8 V bias 1789 mV
3.3 V bias 3299 mV
5.0 V bias 5003 mV
8.0 V bias 7374 mV
SIB 1 status:
State Online
Power:
GROUND 0 mV
1.8 V 1814 mV
2.5 V 2477 mV
3.3 V 3319 mV
1.8 V bias 1792 mV
3.3 V bias 3291 mV
5.0 V bias 4981 mV
8.0 V bias 7335 mV
SIB 2 status:
State Online
Power:
GROUND 0 mV
1.8 V 1811 mV
2.5 V 2489 mV
3.3 V 3330 mV
1.8 V bias 1797 mV
3.3 V bias 3304 mV
5.0 V bias 5025 mV
8.0 V bias 7330 mV
156 ! show chassis environment sib

SIB 3 status:
State Online
Power:
GROUND 0 mV
1.8 V 1798 mV
2.5 V 2481 mV
3.3 V 3328 mV
1.8 V bias 1792 mV
3.3 V bias 3313 mV
5.0 V bias 5013 mV
8.0 V bias 7467 mV
show chassis user@host> show chassis environment sib 1

environment sib 1 SIB 1 status:
(T640) State Online
Power:
GROUND 0 mV
1.8 V 1809 mV
2.5 V 2478 mV
3.3 V 3308 mV
1.8 V bias 1794 mV
3.3 V bias 3274 mV
5.0 V bias 4996 mV
8.0 V bias 7247 mV
show chassis user@host> show chassis environment sib scc

environment sib scc scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
SIB 3 status:
State Offline
Reason Offlined by button press
Power:
GROUND 0 mV
1.8 V 0 mV
2.5 V 0 mV
3.3 V 0 mV
1.8 V bias 0 mV
3.3 V bias 0 mV
5.0 V bias 0 mV
8.0 V bias 0 mV
SIB 4 status:
State Online
Temperature (B) 41 degrees C / 105 degrees F
Power:
GROUND 0 mV
1.8 V 1787 mV
2.5 V 2488 mV
3.3 V 3294 mV
1.8 V bias 1787 mV
3.3 V bias 3306 mV
5.0 V bias 5010 mV
8.0 V bias 7418 mV
Power (B):
GROUND 0 mV
1.8 V 1785 mV
2.5 V 2485 mV
3.3 V 3289 mV
1.8 V bias 1799 mV
3.3 V bias 3284 mV
show chassis environment sib ! 157

5.0 V bias 4979 mV

8.0 V bias 7882 mV
158 ! show chassis environment sib

show chassis ethernet-switch
Syntax show chassis ethernet-switch

<errors <port>>
Syntax show chassis ethernet-switch

(Routing Matrix) <errors <port> | statistics <port>>
<lcc number | scc>
Description (M10i, M40e, M160, and M320 routers, and T-series routing platform only) Display
information about the ports on the Control Board (CB) Ethernet switch.
Options none—Display information about each connected port on the Ethernet switch. For
the routing matrix only, display information about each connected port on the
Ethernet switch on the TX Matrix platform and its attached T640 routing nodes.
errors—(Optional) Display the numbers and types of errors accumulated on all

ports of the Ethernet switch.
errors port—(Optional) Display the numbers and types of errors accumulated on the
specified port (0 through 15) of the Ethernet switch.
statistics—(Optional) Display traffic statistics for each connected port on the

Ethernet switch.
statistics port—(Optional) Display traffic statistics for the specified port on the
Ethernet switch.
lcc number—(Routing matrix only) (Optional) Display information about the ports
on the CB’s Ethernet switch on a specified T640 routing node
scc—(Routing matrix only) (Optional) Display information about the ports on the
CB’s Ethernet switch on the TX Matrix platform (or switch-card chassis).
List of Sample Output show chassis ethernet-switch on page 161

show chassis ethernet-switch (Routing Matrix) on page 161
show chassis ethernet-switch errors on page 162
show chassis ethernet-switch statistics on page 163
show chassis ethernet-switch ! 159

Output Fields Table 46 lists the output fields for the show chassis ethernet-switch command.
Table 46: show chassis ethernet-switch Output Fields

Link is good on port n Information about the link between each port on the CB’s Ethernet
connected to device switch and one of the following devices:
or ! FPC0 (Flexible PIC Concentrator 0) through FPC7
Link is good on FE port n ! Local controller
connected to device
! Other RE (on a system with two Routing Engines)
! SPMB (Switch Processor Mezzanine Board)
! (TX Matrix platform only) LCC0 (line-card chassis 0) through LCC3
Speed is Speed at which the Ethernet link is running: 10 Mb or 100 Mb.

When the device is Other RE on the TX Matrix platform, the speed is
1000 Mb.
Duplex is Duplex type of the Ethernet link: full or half.
Auto-negotiate is enabled By default, both of the built-in Fast Ethernet ports on the M7i router
Physical Interface Card (PIC) autonegotiate whether to operate at 10
Mbps or 100 Mbps. All other interfaces automatically choose the
correct speed based on the PIC type and whether the PIC is
configured to operate in multiplexed mode (using the no-concatenate
statement at the [edit chassis] hierarchy level, as described in the
JUNOS System Basics Configuration Guide).
MLT3 Number of multilevel threshold-3 (MLT-3) Fast Ethernet errors
detected.
Accumulated error counts for port n connected to device FPCn: (error output only)
Lock Number of lock errors detected.
Xmit Number of transmission errors detected.
ESD Number of electrostatic discharge (ESD) errors detected.
False Carrier Number of false carrier errors detected.
Disconnects Number of disconnect errors detected.
FX mode Number of errors detected on an Ethernet link over optical fiber.
Statistics for port n connected to device FPCn (statistics output only)
TX Unicast packets Number of unicast packets sent.
TX Multicast packets Number of multicast packets sent.
TX Broadcast packets Number of broadcast packets sent.
TX Late collisions Number of packets aborted during sending because of collisions
after 64 bytes.
TX Excessive collisions Number of packets not sent because of too many collisions.
TX Dropped packets Number of transmitted packets that were dropped.
RX Unicast packets Number of unicast packets received.
RX Multicast packets Number of multicast packets received.
RX Broadcast packets Number of broadcast packets received.
RX FCS Errors Number of packets discarded because of frame check sequence
errors.
RX Alignment Errors Number of incomplete octets received.
160 ! show chassis ethernet-switch

Table 46: show chassis ethernet-switch Output Fields

RX Dropped Packets Number of incoming packets that were dropped.
RX Fragments Number of fragmented packets received.
RX Symbol Errors Number of symbols received that the router did not correctly
decode.
show chassis user@host> show chassis ethernet-switch

ethernet-switch
Link is good on port 0 connected to device: FPC0
Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full
Link is good on port 7 connected to device: Local controller

Speed is 100Mb
Duplex is full
Link is good on port 9 connected to device: SPMB

Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full
show chassis user@host> show chassis ethernet-switch

ethernet-switch scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
Link is good on FE port 4 connected to device: LCC0
Speed is 100Mb
Duplex is full
Autonegotiate is Enabled
Link is good on FE port 6 connected to device: LCC2

Speed is 100Mb
Duplex is full
Link is good on FE port 8 connected to device: SPMB

Speed is 100Mb
Duplex is full
lcc0-re0:
--------------------------------------------------------------------------
Link is good on FE port 1 connected to device: FPC1
Speed is 100Mb
Duplex is full


Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full
Link is good on FE port 10 connected to device: SCC

Speed is 100Mb
Duplex is full
lcc2-re0:
--------------------------------------------------------------------------
Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full

Speed is 100Mb
Duplex is full
Link is good on FE port 10 connected to device: SCC

Speed is 100Mb
Duplex is full
show chassis user@host> show chassis ethernet-switch errors

ethernet-switch errors Accumulated error counts for port 0 connected to device FPC0:
MLT3 2
Lock 0
Xmit 0
ESD 0
False carrier 2
Disconnects 0
FX mode 0
Accumulated error counts for port 1 connected to device FPC1:
MLT3 2
Lock 0
Xmit 0
ESD 0
False carrier 2
Disconnects 0
FX mode 0


MLT3 2
Lock 0
Xmit 0
ESD 0
False carrier 3
Disconnects 0
FX mode 0
MLT3 0
Lock 0
Xmit 0
ESD 0
False carrier 0
Disconnects 0
Accumulated error counts for port 4 connected to device Nothing:
MLT3 0
Lock 0
Xmit 0
ESD 0
False carrier 0
Disconnects 0
FX mode 0
...
show chassis user@host> show chassis ethernet-switch statistics

ethernet-switch Statistics for port 0 connected to device FPC0:
statistics TX Unicast packets 68113
TX Multicast packets 0
TX Broadcast packets 20851
TX Late collisions 0
TX Excessive collisions 0
TX Dropped packets 0
RX Unicast packets 67410

RX Multicast packets 0
RX Broadcast packets 20852
RX FCS Errors 0
RX Alignment Errors 0
RX Dropped Packets 0
RX Fragments 0
RX Symbol Errors 0
Statistics for port 1 connected to device FPC1:

TX Unicast packets 66496

RX FCS Errors 0
RX Fragments 0
RX Symbol Errors 0


TX Unicast packets 64206

RX FCS Errors 0
RX Fragments 0
RX Symbol Errors 0

...

show chassis fabric fpcs
Syntax show chassis fabric fpcs

<lcc number>
Description (M320 routers and T-series routing platform only) Display the state of the electrical
and optical switch fabric links between the Flexible PIC Concentrators (FPCs) and
the Switch Interface Boards (SIBs).
Options none—Display the switch fabric link state. On a TX Matrix platform, display the
switching fabric link states for the FPCs in all T640 routing nodes connected to
a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display the switch fabric link state for
the FPCs in the specified T640 routing node (or line-card chassis) that is
0 through 3.
List of Sample Output show chassis fabric fpcs (M320 Router) on page 165
show chassis fabric fpcs (T320 Router) on page 165
show chassis fabric fpcs (T640 Router) on page 166
show chassis fabric fpcs (Routing Matrix) on page 167
Output Fields Table 47 lists the output fields for the show chassis fabric fpcs command. Output
Table 47: show chassis fabric fpcs Output Fields

Fabric management FPC state Switching fabric link state for each FPC: Unused, Links ok,
Link error, or Plane enabled.
show chassis fabric user@host> show chassis fabric fpcs

fpcs (M320 Router) Fabric management FPC state:
FPC #2
PFE #1
SIB #0 Plane enabled

fpcs (T320 Router) Fabric management FPC state:
FPC #0
PFE #1
SIB #0 Links ok
FPC #1
PFE #1
SIB #0 Links ok
show chassis fabric fpcs ! 165


FPC #2
PFE #1
SIB #0 Links ok
FPC #3
PFE #1
SIB #0 Links ok
...
FPC #7
PFE #1
SIB #0 Links ok

fpcs (T640 Router) Fabric management FPC state:
FPC #0
PFE #0
SIB #0 Links ok
PFE #1
SIB #0 Links ok
FPC #2
PFE #0
SIB #0 Links ok
PFE #1
SIB #0 Links ok
...
166 ! show chassis fabric fpcs


fpcs (Routing Matrix) lcc0-re0:
--------------------------------------------------------------------------
Fabric management FPC state:
FPC #1
PFE #1
SIB #4 Links ok
FPC #2
PFE #0
SIB #4 Links ok
PFE #1
SIB #4 Links ok
FPC #3
PFE #0
SIB #4 Links ok
PFE #1
SIB #4 Links ok
FPC #4
PFE #0
SIB #4 Links ok
PFE #1
SIB #4 Links ok
FPC #5
PFE #1
SIB #4 Links ok
FPC #6
PFE #1
SIB #4 Links ok
lcc2-re0:
--------------------------------------------------------------------------
Fabric management FPC state:
FPC #0
PFE #1
SIB #4 Links ok
FPC #1
PFE #1
SIB #4 Links ok
FPC #2
PFE #0
SIB #4 Links ok
PFE #1
SIB #4 Links ok
FPC #4
PFE #0
SIB #4 Links ok
PFE #1
SIB #4 Links ok
FPC #5
PFE #1
SIB #4 Links ok
show chassis fabric fpcs ! 167

show chassis fabric sibs
Syntax show chassis fabric sibs

<lcc number | scc>
Description (T-series routing platform only) Display the state of the electrical and optical switch
fabric links:
! Between the Switch Interface Boards (SIBs) in the TX Matrix platform (TX SIBs)
and the SIBs in the T640 routing nodes (T640 SIBs).
! Between the T640 SIBs and the Flexible PIC Concentrators (FPCs) in a T640
routing node.
Options none—Display the switching fabric link state for the TX SIBs in the TX Matrix
platform and for the T640 SIBs in all the T640 routing nodes connected to a
TX Matrix platform.
lcc number—(Optional) Display the switching fabric link state for the T640 SIBs in a
specified T640 routing node (or line-card chassis) connected to a TX Matrix
scc—(Optional) Display the switching fabric link state for the TX SIBs on the
List of Sample Output show chassis fabric sibs on page 168

show chassis fabric sibs lcc on page 170
show chassis fabric sibs scc on page 170
Output Fields Table 48 lists the output fields for the show chassis fabric sibs command. Output
Table 48: show chassis fabric sibs Output Fields

Fabric management SIB state Switching fabric link state for each SIB: Unused, Links ok or Link
error.
plane state State of the TX SIB or T640 SIB: S_ACTIVE or S_SPARE.
show chassis fabric user@host> show chassis fabric sibs

sibs scc-re0:
--------------------------------------------------------------------------
Fabric management SIB state:
SIB #0
plane state: S_ACTIVE
LCC #0 : Unused
LCC #2 : Unused
SIB #1
LCC #0 : Unused
LCC #2 : Unused
168 ! show chassis fabric sibs

SIB #2
plane state: S_SPARE
LCC #0 : Links ok
LCC #2 : Links ok
SIB #3
LCC #0 : Unused
LCC #2 : Unused
SIB #4
LCC #0 : Links ok
LCC #2 : Links ok
lcc0-re0:
--------------------------------------------------------------------------
SIB #2
FPC #0
PFE #1 : Links ok
FPC #6
PFE #1 : Links ok
SCC : Links ok
SIB #4
FPC #0
PFE #1 : Links ok
FPC #6
PFE #1 : Links ok
SCC : Links ok
lcc2-re0:
--------------------------------------------------------------------------
SIB #2
FPC #0
PFE #1 : Links ok
FPC #1
PFE #1 : Links ok
FPC #2
PFE #0 : Links ok
PFE #1 : Links ok
FPC #3
PFE #1 : Links ok
SCC : Links ok
SIB #4
FPC #0
PFE #1 : Links ok
FPC #1
PFE #1 : Links ok
FPC #2
PFE #0 : Links ok
PFE #1 : Links ok
FPC #3
PFE #1 : Links ok
SCC : Links ok
show chassis fabric sibs ! 169

show chassis fabric user@host> show chassis fabric sibs lcc 0

sibs lcc lcc0-re0:
--------------------------------------------------------------------------
SIB #2
FPC #0
PFE #1 : Links ok
FPC #6
PFE #1 : Links ok
SCC : Links ok
SIB #4
FPC #0
PFE #1 : Links ok
FPC #6
PFE #1 : Links ok
SCC : Links ok
show chassis fabric user@host> show chassis fabric sibs scc

sibs scc scc-re0:
--------------------------------------------------------------------------
SIB #0
LCC #0 : Unused
LCC #2 : Unused
SIB #1
LCC #0 : Unused
LCC #2 : Unused
SIB #2
LCC #0 : Links ok
LCC #2 : Links ok
SIB #3
LCC #0 : Unused
LCC #2 : Unused
SIB #4
LCC #0 : Links ok
LCC #2 : Links ok
170 ! show chassis fabric sibs

show chassis fabric topology
Syntax show chassis fabric topology

<lcc number | scc>
<sib-slot-number>
Description (T-series routing platform only) Display the state of the switching fabric topology for
the Switch Interface Board (SIB) connection between the TX Matrix platform and
the T640 routing nodes.
Options none—Display the fabric topology state for the TX Matrix platform and for all the
T640 routing nodes connected to it.
lcc number—(Optional) Display the fabric topology state for a specified T640
scc—(Optional) Display the fabric topology state for the TX Matrix platform
sib-slot-number—(Optional) Display the fabric topology state for a specified SIB slot.
Replace sib-slot-number with a value from 0 through 4.
List of Sample Output show chassis fabric topology scc on page 171
show chassis fabric topology lcc on page 173
Output Fields Table 49 lists the output fields for the show chassis fabric topology command.
Table 49: show chassis fabric topology Output Fields

in-links Fabric topology for receive side links.
out-links Fabric topology for transmit side links.
state State of the link: RESET, UP, DOWN, or FAULT.
show chassis fabric user@host> show chassis fabric topology scc

topology scc scc-re1:
--------------------------------------------------------------------------------
fchip (mode)
in-links state out-links state
--------------------------------------------------------------------------------
Sib #0 :
---------
SIB0_F0 (F2 ):
LCC0_SIB-L0_F0,03->SIB-S0_F0,00 UP SIB-S0_F0,00->LCC0_SIB-L0_F1,00 UP
LCC2_SIB-L0_F0,03->SIB-S0_F0,02 RESET SIB-S0_F0,02->LCC2_SIB-L0_F1,08 UP
show chassis fabric topology ! 171

SIB0_F1 (F2 ):
SIB0_F2 (F2 ):
SIB0_F3 (F2 ):
Sib #1 :
---------
SIB1_F0 (F2 ):
172 ! show chassis fabric topology


SIB1_F1 (F2 ):
LCC3_SIB-L1_F0,15->SIB-S1_F1,11 RESET -S1_F1,11->LCC3_SIB-L1_F1,12 UP
show chassis fabric user@host> show chassis fabric topology lcc 0

topology lcc lcc0-re0:
--------------------------------------------------------------------------
fchip (mode)
in-links state out-links state
-------------------------------------------------------------------
Sib #2 :
---------
SIB2_F0 (F1 ):
FPC0_T->SIB-L2_F0,00 DOWN SIB-L2_F0,00->SIB-S2_F3,15 DOWN
FPC0_B->SIB-L2_F0,01 UP SIB-L2_F0,01->SIB-S2_F3,11 DOWN
FPC1_B->SIB-L2_F0,03 DOWN SIB-L2_F0,03->SIB-S2_F0,00 DOWN
FPC6_B->SIB-L2_F0,13 UP SIB-L2_F0,13->SIB-S2_F2,03 DOWN
SIB2_F1 (F3 ):
SIB-S2_F0,00->SIB-L2_F1,00 UP SIB-L2_F1,00->FPC7_B DOWN
SIB-S2_F0,04->SIB-L2_F1,01 UP SIB-L2_F1,01->FPC7_T DOWN
show chassis fabric topology ! 173


Sib #4 :
---------
SIB4_F0 (F1 ):
FPC0_T->SIB-L4_F0,00 RESET SIB-L4_F0,00->SIB-S4_F3,15 UP
FPC0_B->SIB-L4_F0,01 UP SIB-L4_F0,01->SIB-S4_F3,11 UP
FPC1_B->SIB-L4_F0,03 RESET SIB-L4_F0,03->SIB-S4_F0,00 UP
FPC6_B->SIB-L4_F0,13 UP SIB-L4_F0,13->SIB-S4_F2,03 UP
SIB4_F1 (F3 ):
SIB-S4_F0,00->SIB-L4_F1,00 UP SIB-L4_F1,00->FPC7_B UP
SIB-S4_F0,04->SIB-L4_F1,01 UP SIB-L4_F1,01->FPC7_T UP
174 ! show chassis fabric topology

show chassis feb
Syntax show chassis feb
Description (M5 and M10 routers only) Display Forwarding Engine Board (FEB) status
information.
List of Sample Output show chassis feb on page 175
Output Fields Table 50 lists the output fields for the show chassis feb command. Output fields are
Table 50: show chassis feb Output Fields

Temperature Temperature of the air flowing past the FEB.
CPU utilization Percentage of CPU being used by the FEB processor.
Interrupt utilization Of the total CPU being used by the FEB processor, the percentage being
used for interrupts.
Heap utilization Percentage of heap space (dynamic memory) being used by the FEB
processor. If this number exceeds 80 percent, there may be a software
problem (memory leak).
Buffer utilization Percentage of buffer space being used by the FEB processor for buffering
internal messages.
DRAM Amount of DRAM available to the FEB CPU.
Internet Processor II Information about the FEB processor.
Start time Time when the Routing Engine detected that the FEB was running.
Uptime How long the Routing Engine has been connected to the FEB and,
therefore, how long the Flexible PIC Concentrator (FPC) has been up and
running.
show chassis feb user@host> show chassis feb

FEB status:
Temperature 37 Centigrade
DRAM 64 Mbytes
Start time 1999-01-24 16:24:42 UTC
Uptime 2 hours, 21 minutes, 28 seconds
show chassis feb ! 175

show chassis firmware
Syntax show chassis firmware
Syntax show chassis firmware

Description Display the version levels of the firmware running on the System Control Board
(SCB), Switching and Forwarding Module (SFM), System and Switch Board (SSB),
Forwarding Engine Board (FEB), and Flexible PIC Concentrators (FPCs).
Options none—(Routing matrix only) Display version levels for the firmware on the
TX Matrix platform and on all the T640 routing nodes connected to it.
lcc number—(Routing matrix only) (Optional) Display version levels for the
firmware on a specified T640 routing node (or line-card chassis) that is
connected to a TX Matrix platform. Replace number with a value from 0
through 3.
scc—(Routing matrix only) (Optional) Display version levels for the firmware on the
List of Sample Output show chassis firmware (M10) on page 176

show chassis firmware (M20) on page 176
show chassis firmware lcc (Routing Matrix) on page 177
show chassis firmware scc (Routing Matrix) on page 177
Output Fields Table 51 lists the output fields for the show chassis firmware command. Output
Table 51: show chassis firmware Output Fields
Part Chassis part name.
Type Type of firmware: ROM or O/S.
Version Version of firmware running on the chassis part.
show chassis firmware user@host> show chassis firmware

(M10) Part Type Version
Forwarding engine board ROM Juniper ROM Monitor Version 4.1b2
O/S Version 4.1I1 by tlim on 2000-04-24 11:27

System switch board ROM Juniper ROM Monitor Version 3.4b26
O/S Version 3.4I16 by smackie on 2000-02-29 2
FPC 1 ROM Juniper ROM Monitor Version 3.0b1
176 ! show chassis firmware


System control board ROM Juniper ROM Monitor Version 2.0i126Copyri
O/S Version 2.0i1 by root on Thu Jul 23 00:51
FPC 5 ROM Juniper ROM Monitor Version 2.0i49Copyrig
O/S Version 2.0i1 by root on Thu Jul 23 00:59

SFM 0 ROM Juniper ROM Monitor Version 4.0b2
SFM 1 ROM Juniper ROM Monitor Version 4.0b2
show chassis firmware user@host> show chassis firmware lcc 0

lcc (Routing Matrix) lcc0-re0:
--------------------------------------------------------------------------
Part Type Version
O/S Version 7.0-20040804.0 by builder on 2004-0
SPMB 0 ROM Juniper ROM Monitor Version 6.4b18
show chassis firmware user@host> show chassis firmware scc

scc (Routing Matrix) scc-re0:
--------------------------------------------------------------------------
Part Type Version
SPMB 0 ROM Juniper ROM Monitor Version 6.4b18
show chassis firmware ! 177

show chassis forwarding
Syntax show chassis forwarding
Description (J-series routing platform only) Display status of the forwarding process (fwdd).
List of Sample Output show chassis forwarding on page 178
Output Fields Table 52 lists the output fields for the show chassis forwarding command. Output
Table 52: show chassis forwarding Output Fields

FWWD status Forwarding status:
! State—Online or Offline.
! Microkernel CPU utilization—Percentage of microkernel CPU being
used by the forwarding process.
! Real-time threads CPU utilization—Percentage of CPU being used
by the forwarding process.
! Heap utilization—Percentage of heap space (dynamic memory)
being used by the forwarding process. If this number exceeds 80
percent, there may be a software problem (memory leak).
! Buffer utilization—Percentage of buffer space being used by the
forwarding process for buffering internal messages.
! Uptime—How long the forwarding process has been up and
running.
show chassis user@host> show chassis forwarding

forwarding FWDD status:
State Online
Microkernel CPU utilization 10 percent
Real-time threads CPU utilization 4 percent
Uptime: 1 day, 1 hour, 30 minutes, 11 seconds
178 ! show chassis forwarding

show chassis fpc
Syntax show chassis fpc

<detail <fpc-slot>> | <pic-status <fpc-slot>
Syntax show chassis fpc

(Routing Matrix) <detail <fpc-slot>> | <pic-status <fpc-slot>
<lcc number>
Description Display status information about the installed Flexible PIC Concentrators (FPCs)
and Physical Interface Cards (PICs).
Options none—Display status information for all FPCs. For the routing matrix only, display
status information for all FPCs on the TX Matrix platform and its attached T640
routing nodes.
detail—(Optional) Display detailed status information for all FPCs or for the FPC in
the specified slot (see fpc-slot).
fpc-slot—(Optional) FPC slot number:
by using the lcc number option (the recommended method), replace fpc-slot
with a value from 0 through 7. Otherwise, replace fpc-slot with a value from
0 through 31. For example, the following commands have the same result:
user@host> show chassis fpc detail 1 lcc 1

user@host> show chassis fpc detail 9
! Other routing platforms—Replace fpc-slot with a value from 0 through 7.
pic-status—(Optional) Display status information for all PICs or for the PIC in the
specified slot (see fpc-slot).
lcc number—(Routing matrix only) (Optional) Display status information for a T640
See Also request chassis fpc on page 95
List of Sample Output show chassis fpc (M10) on page 181

show chassis fpc (M20) on page 181
show chassis fpc detail on page 181
show chassis fpc pic-status on page 181
show chassis fpc pic-status (M-series) on page 181
show chassis fpc lcc (Routing Matrix) on page 182
show chassis fpc pic-status (Routing Matrix) on page 182
show chassis fpc pic-status lcc (Routing Matrix) on page 182
show chassis fpc ! 179

Output Fields Table 53 lists the output fields for the show chassis fpc command. Output fields are
Table 53: show chassis fpc Output Fields

Slot or Slot State Slot number and state. The state can be one of the following conditions: all levels
! Dead—Held in reset because of errors.
! Diag—Slot is being ignored while the FPC is running diagnostics.
! Dormant—Held in reset.
! Empty—No FPC is present.
! Online—FPC is online and running.
! Present—FPC is detected by the chassis daemon but not supported by
the current version of JUNOS or FPC is coming up but not yet online.
! Probed—Probe is complete; awaiting restart of the Packet Forwarding
Engine (PFE).
! Probe-wait—Waiting to be probed.
Logical slot Slot number. all levels

Temp (C) or Temperature Temperature of the air passing by the FPC, in degrees Celsius or in both all levels
Celsius and Fahrenheit.
Total CPU Utilization (%) Total percentage of CPU being used by the FPC’s processor. all levels
Interrupt CPU Utilization (%) Of the total CPU being used by the FPC’s processor, the percentage none specified
being used for interrupts.
Memory DRAM (MB) Total DRAM, in megabytes, available to the FPC’s processor. none specified
Heap Utilization (%) Percentage of heap space (dynamic memory) being used by the FPC’s none specified
processor. If this number exceeds 80 percent, there may be a software
problem (memory leak).
Buffer Utilization (%) Percentage of buffer space being used by the FPC’s processor for none specified
buffering internal messages.
Total CPU DRAM Amount of DRAM available to the FPC’s CPU. detail
Total SRAM Amount of static RAM (SRAM) used by the FPC’s CPU. detail
Total SDRAM Total amount of memory used for storing packets and notifications. detail
I/O Manager ASICs information I/O Manager version number, manufacturer, and part number. detail
Start time Time when the Routing Engine detected that the FPC was running. detail
Uptime How long the Routing Engine has been connected to the FPC and, detail
therefore, how long the FPC has been up and running.
PIC type (pic-status output only) Type of PIC. none specified
180 ! show chassis fpc

show chassis fpc (M10) user@host> show chassis fpc

FPC status:
Temp
Slot State (C)
0 Online 27
1 Online 28
show chassis fpc (M20) user@host> show chassis fpc

FPC status:
Temp CPU Utilization (%) Memory Utilization (%)
Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
0 Empty 0 0 0 0 0 0
1 Online 38 0 0 8 0 4
2 Online 35 0 0 8 0 3
3 Empty 0 0 0 0 0 0
show chassis fpc detail user@host> show chassis fpc detail 1

Slot 1 information:
State Online
Temperature 48 degrees C
Total CPU DRAM 32 Mbytes
Total SRAM 4 Mbytes
Total SDRAM 256 Mbytes
I/O Manager ASICs information Version 2.0, Foundry IBM, Part number 0
I/O Manager ASICs information Version 2.0, Foundry IBM, Part number 0
Start time 2000-02-08 02:18:49 UTC
show chassis fpc user@host> show chassis fpc pic-status

pic-status Slot 0 Online
PIC 1 1x OC-12 ATM, MM
Slot 1 Online
PIC 0 1x OC-48 SONET, SMIR
Slot 2 Online
PIC 0 1x OC-192 SONET, SMSR

pic-status (M-series) Slot 1 Online FPC Type 1
PIC 0 Present 2x OC-3 ATM, MM- Hardware Error
PIC 1 Online 4x OC-3 SONET, SMIR
Slot 2 Online E-FPC Type 2
PIC 0 Online 4x G/E, 1000 BASE-SX
PIC 1 Online 2x G/E SFP, 1000 BASE
PIC 3 Online 1x Tunnel
PIC 0 Online 1x G/E IQ, 1000 BASE
Slot 5 Online FPC Type 2
...
show chassis fpc ! 181

show chassis fpc lcc user@host> show chassis fpc lcc 0

(Routing Matrix) lcc0-re0:
--------------------------------------------------------------------------
0 Empty
1 Online 27 2 0 256 8 44
2 Online 27 3 0 256 15 44
3 Empty
4 Empty
5 Empty
6 Empty
7 Empty

pic-status lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
PIC 0 Online 1x OC-192 SM SR1
PIC 3 Online 1x Tunnel
PIC 0 Online 1x OC-48 SONET, SMSR
lcc1-re0:
--------------------------------------------------------------------------
lcc2-re0:
--------------------------------------------------------------------------
PIC 1 Online 2x G/E, 1000 BASE-LX
PIC 2 Online 2x G/E, 1000 BASE-LX
lcc3-re0:
--------------------------------------------------------------------------
show chassis fpc user@host> show chassis fpc pic-status lcc 0

pic-status lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
PIC 0 Online 2x OC-12 ATM2 IQ, MM
PIC 3 Online 4x G/E, 1000 BASE-SX
182 ! show chassis fpc

show chassis hardware
Syntax show chassis hardware

<detail | extensive | frus>
Syntax show chassis hardware

(Routing Matrix) <detail | extensive | frus>
<lcc number | scc>
Description Display a list of all Flexible Physical Interface Card (PIC) Concentrators (FPCs) and
PICs installed in the router chassis, including the hardware version level and serial
number.
Options none—Display information about hardware. For the routing matrix only, display
information about the TX Matrix platform and its attached T640 routing nodes.
detail | extensive | frus—(Optional) Display the specified level of output. Use the frus
option to display information about field-replaceable units (FRUs).
lcc number—(Routing matrix only) (Optional) Display hardware information for a

specified T640 routing node (or line-card chassis) that is connected to a
TX Matrix platform. Replace number with a value from O through 3.
scc—(Routing matrix only) (Optional) Display hardware information for the

List of Sample Output show chassis hardware (J-series) on page 185

show chassis hardware (M7i) on page 185
show chassis hardware (M10) on page 186
show chassis hardware frus (M10) on page 186
show chassis hardware (M40e) on page 190
show chassis hardware detail (M160) on page 193
show chassis hardware (T320) on page 194
show chassis hardware (T640) on page 195
show chassis hardware frus (T640) on page 196
show chassis hardware extensive (T640) on page 196
show chassis hardware lcc (Routing Matrix) on page 197
show chassis hardware scc (Routing Matrix) on page 198
show chassis hardware ! 183

Output Fields Table 54 lists the output fields for the show chassis hardware command. Output
Table 54: show chassis hardware Output Fields

Item Chassis component: All levels
! (M-series routing platform, except for
the M320 router)—Information about
the backplane; power supplies; Routing
Engine; maxicab (the connection
between the Routing Engine and the
backplane, for the M40 router only);
SCB, SSB, SFM, or FEB; MCS and PCG
(for the M160 router only); each FPC
and PIC; and each fan, blower, and
impeller.
! (M320 router and T-series routing
platform)—Information about the
backplane, power supplies, midplane,
FPM (craft interface), CIP, PEM, SCG, CB,
FPC, PIC, SFP, SPMB, and SIB.
Version Revision level of the chassis component. All levels
Part number Part number of the chassis component. All levels
Serial number Serial number of the chassis component. All levels
The serial number of the backplane is also
the serial number of the router chassis.
Use this serial number when you need to
contact Juniper Networks Customer
Support about the router chassis.
Assb ID or Assembly ID (frus output only) Identification number All levels
that describes the FRU hardware.
Conn Type (frus output only) Type of connector from a All levels
PIC.
Fiber Type (frus output only) Optical fiber type. It can All levels
be 0x01 (single mode), 0x02 (multimode),
or 0xff (not applicable).
Driver Strength (frus output only) Optical strength All levels
provided by the PIC. Driver strength
determines the range that the laser can
drive:
! 0x01—Long range
! 0x02—Medium range
! 0x03—Short range
! 0x04—Very short range
! 0xff—Not applicable
184 ! show chassis hardware

Table 54: show chassis hardware Output Fields

Description Brief description of the hardware item: All levels
! Type of power supply.
! Type of PIC.
! Type of FPC: FPC Type 1, FPC Type 2, FPC
Type 3, FPC Type 4, or FPC Type OC192.
! For hosts, the Routing Engine type.
For small form-factor pluggable transceiver
(SFP) modules, the type of fiber: LX, SX, or
LH.
show chassis hardware user@host> show chassis hardware

(J-series) Hardware inventory:
Item Version Part number Serial number Description
Chassis JN000164AB J6300
Midplane REV 02.04 710-010001 CORE99570
System IO REV 02.00 710-010003 CORE100848 System IO board
Routing Engine RevX2.6 750-010006 IWGS40735390 RE-J.3
FPC 0 FPC
PIC 0 2x FE
FPC 1 RevX2.0 750-011380 N3960005 FPC
PIC 0 1xADSL pic Annex A
FPC 2 RevX2.0 750-011380 N3960002 FPC
PIC 0 1xADSL pic Annex B
FPC 3 REV 03 750-010354 N0780028 FPC
PIC 0 1x T3

(M7i) Hardware inventory:
Chassis 31959 M7i
Midplane REV 02 710-008761 CA0209 M7i Midplane
Power Supply 0 Rev 04 740-008537 PD10272 AC Power Supply
Routing Engine REV 01 740-008846 1000396803 RE-5.0
CFEB REV 02 750-009492 CA0166 Internet Processor IIv1
FPC 0 E-FPC
PIC 0 REV 04 750-003163 HJ6416 1x G/E, 1000 BASE-SX
FPC 1 E-FPC
PIC 2 REV 01 750-009487 HM2275 ASP - Integrated
PIC 3 REV 01 750-009098 CA0142 2x F/E, 100 BASE-TX


(M10) Hardware inventory:
Chassis 1122 M10
Midplane REV 1.1 710-001950 S/N AC6626
Power supply A Rev 01 740-002497 S/N LC36095 AC
Power supply B Rev 01 740-002497 S/N LC36100 AC
Display REV 1.2 710-001995 S/N AC6656
Host 18000005dfb3fb01 teknor
FEB REV 01 710-001948 S/N AC6632 Internet Processor II
FPC 0
PIC 0 REV 08 750-001072 S/N AB2485 1x G/E, 1000 BASE-SX
PIC 1 REV 01 750-000613 S/N AA1048 1x OC-12 SONET, SMIR
FPC 1
show chassis hardware user@host> show chassis hardware frus

frus (M10) Hardware inventory:
Assb Conn Fiber Driver
Item Part number ID Type Type Strength Description
Chassis 0x0505 -- -- -- M10
Midplane 710-001950 0x0119 -- -- --
Power Supply A 740-002498 0x0407 -- -- -- DC
Display 710-001995 0x0125 -- -- --
Routing Engine 0
FEB 0 710-001948 0x0118 -- -- -- Internet Processor II
FPC 0 0x0000 -- -- --
PIC 0 750-000603 0x0201 0x02 0x01 0x02 4x OC-3 SONET, SMIR
PIC 3 750-002977 0x0209 0x02 0x02 0x03 2x OC-3 ATM, MM
FPC 1 0x0000 -- -- --
PIC 0 750-003628 0x022c 0x02 0x01 0x04 1x G/E, 1000 BASE-LH
PIC 1 750-001072 0x0205 0x02 0x02 0x03 1x G/E, 1000 BASE-SX
Left Fan 1
Left Fan 2
Left Fan 3
Left Fan 4


Chassis 20033 M20
Backplane REV 07 710-001517 S/N AA7940
Power supply B Rev 01 740-001465 S/N 000001 AC
Display REV 02 710-001519 S/N AA9704
Host 0 98000004f8f27501 teknor
SSB slot 0 REV 01 710-001951 S/N AD5905 Internet Processor II
SSRAM bank 0 REV 01 710-001385 S00480 2 Mbytes
SSRAM bank 2 REV 01 710-001385 S001:? 2 Mbytes
SSB slot 1 N/A N/A N/A Backup
FPC 1 REV 01 710-001292 S/N AB7528
SSRAM REV 01 710-000077 S/N 304209 1 Mbyte
SDRAM bank 0 REV 01 710-000099 S/N 000603 64 Mbytes
PIC 0 REV 03 750-000612 S/N AB8433 2x OC-3 ATM, MM
PIC 1 REV 01 750-000616 S/N AA1168 1x OC-12 ATM, MM
PIC 3 REV 01 750-002501 S/N AD5810 4x E3
FPC 2 REV 01 710-001292 S/N AC0119

Chassis 0x0503 -- -- -- M20
Midplane 710-001517 0x0113 -- -- --
Display 710-001519 0x0114 -- -- --
Routing Engine 0
Routing Engine 1
SSB 0 710-007683 0x0163 -- -- -- Internet Processor II
SSB 1 710-001951 0x0123 -- -- -- Internet Processor II
FPC 0 710-001292 0x0104 -- -- --
FPC 1 710-001292 0x0104 -- -- --
FPC 2 710-011724 0x013d -- -- -- EP-FPC
PIC 0 750-002785 0x022c 0x02 0x02 0x03 1x G/E, 1000 BASE-SX
FPC 3 710-011724 0x013d -- -- -- EP-FPC
Rear Fan
Front Upper Fan
Front Middle Fan
Front Bottom Fan


Backplane REV 02 710-000073 S/N AA0053
Power supply A Rev 2 740-000235 S/N 000042 DC
Maxicab REV X1 710-000229 S/N AAO139
Minicab REV X1 710-000482 S/N AA0201
Display REV 06 710-000150 S/N AA0905
Host cpv5000
SCB REV X1 710-000075 S/N AA0158 Internet Processor I
SSRAM bank 0 REV 02 710-000077 S/N AA2267 1 Mbyte
FPC 0 REV 01 710-000175 S/N AA0048
SSRAM REV 01 710-000077 S/N AA2333 1 Mbyte
SDRAM bank 0 REV 01 710-000099 S/N AA2332 64 Mbytes
SDRAM bank 1 REV X1 710-000099 S/N AA2337 64 Mbytes
PIC 0 REV 04 750-000613 S/N aa0343 1x OC-12 SONET, SMIR
PIC 3 REV 04 750-000613 S/N AA0378 1x Tunnel
FPC 2 REV 01 710-000175 S/N AA0042
PIC 0 REV X1 750-000603 S/N AA0143 4x OC-3 SONET, SMIR
PIC 1 REV X1 750-000615 S/N AA0149 4x OC-3 SONET, MM
PIC 2 REV X1 750-000611 S/N AA0148 4x OC-3 SONET, MM
FPC 4 REV 01 710-000175 S/N AA0050
PIC 3 REV 08 750-001072 S/N AB2462 1x G/E, 1000 BASE-SX
FPC 5 REV 10 710-000175 S/N AA7663
PIC 1 REV 01 750-001323 S/N AB1670 1x Tunnel


Chassis 0x0502 -- -- -- M40
Midplane 710-000073 0x0101 -- -- --
Power Supply B 740-000235 0x0402 -- -- -- DC
Display 710-000150 0x0103 -- -- --
Routing Engine 0
SCB 0 710-001838 0x0122 -- -- -- Internet Processor II
FPC 0 710-001292 0x0104 -- -- --
PIC 1 750-002303 0x0214 0x01 0x00 0xff 4x F/E, 100 BASE-TX
FPC 1 710-001197 0x0104 -- -- --
FPC 2 710-003308 0x013d -- -- -- E-FPC
PIC 3 750-002953 0x0221 0x01 0xff 0xff 4x T1, RJ48
FPC 3 710-001292 0x0104 -- -- --
FPC 4 710-001292 0x0104 -- -- --
FPC 5 710-003308 0x013d -- -- -- E-FPC
FPC 6 710-003308 0x013d -- -- -- E-FPC
PIC 2 750-001323 0x020e 0xff 0xff 0xff 1x Tunnel
FPC 7 710-001292 0x0104 -- -- --
Top Impeller
Bottom impeller
Rear Left Fan
Rear Center Fan
Rear Right Fan


(M40e) Hardware inventory:
Chassis m40e
Midplane REV 01 710-005071 AX3671
FPM CMB REV 03 710-001642 AR9074
FPM Display REV 03 710-001647 AR7331
CIP REV 04 710-002649 BB4449
PEM 0 Rev 01 740-003787 MC12364 Power Entry Module
PEM 1 Rev 01 740-003787 MC12383 Power Entry Module
PCG 0 REV 07 710-001568 AG1332
PCG 1 REV 07 710-001568 AR3789
Host 0 3e000007c8176601 Present
MCS 0 REV 11 710-001226 AN5813
SFM 0 SPP REV 07 710-001228 AG4676
SFM 0 SPR REV 05 710-002189 AE4735 Internet Processor II
SFM 1 SPP REV 07 710-001228 AP1347
SFM 1 SPR REV 05 710-002189 BE0063 Internet Processor II
FPC 0 REV 01 710-011725 BE0669 M40e-EP-FPC Type 1
CPU REV 01 710-004600 BD9504
PIC 0 REV 03 750-003737 AY3991 4x G/E, 1000 BASE-SX
FPC 1 REV 01 710-005197 BD9842 M40e-FPC Type 2
CPU REV 01 710-004600 BB4869
PIC 0 REV 07 750-001900 AR8278 1x OC-48 SONET, SMSR
FPC 2 REV 02 710-005197 BD9824 M40e-FPC Type 2
CPU REV 01 710-004600 BD9531
PIC 0 REV 03 750-003737 AY3986 4x G/E, 1000 BASE-SX
FPC 4 REV 02 710-005078 BE0664 M40e-FPC Type 1
CPU REV 01 710-004600 BD9559
PIC 0 REV 03 750-001894 AG7963 1x G/E, 1000 BASE-SX
PIC 2 REV 01 750-002575 AF2472 4x OC-3 SONET, SMIR
FPC 6 REV 02 710-005078 BE0652 M40e-FPC Type 1
CPU REV 01 710-004600 BD9607
PIC 0 REV 02 750-002911 AN2286 4x F/E, 100 BASE-TX
PIC 2 REV 01 750-002577 AP6345 4x OC-3 SONET, MM


(M160) Item Version Part number Serial number Description
Chassis 101 M160
Midplane REV 02 710-001245 S/N AB4107
FPM CMB REV 01 710-001642 S/N AA2911
FPM Display REV 01 710-001647 S/N AA2999
CIP REV 02 710-001593 S/N AA9563
PEM 0 Rev 01 740-001243 S/N KJ35769 DC
PEM 1 Rev 01 740-001243 S/N KJ35765 DC
PCG 0 REV 01 710-001568 S/N AA9794
PCG 1 REV 01 710-001568 S/N AA9804
Host 1 da000004f8d57001 teknor
MCS 1 REV 03 710-001226 S/N AA9777
SFM 0 SPP REV 04 710-001228 S/N AA2975
SFM 0 SPR REV 02 710-001224 S/N AA9838 Internet Processor I
SFM 1 SPP REV 04 710-001228 S/N AA2860
SFM 1 SPR REV 01 710-001224 S/N AB0139 Internet Processor I
FPC 0 REV 03 710-001255 S/N AA9806 FPC Type 1
CPU REV 02 710-001217 S/N AA9590
CPU REV 02 710-001217 S/N AA9571
PIC 0 REV 03 750-001900 S/N AA9626 1x STM-16 SDH, SMIR
PIC 1 REV 01 710-002381 S/N AD3633 2x G/E, 1000 BASE-SX
FPC 2 FPC Type OC192
CPU REV 03 710-001217 S/N AB3329
PIC 0 REV 01 1x OC-192 SM SR-2


Chassis 0x0504 -- -- -- M160
Midplane 710-001245 0x0108 -- -- --
FPM CMB 710-001642 0x0111 -- -- --
FPM Display 710-001647 0x0110 -- -- --
CIP 710-001593 0x0116 -- -- --
PEM 0 740-001243 0x0405 -- -- -- DC
PEM 1 740-001243 0x0405 -- -- -- DC
PCG 0 710-001568 0x010d -- -- --
PCG 1 710-001568 0x010d -- -- --
Routing Engine 0
Routing Engine 1
MCS 0 710-001226 0x0109 -- -- --
MCS 1 710-001226 0x0109 -- -- --
SFM 0 710-001228 0x010e -- -- --
SFM 1 710-001228 0x010e -- -- --
SFM 2 710-001228 0x010e -- -- --
SFM 3 710-001228 0x010e -- -- --
FPC 0 710-003950 0x013f -- -- -- E-FPC Type 2
PIC 2 750-001900 0x0211 0x02 0x01 0x03 1x OC-48 SONET, SMSR
FPC 1 710-003307 0x013e -- -- -- E-FPC Type 1
FPC 2 710-001255 0x010b -- -- -- FPC Type 1
PIC 3 750-001887 0x0205 0x02 0x01 0x01 1x G/E, 1000 BASE-LX
FPC 3 710-003950 0x013f -- -- -- E-FPC Type 2
PIC 3 750-001850 0x0212 0xff 0xff 0xff 1x Tunnel
FPC 4 710-003947 0x013e -- -- -- E-FPC Type 1
PIC 1 750-003629 0x022c 0x02 0x01 0x04 1x G/E, 1000 BASE-LH
PIC 2 750-005719 0x022b 0x02 0x02 0x03 1x OC-12 ATM2, MM
PIC 3 750-001555 0x0202 0x02 0x02 0x03 1x OC-12 SONET, MM
FPC 5 710-001255 0x010b -- -- -- FPC Type 1
PIC 1 750-002911 0x0214 0x01 0x00 0xff 4x F/E, 100 BASE-TX
PIC 2 750-003104 0x0235 0x00 0xff 0xff 4x T3 ATM
FPC 6 710-003950 0x013f -- -- -- E-FPC Type 2
PIC 0 750-001902 0x021d 0x02 0x02 0x03 4x OC-12 SONET, MM
PIC 2 750-003168 0x0238 0xff 0xff 0xff 48x FE, 100 BASE-TX
PIC 3 750-001901 0x021d 0x02 0x01 0x02 4x OC-12 SONET, SMIR
FPC 7 710-003958 0x0140 -- -- -- E-FPC Type OC192
PIC 0 750-004864 0x0231 0x02 0x01 0x03 1x OC-192 SM SR2-B
Rear Bottom Blower
Rear Top Blower
Front Top Blower
Fan Tray

show chassis hardware user@host> show chassis hardware detail

detail (M160) Hardware inventory:
Chassis 101 M160
Midplane REV 02 710-001245 S/N AB4107
FPM CMB REV 01 710-001642 S/N AA2911
FPM Display REV 01 710-001647 S/N AA2999
CIP REV 02 710-001593 S/N AA9563
PEM 0 Rev 01 740-001243 S/N KJ35769 DC
PEM 1 Rev 01 740-001243 S/N KJ35765 DC
PCG 0 REV 01 710-001568 S/N AA9794
PCG 1 REV 01 710-001568 S/N AA9804
Host 1 da000004f8d57001 teknor
MCS 1 REV 03 710-001226 S/N AA9777
SFM 0 SPP REV 04 710-001228 S/N AA2975
SFM 0 SPR REV 02 710-001224 S/N AA9838 Internet Processor I
SSRAM bank 0 REV 01 710-000077 S/N 306456 1 Mbyte
SFM 1 SPP REV 04 710-001228 S/N AA2860
SFM 1 SPR REV 01 710-001224 S/N AB0139 Internet Processor I
CPU REV 02 710-001217 S/N AA9590
SDRAM 0 REV 01 710-001196 S00141 32 Mbytes
SDRAM 1 REV 01 710-001196 S0010; 32 Mbytes
SDRAM 1 REV 01 710-001196 S001=3 32 Mbytes
SDRAM 0 REV 01 710-001196 S000?6 32 Mbytes
SDRAM 1 REV 01 710-001196 S001=5 32 Mbytes
CPU REV 02 710-001217 S/N AA9571
SDRAM 1 REV 01 710-001196 S0001? 32 Mbytes
SDRAM 1 REV 01 710-001196 S0002? 32 Mbytes
PIC 0 REV 03 750-001900 S/N AA9626 1x STM-16 SDH, SMIR
PIC 1 REV 01 710-002381 S/N AD3633 2x G/E, 1000 BASE-SX
FPC 2 FPC Type OC192
... SSRAM REV 01 710-000077 S/N 306466 1 Mbyte


Chassis 67245 M320
Midplane REV 05 710-009120 RB1202 M320 Midplane
FPM GBUS REV 04 710-005928 HZ5697 M320 Board
FPM Display REV 05 710-009351 HR1464 M320 FPM Display
CIP REV 04 710-005926 HT8672 M320 CIP
PEM 0 Rev 05 740-009148 QK34208 DC Power Entry Module
PEM 1 Rev 05 740-009148 QK34262 DC Power Entry Module
PEM 2 Rev 05 740-009148 QF10449 DC Power Entry Module
PEM 3 Rev 05 740-009148 QJ18257 DC Power Entry Module
Routing Engine 0 REV 06 740-008883 P11123901185 RE-4.0
CB 0 REV 07 710-009115 JB2382 M320 Control Board
FPC 0 REV 02 710-005017 CD9926 M320 FPC Type 2
CPU REV 01 710-011659 CJ6940 M320 PCA SCPU
PIC 0 REV 07 750-001900 AT1594 1x OC-48 SONET, SMSR
PIC 1 REV 03 750-001850 HS2746 1x Tunnel
PIC 2 REV 05 750-010618 JE7117 4x G/E SFP, 1000 BASE
PIC 3 REV 06 750-001900 HE6083 1x OC-48 SONET, SMSR
FPC 2 REV 02 710-005017 CH0319 M320 FPC Type 1
CPU REV 01 710-011659 CJ6942 M320 PCA SCPU
PIC 0 REV 05 750-003034 BD8705 4x OC-3 SONET, SMIR
CPU
CPU
SIB 0 REV 09 710-009184 JA6540 M320 SIB
SIB 1 REV 09 710-009184 HV9511 M320 SIB
SIB 2 REV 09 710-009184 HW2057 M320 SIB
SIB 3 REV 09 710-009184 JA6687 M320 SIB

(T320) Hardware inventory:
Chassis 19093 T320
Midplane REV 04 710-004339 BC1436 T320 Backplane
FPM GBUS REV 03 710-004461 BC1407 T320 FPM Board
FPM Display REV 04 710-002897 BE0763 FPM Display
CIP REV 05 710-002895 BB2311 T-series CIP
PEM 0 Rev 01 740-004359 NB12546 Power Entry Module
SCG 0 REV 06 710-004455 AY4522 T320 Sonet
Clock Gen.
Routing Engine 0 unknown
CB 0 REV 13 710-002728 BC1577 T-series
Control Board
CB 1 REV 13 710-002728 BC1595 T-series
Control Board
FPC 1 REV 09 710-007531 HS1572 FPC Type 2
CPU REV 15 710-001726 HR8763 FPC CPU
PIC 0 REV 01 750-010618 CB5579 4x G/E SFP,
1000 BASE
SFP 0 REV 01 740-007326 P5809Z1 SFP-SX
SFP 1 REV 01 740-007326 P4Q10XU SFP-SX
SFP 2 NON-JNPR RA45020031 SFP-SX
SFP 3 NON-JNPR RA45020032 SFP-SX
PIC 1 REV 01 750-010618 CD9587 4x G/E SFP,
1000 BASE
SFP 0 NON-JNPR P5A08QZ SFP-T
SFP 1 REV 01 740-007326 P4Q133K SFP-SX
SFP 2 REV 01 740-007326 P5809YY SFP-SX
SFP 3 REV 01 740-007327 4C81704 SFP-LX

MMB 1 REV 03 710-005555 HR9401 MMB-288mbit

PPB 0 REV 04 710-003758 HR2886 PPB Type 2
FPC 2 REV 07 710-005860 HP2392 FPC Type 1
CPU REV 14 710-001726 HP7797 FPC CPU
PIC 0 REV 02 750-007643 HM0853 1x G/E QPP,
1000 BASE
SFP 0 REV 01 740-007326 P11E9JJ SFP-SX
MMB 1 REV 02 710-005555 HN2379 MMB-288mbit
PPB 0 REV 04 710-003758 HP8092 PPB Type 2
FPC 3 REV 07 710-005860 HP2393 FPC Type 1
CPU REV 14 710-001726 HP0968 FPC CPU
PIC 0 REV 01 750-010240 CB5363 1x G/E SFP,
1000 BASE
SFP 0 REV 01 740-007326 P4R0PNH SFP-SX
PIC 1 REV 03 750-003034 HD2832 4x OC-3 SONET,
SMIR
MMB 1 REV 02 710-005555 HN6307 MMB-288mbit
PPB 0 REV 04 710-003758 HP5051 PPB Type 2
FPC 4 REV 01 710-010845 JD3872 FPC Type 4
CPU REV 02 710-011481 JB6042 FPC CPU
5 REV 01 710-005802 BC1566 FPC Type 2
CPU REV 09 710-001726 AY4922 FPC CPU
PIC 0 REV 02 750-008155 BE2114 2x G/E QPP,
1000 BASE
SFP 0 REV 01 740-007326 P4R0PMQ SFP-SX
SFP 1 REV 01 740-007326 P4R0PN9 SFP-SX
PIC 1 REV 01 750-008155 BE2116 2x G/E QPP,
1000 BASE
SFP 0 REV 01 740-007326 P4R0PNZ SFP-SX
SFP 1 NON-JNPR 2908 SFP-T
MMB 1 REV 01 710-005555 AZ2246 MMB-288mbit
PPB 0 REV 03 710-003758 AY4839 PPB Type 2
FPC 7 REV 01 710-005803 AZ2123 FPC Type 3
...

(T640) Hardware inventory:
Chassis 19182 T640
Midplane REV 04 710-002726 AX5608 T640 Backplane
FPM GBUS REV 02 710-002901 HE3064 T640 FPM Board
FPM Display REV 02 710-002897 HE7864 FPM Display
CIP REV 05 710-002895 HA5024 T-series CIP
PEM 1 RevX02 740-002595 MD21814 Power Entry Module
SCG 0 REV 03 710-003423 HA4508 T640 Sonet Clock Gen.
Routing Engine 0 REV 02 740-005022 210865700483 RE-3.0 (RE-600)
CB 0 REV 01 710-002728 HD3044 T-series Control Board
FPC 2 REV 04 710-001721 HD5572 FPC Type 3
CPU REV 06 710-001726 HA4712 FPC CPU
PIC 1 REV 03 750-009567 HV2331 1x 10GE(LAN),XENPAK
SFP 0 REV 01 740-009898 USC202R103 XENPAK-SR
PIC 2 REV 03 750-009567 HV2332 1x 10GE(LAN),XENPAK
SFP 0 REV 01 740-011268 USC202R112 XENPAK-ZR
PIC 3 REV 03 750-009567 HX4416 1x 10GE(LAN),XENPAK
SFP 0 REV 01 740-012056 434TC004 XENPAK-CX4
SFP 0 REV 01 740-012058 434TC124 XENPAK-LX4
FPC 5 REV 01 710-013553 JE4839 E2-FPC Type 1
CPU REV 01 710-013569 JW9163 FPC CPU
SFP 0 REV 01 740-009898 USC202RT05 XENPAK-LR
PIC 1 REV 03 750-009567 HN7426 1x 10GE(LAN),XENPAK
SFP 0 REV 01 740-009550 03L90051 XENPAK-ER

PIC 2 REV 03 750-009467 HT7423 1x 10GE(LAN),XENPAK

SFP 0 NON-JNPR UNKNOW0N
PIC 3 REV 04 750-005100 AY4850 1x 10GE(LAN),DWDM
FPC 4 REV 01 710-010845 JD3872 FPC Type 4
CPU REV 02 710-011481 JB6042 FPC CPU

frus (T640) Hardware inventory:
Chassis 0x0507 -- -- -- T640
Midplane 710-002726 0x0127 -- -- --
FPM GBUS 710-002901 0x0132 -- -- --
FPM Display 710-002897 0x0131 -- -- --
CIP 710-002895 0x0133 -- -- --
PEM 1 740-002595 0x0408 -- -- -- Power Entry Module
SCG 1 710-003423 0x0130 -- -- --
Routing Engine 0 740-005022 0x014f -- -- -- RE-3.0
CB 0 710-002728 0x0128 -- -- --
CB 1
FPC 0 710-002385 0x012c -- -- -- FPC Type 2
FPC 1 710-002385 0x012c -- -- -- FPC Type 2
FPC 3 710-001721 0x012d -- -- -- FPC Type 3
...
SPMB 0 710-003229 0x0129 -- -- --
SIB 0 710-003980 0x0134 -- -- -- SIB-I8
SIB 2 710-003980 0x0134 -- -- -- SIB-I8
SIB 3 710-003980 0x0134 -- -- -- SIB-I8
Front Top Fan Tray
Front Bottom Fan Tray
Rear Blower Tray
show chassis hardware user@host> show chassis hardware extensive

extensive (T640) Hardware inventory:
Chassis T640
Jedec Code: 0x7fb0 EEPROM Version: 0x01
P/N: ........... S/N: ...........
Assembly ID: 0x0507 Assembly Version: 00.00
Date: 00-00-0000 Assembly Flags: 0x00
Version: ...........
ID: Gibson LCC Chassis
Board Information Record:
Address 0x00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
I2C Hex Data:
Address 0x00: 7f b0 01 ff 05 07 00 00 00 00 00 00 00 00 00 00
Address 0x10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Address 0x20: ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00
Address 0x30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Address 0x40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Midplane REV 04 710-002726 AX5633
Jedec Code: 0x7fb0 EEPROM Version: 0x01
P/N: 710-002726. S/N: S/N AX5633.
Assembly ID: 0x0127 Assembly Version: 01.04
Date: 06-27-2001 Assembly Flags: 0x00
Version: REV 04.....
ID: Gibson Backplane

Board Information Record:

Address 0x00: ad 01 08 00 00 90 69 0e f8 00 ff ff ff ff ff ff
I2C Hex Data:
Address 0x00: 7f b0 01 ff 01 27 01 04 52 45 56 20 30 34 00 00
Address 0x10: 00 00 00 00 37 31 30 2d 30 30 32 37 32 36 00 00
Address 0x20: 53 2f 4e 20 41 58 35 36 33 33 00 00 00 1b 06 07
Address 0x30: d1 ff ff ff ad 01 08 00 00 90 69 0e f8 00 ff ff
Address 0x40: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
FPM GBUS REV 02 710-002901 HE3245
...
FPM Display REV 02 710-002897 HA4873
...
CIP REV 05 710-002895 HA4729
...
PEM 1 RevX02 740-002595 MD21815 Power Entry Module
...
SCG 0 REV 04 710-003423 HF6023
...
SCG 1 REV 04 710-003423 HF6061
...
Routing Engine 0 REV 01 740-005022 210865700292 RE-3.0
...
CB 0 REV 06 710-002728 HE3614
...
FPC 1 REV 01 710-002385 HE3009 FPC Type 1
... REV 06 710-001726 HC0010
show chassis hardware user@host> show chassis hardware lcc 0

--------------------------------------------------------------------------
Hardware inventory:
Chassis 65751 T640
Midplane REV 03 710-005608 RA1408 T640 Backplane
FPM GBUS REV 09 710-002901 RA2784 T640 FPM Board
FPM Display REV 05 710-002897 RA2825 FPM Display
CIP REV 06 710-002895 HT0684 T-series CIP
PEM 0 Rev 11 740-002595 PM18483 Power Entry Module
PEM 1 Rev 11 740-002595 qb13984 Power Entry Module
SCG 0 REV 11 710-003423 HT0022 T640 Sonet Clock Gen.
Routing Engine 0 REV 13 740-005022 210865700363 RE-3.0 (RE-600)
CB 0 REV 03 710-007655 HW1195 Control Board (CB-T)
FPC 1 REV 05 710-007527 HM3245 FPC Type 2
CPU REV 14 710-001726 HM1084 FPC CPU
PIC 0 REV 02 750-007218 AZ1112 2x OC-12 ATM2 IQ, SMIR
PIC 1 REV 02 750-007745 HG3462 4x OC-3 SONET, SMIR
PIC 2 REV 14 750-001901 BA5390 4x OC-12 SONET, SMIR
PIC 3 REV 09 750-008155 HS3012 2x G/E IQ, 1000 BASE
SFP 0 NON-JNPR P1186TY SFP-S
SFP 1 REV 01 740-007326 P11WLTF SFP-SX
MMB 1 REV 02 710-005555 HL7514 MMB-288mbit
PPB 0 REV 04 710-003758 HM4405 PPB Type 2
PPB 1 REV 04 710-003758 AV1960 PPB Type 2
FPC 2 REV 08 710-010154 HZ3578 E-FPC Type 3
CPU REV 05 710-010169 HZ3219 FPC CPU-Enhanced
SFP 0 REV 01 740-009898 USC202U709 XENPAK-LR
PIC 1 REV 03 750-003336 HJ9954 4x OC-48 SONET, SMSR
PIC 2 REV 01 750-004535 HC0235 1x OC-192 SM SR1

PIC 3 REV 07 750-007141 HX1699 10x 1GE(LAN), 1000 BASE

SFP 0 REV 01 740-007326 2441042 SFP-SX
SFP 1 REV 01 740-007326 2441027 SFP-SX
MMB 0 REV 03 710-010171 HV2365 MMB-5M3-288mbit
MMB 1 REV 03 710-010171 HZ3888 MMB-5M3-288mbit
SPMB 0 REV 09 710-003229 HW5245 T-series Switch CPU
SIB 3 REV 07 710-005781 HR5927 SIB-L8-F16
B Board REV 06 710-005782 HR5971 SIB-L8-F16 (B)
SIB 4 REV 07 710-005781 HR5903 SIB-L8-F16
B Board REV 06 710-005782 HZ5275 SIB-L8-F16 (B)
show chassis hardware user@host> show chassis hardware scc

--------------------------------------------------------------------------
Hardware inventory:
Chassis TX Matrix
Midplane REV 04 710-004396 RB0014 SCC Midplane
FPM GBUS REV 04 710-004617 HW9141 SCC FPM Board
FPM Display REV 04 710-004619 HS5950 SCC FPM
CIP 0 REV 01 710-010218 HV9151 SCC CIP
CIP 1 REV 01 710-010218 HV9152 SCC CIP
PEM 1 Rev 11 740-002595 QB13977 Power Entry Module
Routing Engine 0 REV 05 740-008883 P11123900153 RE-4.0 (RE-1600)
CB 0 REV 01 710-011709 HR5964 Control Board (CB-TX)
SPMB 0 REV 09 710-003229 HW5293 T-series Switch CPU
SIB 3
SIB 4 REV 01 710-005839 HW1177 SIB-S8-F16
B Board REV 01 710-005840 HW1202 SIB-S8-F16 (B)

show chassis lccs
Syntax show chassis lccs
Description (Routing matrix only) Display the status of all T640 routing nodes (or line-card
chassis) connected to the TX Matrix platform.
Output Fields Slot—Slot number of the T640 routing node.
State—Status of the T640 routing node. It can be Online, Empty, or Offline.
Uptime—Time since the T640 routing node came online.
See Also request chassis lcc on page 97
List of Sample Output show chassis lccs on page 199
Output Fields Table 55 lists the output fields for the show chassis lccs command. Output fields are
Table 55: show chassis lccs Output Fields

Slot LCC slot number.
State LCC status: Online, Offline, or Empty.
Uptime How long the LCC has been up and running.
show chassis lccs user@host> show chassis lccs

Slot State Uptime
0 Online 3 minutes, 17 seconds
1 Empty
2 Online 3 minutes, 23 seconds
3 Empty
show chassis lccs ! 199

show chassis location
Syntax show chassis location
Syntax show chassis location

(Routing Matrix) <fpc | interface (by-name name | by-slot fpc number lcc number) | lcc number | scc>
Description Display the physical location of the chassis. This command can only be used on the
master Routing Engine.
Options none—Display all information about the physical location of the chassis. For the
routing matrix only, display all information about the physical location of the
TX Matrix platform and its attached T640 routing nodes.
fpc—(Routing matrix only) (Optional) Display the physical location of all Flexible
PIC Concentrators (FPCs).
interface by-name name—(Routing matrix only) (Optional) Display the physical

location of a specified interface name. This option displays the FPC number
and T640 routing node (or line-card chassis) number associated with the
specified interface.
interface by-slot fpc number lcc number—(Routing matrix only) (Optional) Display
the global FPC number of an interface by specifying its local FPC number and
T640 routing node (or line-card chassis) number.
! The global FPC number is the FPC slot number when all the FPC slots in
the routing matrix are considered: 0 through 31. The local FPC number is
the FPC slot number on a particular T640 routing node.
! For fpc, replace number with a value from 0 through 7.
! For lcc, replace number with a value from 0 through 3.
lcc number—(Routing matrix only) (Optional) Display the physical location of a

TX Matrix platform. Replace number with a value from 0 through 3.
scc—(Routing matrix only) (Optional) Display the physical location of the TX Matrix
List of Sample Output show chassis location on page 201

show chassis location fpc (Routing Matrix) on page 201
show chassis location interface by-slot (Routing Matrix) on page 201
200 ! show chassis location

Output Fields Table 56 lists the output fields for the show chassis location command. Output
Table 56: show chassis location Output Fields

country-code Country code information.
postal-code Postal code information.
Building Building information.
Floor Floor information.
Global FPC Global FPC number. The FPC slot number, when all FPC slots in the Routing
Matrix are considered. It can be a value from 0 through 31.
LCC Line-card chassis number. The number of a particular T640 routing node
connected to the TX Matrix platform.
Local FPC Local FPC number. The FPC slot number on a particular T640 routing node.
show chassis location user@host> show chassis location

country-code: US
postal-code: 94404
Building: Building 2, Floor: 2
show chassis location user@host> show chassis location fpc

fpc (Routing Matrix) Global FPC LCC Local FPC
17 2 1
21 2 5
show chassis location user@host> show chassis location interface by-slot fpc 1 lcc 1
interface by-slot Global FPC: 9
(Routing Matrix)
show chassis location ! 201

show chassis mac-addresses
Syntax show chassis mac-addresses
Syntax show chassis mac-addresses

Description Display the media access control (MAC) addresses for the router chassis.
Options none—Display the MAC addresses for the router chassis. For the routing matrix
only, display MAC addresses on the TX Matrix platform and its attached T640
routing nodes.
lcc number—(Routing matrix only) (Optional) Display MAC addresses for a specified
scc—(Routing matrix only) (Optional) Display MAC addresses for the TX Matrix
List of Sample Output show chassis mac-addresses on page 202

show chassis mac-addresses (Routing Matrix) on page 203
Output Fields Table 57 lists the output fields for the show chassis mac-addresses command.
Table 57: show chassis mac-addresses Output Fields

MAC address information
Public base address Base address of the MAC addresses allocated to this router.
Public count Number of allocated public addresses.
Private base address Base address of the private MAC addresses allocated to this router.
Private count Number of allocated private addresses.
show chassis user@host> show chassis mac-addresses

mac-addresses MAC address information
Public base address 0:90:69:0:4:0
Public count 1008
Private base address 0:90:69:0:7:f0
Private count 16
202 ! show chassis mac-addresses

show chassis user@host> show chassis mac-addresses

mac-addresses scc-re0:
--------------------------------------------------------------------------
(Routing Matrix)
MAC address information:
Public base address 00:05:85:9e:cc:00
Public count 8064
Private base address 00:05:85:9e:eb:80
Private count 128
lcc0-re0:
--------------------------------------------------------------------------
Public count 2032
Private base address 00:05:85:68:9f:f0
Private count 16
lcc2-re0:
--------------------------------------------------------------------------
Public count 2032
Private base address 00:05:85:68:7f:f0
Private count 16
show chassis mac-addresses ! 203

show chassis pic
Syntax show chassis pic fpc-slot slot-number pic-slot slot-number
Syntax show chassis pic fpc-slot slot-number pic-slot slot-number

Description Display status information about the Physical Interface Card (PIC) installed in the
specified Flexible PIC Concentrator (FPC) and PIC slot.
Options fpc-slot slot-number—Display information about the PIC in this particular FPC slot:
user@host> show chassis pic fpc-slot 1 lcc 1 pic-slot 1

user@host> show chassis pic fpc-slot 9 pic-slot 1
! Other routing platforms—Replace slot-number with a value from

0 through 7.
lcc number—(Routing matrix only) (Optional) Display PIC information for a

pic-slot slot-number—Display information about the PIC in this particular PIC slot.
Replace slot-number with a value from 0 through 3.
See Also request chassis pic on page 100
List of Sample Output show chassis pic fpc-slot pic-slot on page 205
show chassis pic fpc-slot pic-slot (PIC Offline) on page 205
show chassis pic fpc-slot pic-slot (FPC Offline) on page 205
show chassis pic fpc-slot pic-slot (FPC Not Present) on page 205
show chassis pic fpc-slot pic-slot (PIC Not Present) on page 205
show chassis pic fpc-slot pic-slot lcc (Routing Matrix) on page 205
Output Fields Table 58 lists the output fields for the show chassis pic command. Output fields are
Table 58: show chassis pic Output Fields

Type PIC type.
ASIC type Type of ASIC on the PIC.
State Status of the PIC. State is displayed only when a PIC is in the slot:
Online or Offline.
PIC version PIC hardware version.
204 ! show chassis pic

Table 58: show chassis pic Output Fields

Uptime How long the PIC has been online.
Package (MultiServices PICs only) Services package supported: Layer-2 or Layer-3.
PIC Port Information Port-level information for the PIC.
Port Number Port number for the PIC.
Cable Type Type of cable connected to the port. It can be LH, LX, or SX
show chassis pic user@host> show chassis pic fpc-slot 2 pic-slot 0

fpc-slot pic-slot PIC fpc slot 2 pic slot 0 information:
Type 10x 1GE(LAN), 1000 BASE
ASIC type H chip
State Online
PIC version 1.1
Uptime 1 day, 50 minutes, 58 seconds
PIC Port Information:

Port Cable
Number Type
0 GIGE 1000LX
6 GIGE 1000LX

fpc-slot pic-slot PIC fpc slot 1 pic slot 0 information:
(PIC Offline) State Offline

fpc-slot pic-slot FPC 1 is not online
(FPC Offline)

fpc-slot pic-slot FPC slot 4 is empty
(FPC Not Present)

fpc-slot pic-slot FPC 5, PIC 2 is empty
(PIC Not Present)
show chassis pic user@host> show chassis pic fpc-slot 1 pic-slot 1 lcc 0
fpc-slot pic-slot lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
PIC fpc slot 1 pic slot 1 information:
Type 4x OC-3 SONET, SMIR
ASIC type D chip
State Online
PIC version 1.2
Uptime 5 days, 2 hours, 12 minutes, 8 seconds
show chassis pic ! 205

show chassis routing-engine
Syntax show chassis routing-engine

<bios | slot>
Syntax show chassis routing-engine

(Routing Matrix) <bios | slot>
<lcc number | scc>
Description Display the status of the Routing Engine.
Options none—Display information about one or more Routing Engines. For the routing
matrix only, display information about all Routing Engines on the TX Matrix
bios—(Optional) Display the basic input/output system (BIOS) firmware version.
slot—(Systems with multiple Routing Engines) (Optional) Display information for an

individual Routing Engine. Replace slot with 0 or 1.
lcc number—(Routing matrix only) (Optional) Display Routing Engine information

for a specified T640 routing node (or line-card chassis) that is connected to a
scc—(Routing matrix only) (Optional) Display Routing Engine information for the
See Also request chassis routing-engine master on page 101
List of Sample Output show chassis routing-engine (M5) on page 207

show chassis routing-engine (M10) on page 207
show chassis routing-engine (Routing Matrix) on page 209
show chassis routing-engine lcc (Routing Matrix) on page 211
show chassis routing-engine bios (Routing Matrix) on page 211
Output Fields Table 59 lists the output fields for the show chassis routing-engine command.
Table 59: show chassis routing-engine Output Fields

Slot (Systems with multiple Routing Engines) Slot number.
Current state (Systems with multiple Routing Engines) Current state of the
Routing Engine: Master, Backup, or Disabled.
Election priority (Systems with multiple Routing Engines) Election priority for the
Routing Engine: Master or Backup.
Temperature Temperature of the air flowing past the Routing Engine.
206 ! show chassis routing-engine

Table 59: show chassis routing-engine Output Fields

DRAM Total DRAM available to the Routing Engine’s processor.
Memory utilization Percentage of Routing Engine memory being used.
CPU utilization Information about the Routing Engine’s CPU utilization:
! User—Percentage of CPU time being used by user processes.
! Background—Percentage of CPU time being used by background
processes.
! Kernel—Percentage of CPU time being used by kernel processes.
! Interrupt—Percentage of CPU time being used by interrupts.
! Idle—Percentage of CPU time that is idle.
Model Routing Engine model number.

Serial ID (Systems with multiple Routing Engines) Identification number of the
Routing Engine in this slot.
Start time Time at which the Routing Engine started running.
Uptime How long the Routing Engine has been running.
Load averages Routing Engine load averages for the last 1, 5, and 15 minutes.
show chassis user@host> show chassis routing-engine

routing-engine (M5) Routing Engine status:
DRAM 768 MB
Memory utilization 21 percent
CPU utilization:
User 0 percent
Background 0 percent
Kernel 0 percent
Interrupt 0 percent
Idle 100 percent
Model RE-2.0
Serial ID 31000007349bf701
Start time 2003-12-04 09:42:17 PST
Uptime 26 days, 1 hour, 12 minutes, 27 seconds
Load averages: 1 minute 5 minute 15 minute
0.00 0.01 0.00

DRAM 768 MB
CPU utilization:
User 0 percent
Kernel 0 percent
Interrupt 0 percent
Idle 100 percent
Model RE-2.0
Serial ID 31000007349bf701
Start time 2003-12-04 09:42:17 PST
0.00 0.01 0.00
show chassis routing-engine ! 207


Slot 0:
Current state Master
Election priority Master (default)
DRAM 768 MB
CPU utilization:
User 1 percent
Kernel 2 percent
Interrupt 0 percent
Idle 97 percent
Model RE-2.0
Serial ID 58000007348d9a01
Start time 2003-12-30 07:05:47 PST
0.00 0.02 0.00
Routing Engine status:
Slot 1:
Current state Backup
Election priority Backup (default)
DRAM 768 MB
CPU utilization:
User 0 percent
Kernel 1 percent
Interrupt 0 percent
Idle 99 percent
Model RE-2.0
Serial ID d800000734745701
Start time 2003-06-17 16:37:33 PDT

DRAM 768 MB
CPU utilization:
User 0 percent
Kernel 0 percent
Interrupt 0 percent
Idle 100 percent
Model RE-2.0
Serial ID 31000007349bf701
Start time 2003-12-04 09:42:17 PST
0.00 0.01 0.00


Slot 0:
DRAM 2048 MB
CPU utilization:
User 1 percent
Kernel 2 percent
Interrupt 0 percent
Idle 97 percent
Model RE-3.0
Serial ID 210865700403
Start time 2003-12-23 12:25:55 PST
0.24 0.13 0.04
Slot 1:
Current state Backup
Election priority Backup (default)
DRAM 2048 MB
CPU utilization:
User 0 percent
Kernel 0 percent
Interrupt 0 percent
Idle 100 percent
Model RE-3.0
Serial ID 210865700332
Start time 2003-12-23 12:25:55 PST

routing-engine (Routing scc-re0:
Matrix) --------------------------------------------------------------------------
Slot 0:
CPU temperature 33 degrees C / 91 degrees F
DRAM 2048 MB
CPU utilization:
User 0 percent
Kernel 2 percent
Interrupt 0 percent
Idle 98 percent
Model RE-4.0
Serial ID P11123900153
Start time 2004-08-05 18:42:05 PDT
0.00 0.08 0.07

lcc0-re0:
--------------------------------------------------------------------------
Slot 0:
DRAM 2048 MB
CPU utilization:
User 0 percent
Kernel 1 percent
Interrupt 0 percent
Idle 98 percent
Model RE-3.0
Serial ID 210865700363
Start time 2004-08-05 18:42:05 PDT
0.00 0.02 0.00
lcc2-re0:
--------------------------------------------------------------------------
Slot 0:
DRAM 2048 MB
CPU utilization:
User 0 percent
Kernel 2 percent
Interrupt 0 percent
Idle 98 percent
Model RE-4.0
Serial ID P11123900126
Start time 2004-08-05 18:42:05 PDT
0.01 0.01 0.0

show chassis user@host> show chassis routing-engine 0 lcc 0

routing-engine lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------------
Slot 0:
DRAM 2048 MB
CPU utilization:
User 0 percent
Kernel 1 percent
Interrupt 0 percent
Idle 98 percent
Model RE-3.0
Serial ID 210865700363
Start time 2004-08-05 18:42:05 PDT
0.00 0.00 0.00
show chassis user@host> show chassis routing-engine bios

routing-engine bios scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
Routing Engine BIOS Version: V1.0.0
lcc0-re0:
--------------------------------------------------------------------------
lcc2-re0:
--------------------------------------------------------------------------

show chassis scb
Syntax show chassis scb
Description (M40 router only) Display System Control Board (SCB) status information.
List of Sample Output show chassis scb on page 212
Output Fields Table 60 lists the output fields for the show chassis scb command. Output fields are
Table 60: show chassis scb Output Fields

Temperature Temperature of the air passing by the SCB, in degrees Celsius.
CPU utilization Total percentage of CPU being used by the SCB’s processor.
Interrupt utilization Of the total CPU being used by the SCB’s processor, the percentage being used for interrupts.
Heap utilization Percentage of heap space being used by the SCB’s processor.
Buffer utilization Percentage of buffer space being used by the SCB’s processor.
DRAM Total DRAM available to the SCB’s processor.
Start time Time when the SCB started running.
Uptime How long the SCB has been running.
Internet Processor memory Information about the memory of the Internet Processor ASIC on the SCB:
! IP routes—Number of IP routes known to the Internet Processor.
! MPLS routes—Number of MPLS routes known to the Internet Processor.
! SRAM banks enabled—Which SRAM banks are enabled.
! SRAM size—Size of SCB SRAM, in bytes.
! SRAM used—Amount of SRAM used, in bytes.
! SRAM utilization—Percentage of SRAM used.
show chassis scb user@host> show chassis scb

SCB status:
Temperature: 30 Centigrade
CPU utilization: 5 percent
Interrupt utilization: 0 percent
Heap utilization: 0 percent
Buffer utilization: 2 percent
DRAM: 64 Mbytes
Start time: 1998-10-28 18:35:46 UTC
Uptime: 6 minutes, 16 seconds
Internet Processor memory:
IP routes: 16
MPLS routes: 1
SRAM banks enabled: [ 1 1 1 1 ]
SRAM size: 4 Mbytes
SRAM used: 256 bytes
SRAM utilization: 0 percent
212 ! show chassis scb

show chassis sfm
Syntax show chassis sfm

<detail <sfm-slot>>
Description (M40e and M160 routers only) Display Switching and Forwarding Module (SFM)
status information.
Options none—Display standard status information about all SFMs.
detail—(Optional) Display detailed SFM status information.
sfm-slot—(Optional) Display status information about the SFM in the specified slot
only. For the M40e router, replace sfm-slot with 0 or 1. For the M160 router, replace
sfm-slot with a value from 0 through 3.
See Also request chassis sfm on page 105

request chassis sfm master switch on page 106
List of Sample Output show chassis sfm (M160) on page 214

show chassis sfm detail (M40e) on page 214
show chassis sfm detail (M160) on page 214
Output Fields Table 61 lists the output fields for the show chassis sfm command. Output fields are
Table 61: show chassis sfm Output Fields

Slot Slot number All levels
State Status of the SFMs: Online, Online-Standby (M40e router only), Offline, or Empty. All levels
Reason If the status is Offline, reason for this state. All levels
Temp Temperature of air passing by the SFM, in degrees Celsius. none specified
CPU Utilization (%) Information about CPU usage. none specified
Total Total percentage of the CPU being used by the SFM’s processor. All levels
Interrupt Of the total CPU being used by the SFM’s processor, the percentage being used All levels
for interrupts.
Memory Utilization Information about memory usage. none specified
DRAM Total DRAM available to the SFM’s processor, in megabytes (MB). All levels
Heap Percentage of heap space (dynamic memory) being used by the SFM’s processor. All levels
If this number exceeds 80 percent, it might indicate a software problem
(memory leak).
Buffer Percentage of buffer space being used by the SFM’s processor for buffering All levels
internal messages.
SPP Temperature Temperature of air passing by the Switch Plane Processor card, in degrees detail
Celsius and Fahrenheit
SPR Temperature Temperature of air passing by the Switch Plane Router card, in degrees Celsius detail
and Fahrenheit.
show chassis sfm ! 213

Table 61: show chassis sfm Output Fields

Total CPU DRAM Total amount of CPU DRAM being used by the SFM’s processor. detail
Total SSRAM Total amount of SSRAM being used by the SFM’s processor. detail
Internet processor II (M160 router only) Processor type. detail
Start time Time this SFM became active. detail
Uptime How long the SFM has been up and running. detail
Packet scheduling mode (M160 router only) Enabled or disabled. detail
show chassis sfm user@host> show chassis sfm

(M160) SFM status:
0 Online 39 0 0 64 0 6
1 Online 43 0 0 64 0 6
2 Empty 0 0 0 0 0 0
3 Empty 0 0 0 0 0 0
show chassis sfm detail user@host> show chassis sfm detail

(M40e) Slot 0 information:
State Offline
Reason: - power configured off
Slot 1 information:
State Present
Total CPU DRAM 0 MB
Total SSRAM 0 MB
show chassis sfm detail user@host> show chassis sfm detail

(M160) Slot 0 information:
State Online
Total SSRAM 8 MB
Start time: 2004-08-17 09:23:08 PDT
Uptime: 72 days, 1 hour, 15 minutes, 57 seconds
Slot 1 information:
State Online
Total SSRAM 8 MB
Start time: 2004-08-17 09:23:08 PDT
Slot 2 information:
....
Packet scheduling mode : Disabled
214 ! show chassis sfm

show chassis sibs
Syntax show chassis sibs
Syntax show chassis sibs

Description (M320 routers and T-series routing platform only) Display Switch Interface Boards
(SIB) status information.
Options none—(Routing matrix only) Display the SIB status for the TX Matrix platform and
its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display SIB status information for a
scc—(Routing matrix only) (Optional) Display SIB status information for the
See Also request chassis sib on page 107

List of Sample Output show chassis sibs (T640) on page 215

show chassis sibs (Routing Matrix) on page 216
Output Fields Table 62 lists the output fields for the show chassis sibs command. Output fields are
Table 62: show chassis sibs Output Fields

Slot SIB slot number.
State SIB status: Disconnected, Online, Offline, Spare, Empty, Fault, and
Check.
Uptime How long the SIB has been up and running.
show chassis sibs user@host> show chassis sibs

(T640) Slot State Uptime
0 Spare
1 Online 7 days, 2 hours, 13 minutes, 57 seconds
show chassis sibs ! 215

show chassis sibs user@host> show chassis sibs

(Routing Matrix) scc-re0:
--------------------------------------------------------------------------
Slot State Uptime
0 Empty
1 Empty
2 Empty
3 Offline
lcc0-re0:
--------------------------------------------------------------------------
Slot State Uptime
0 Empty
1 Empty
2 Empty
3 Disconnected 7 days, 21 hours, 46 minutes, 53 seconds
...
216 ! show chassis sibs

show chassis spmb
Syntax show chassis spmb
Syntax show chassis spmb

Description (T-series routing platform only) Display Switch Processor Mezzanine Board (SPMB)
status information.
Options none—(Routing matrix only) Display SPMB status for the TX Matrix platform and its
attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display information about the SPMB
on a specified T640 routing node (or line-card chassis) that is connected to a
scc—(Routing matrix only) (Optional) Display information about the SPMB on the
See Also request chassis sib on page 107

List of Sample Output show chassis spmb on page 218

show chassis spmb lcc (Routing Matrix) on page 218
show chassis spmb scc (Routing Matrix) on page 218
Output Fields Table 63 lists the output fields for the show chassis spmb command. Output fields
Table 63: show chassis spmb Output Fields
Slot SPMB slot number: 0 or 1.
State SPMB status: Online or Offline.
Total CPU Utilization (%) Total percentage of CPU being used by the SPMB processor.
Interrupt CPU Utilization (%) Of the total CPU being used by the SPMB processor, the percentage
Memory Heap Utilization (%) Percentage of heap space (dynamic memory) being used by the FPC
processor. If this number exceeds 80 percent, there may be a
software problem (memory leak).
Buffer Utilization (%) Percentage of buffer space being used by the SPMB processor for
buffering internal messages.
Start time Time at which the SPMB last came online.
Uptime How long the SPMB has been up and running.
show chassis spmb ! 217

show chassis spmb user@host> show chassis spmb

Slot 0 information:
State Online
Total CPU Utilization 1%
Interrupt CPU Utilization 0%
Memory Heap Utilization 0%
Buffer Utilization 40%
Start time: 2001-08-27 14:05:04 PDT
Uptime: 46 minutes, 36 seconds
show chassis spmb lcc user@host> show chassis spmb lcc 0

--------------------------------------------------------------------------
Slot 0 information:
State Online
Start time: 2004-08-05 18:43:38 PDT
Uptime: 8 days, 55 minutes, 52 seconds
show chassis spmb scc user@host> show chassis spmb scc

--------------------------------------------------------------------------
Slot 0 information:
State Online
Start time: 2004-08-05 18:43:37 PDT
218 ! show chassis spmb

show chassis spmb sibs
Syntax show chassis spmb sibs
Syntax show chassis spmb sibs

Description (T-series routing platform only) Display Switch Processor Mezzanine Board (SPMB)
Switch Interface Board (SIB) status information.
Options none—(Routing matrix only) Display the SIB status for the TX Matrix platform and
its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display SIB status information for a
scc—(Routing matrix only) (Optional) Display SIB status information for the
Additional Information On a T-series routing platform, you can use either this command or the show
chassis sibs command to produce the same output. The show chassis sibs
command is supported on the M320 router and on the T-series routing platform.
See Also request chassis spmb restart on page 108
List of Sample Output show chassis spmb sibs (T320) on page 219
show chassis spmb sibs (Routing Matrix) on page 220
show chassis spmb sibs lcc (Routing Matrix) on page 220
show chassis spmb sibs scc (Routing Matrix) on page 220
Output Fields Table 64 lists the output fields for the show chassis spmb sibs command. Output
Table 64: show chassis spmb sibs Output Fields

Slot SIB slot number:
! T640 routing node or TX Matrix platform—0 through 4.
! T320 router—0 through 2.
State SIB status: Disconnected, Online, Offline, Spare, Empty, Fault, and Check.
Uptime How long the SIB has been up and running.
show chassis spmb sibs user@host> show chassis spmb sibs

(T320) Slot State
0 Spare
1 Online
2 Online
show chassis spmb sibs ! 219

show chassis spmb sibs user@host> show chassis spmb sibs

(Routing Matrix) Slot State
0 Online
1 Online
2 Empty
3 Online
4 Offline
show chassis spmb sibs user@host> show chassis spmb sibs lcc 0
--------------------------------------------------------------------------
Slot State Uptime
0 Empty
1 Empty
2 Empty
3 Disconnected 8 days, 48 minutes, 58 seconds
4 Online 8 days, 48 minutes, 57 seconds
show chassis spmb sibs user@host> show chassis spmb sibs scc
--------------------------------------------------------------------------
Slot State Uptime
0 Empty
1 Empty
2 Empty
3 Offline
4 Online 8 days, 54 minutes, 1 second
220 ! show chassis spmb sibs

show chassis ssb
Syntax show chassis ssb

<slot>
Description (M20 routers only) Display status information about the System and Switch Board
(SSB).
Options none—Display information about all SSBs.
slot—(Optional) Display information about the SSB in the specified slot. Replace slot
with 0 or 1.
See Also request chassis ssb master switch on page 109
List of Sample Output show chassis ssb on page 222
Output Fields Table 65 lists the output fields for the show chassis ssb command. Output fields are
Table 65: show chassis ssb Output Fields

Failover Number of times the mastership has changed.
Slot SSB slot number.
State Current state of the SSB in this slot: Master, Backup, or Empty.
Temperature Temperature of the air passing by the SSB, in degrees Celsius.
CPU utilization Total percentage of the CPU being used by the SSB’s processor.
Interrupt utilization Of the total CPU being used by the SSB’s processor, the percentage
Heap utilization Percentage of heap space being used by the SSB’s processor.
Buffer utilization Percentage of buffer space being used by the SSB’s processor.
DRAM Total DRAM available to the SSB’s processor.
Start time Time when the SSB started running.
Uptime How long the SSB has been up and running.
show chassis ssb ! 221

show chassis ssb user@host> show chassis ssb

SSB status:
Failover: 0 time
Slot 0:
State: Master
Temperature: 33 Centigrade
CPU utilization: 0 percent
Interrupt utilization: 0 percent
Heap utilization: 0 percent
Buffer utilization: 6 percent
DRAM: 64 Mbytes
Start time: 1999-01-15 22:05:36 UTC
Uptime: 21 hours, 21 minutes, 22 seconds
...
222 ! show chassis ssb

show chassis synchronization
Syntax show chassis synchronization
Description (M320 routers only) Display information about the external clock source currently
used for chassis synchronization.
See Also request chassis synchronization switch on page 110
List of Sample Output show chassis synchronization on page 224
Output Fields Table 66 lists the output fields for the show chassis synchronization command.
Table 66: show chassis synchronization Output Fields

Current state Indicates current status of external clock sources:
! backup—Source is currently the backup clock source.
! master—Source is currently the master clock source.
Current clock state Indicates current source of external synchronization:

! internal—Source is providing its own clocking.
! locked to master CB—Source is locked to master clock source.
Selected for Number of seconds this clock has been the master or backup clock
source.
Selected since Time stamp for establishment as master or backup clock source.
Deviation (in ppm) Difference in clock timing, in parts per million (ppm).
Last deviation (in ppm) Previous difference in clock timing, if any, in ppm.
Configured sources Information of clock sources eligible for selection as master clock.
Source Information following concerns external source A or B.
Priority Indicates priority of external clock sources:
! primary—Source is a primary reference.
! secondary—Source is a secondary reference.
Deviation (in ppm) Current difference in clock timing, in ppm:

! measuring—Establishing source deviation.
! number—Deviation in ppm.
Last deviation (in ppm) Previous difference in clock timing, in ppm:

! number—Deviation in ppm.
Status Indicates status of external sources:

! present—Source is configured and present.
! qualified—Source is eligible for synchronization source.
show chassis synchronization ! 223

show chassis user@host> show chassis synchronization

synchronization Clock Synchronization Status :
Clock module on CB 0
Current state : master
Current clock state : internal
Selected for : 35 seconds
Selected since : 2006-03-16 13:50:54 PST
Deviation (in ppm) : +0.55
Last deviation (in ppm): unknown
Configured sources
Source Priority Deviation Last deviation Status
(in ppm) (in ppm)
external-a primary measuring unknown present
Clock Synchronization Status :
Clock module on CB 1
Current state : backup
Current clock state : locked to master CB
Selected for : 2 hours, 31 minutes
Selected since : 2006-03-16 11:20:29 PST
Configured sources
Source Priority Deviation Last deviation Status
(in ppm) (in ppm)
external-a primary measuring -0.39 qualified
224 ! show chassis synchronization

Chapter 7
Command-Line Interface Operational
Mode Commands
perform and monitor CLI management functions. Commands are listed in
alphabetical order.
Table 67: CLI Operational Mode Commands
Task Command
Clear the logical router view and return to a full router view. clear cli logical-router on page 226
Set the CLI to complete partial command entries. set cli complete-on-space on page 227
Set the current working directory. set cli directory on page 228
Set the maximum time that an individual session can be idle before the user is logged set cli idle-timeout on page 229
off the router.
Set the CLI to the specified logical routing instance. set cli logical-router on page 230
Set the CLI prompt. set cli prompt on page 231
Set the CLI to prompt you to restart the router after a software upgrade. set cli restart-on-upgrade on page 232
Set the number of lines on the screen. set cli screen-length on page 233
Set the number of characters on a line. set cli screen-width on page 234
Set the terminal type. set cli terminal on page 235
Timestamp CLI output. set cli timestamp on page 236
Set the system date and time. set date on page 237
Display all CLI settings. show cli on page 238
Display login permissions for the current user. show cli authorization on page 239
Display the current working directory. show cli directory on page 241
Display a list of previous CLI commands. show cli history on page 242
NOTE: For information about how to configure CLI parameters, see the JUNOS CLI
User Guide.

! 225
clear cli logical-router
Syntax clear cli logical-router
Description Clear the logical router view and return to a full router view. In a logical router view,
the output of the command displays information related to the logical router only.
See Also set cli logical-router on page 230
List of Sample Output clear cli logical-router on page 226
request.
clear cli logical-router user@host:lr1> clear cli logical-router

Cleared default logical router
user@host>
226 ! clear cli logical-router

Chapter 7: Command-Line Interface Operational Mode Commands
set cli complete-on-space
Syntax set cli complete-on-space (off | on)
Description Set the command-line interface (CLI) to complete a partial command entry when
you type a space or a tab. This is the default behavior of the CLI.
Options off—Turn off command completion.
on—Allow either a space or a tab to be used for command completion.
See Also show cli on page 238
List of Sample Output set cli complete-on-space on page 227
request.
set cli In the following example, pressing the spacebar changes the partial command entry
complete-on-space from com to complete-on-space. The example shows how adding the keyword off at
the end of the command disables command completion.
user@host> set cli com<Space>

user@host>set cli complete-on-space off
Disabling complete-on-space
set cli complete-on-space ! 227

set cli directory
Syntax set cli directory directory
Description Set the current working directory.
Options directory—Pathname of the working directory.
See Also show cli directory on page 241
List of Sample Output set cli directory on page 228
request.
set cli directory user@host> set cli directory /var/home/regress

Current directory: /var/home/regress
228 ! set cli directory

set cli idle-timeout
Syntax set cli idle-timeout

<minutes>
Description Set the maximum time that an individual session can be idle before the user is
logged off the router.
Options minutes—(Optional) Maximum idle time. The range of values, in minutes, is 0

through 100,000. If you do not issue this command, and the user’s login class
does not specify this value, the user is never forced off the system after
extended idle times. Setting the value to 0 disables the timeout.
List of Sample Output set cli idle-timeout on page 229
request.
set cli idle-timeout user@host> set cli idle-timeout 60

Idle timeout set to 60 minutes
set cli idle-timeout ! 229

set cli logical-router
Syntax set cli logical-router logical-router
Description Set the CLI to the specified logical router view.
Options logical-router—Logical router name.
List of Sample Output set cli logical-router on page 230
request.
set cli logical-router user@host> set cli logical-router log-router-A

Logical router: log-router-A
user@host:log-router-A>
230 ! set cli logical-router

set cli prompt
Syntax set cli prompt string
Description Set the prompt so that it is displayed within the CLI.
Options string—CLI prompt string. To include spaces in the prompt, enclose the string in
quotation marks. By default, the string is username@hostname.
List of Sample Output set cli prompt on page 231
Output Fields When you enter this command, the new CLI prompt is displayed.
set cli prompt user@host> set cli prompt lab1-router>

lab1-router>
set cli prompt ! 231

set cli restart-on-upgrade
Syntax set cli restart-on-upgrade string (off | on)
Description For an individual session, set the CLI to prompt you to restart the router after
upgrading the software.
Options off—Disables the prompt.
on—Enables the prompt.
List of Sample Output set cli restart-on-upgrade on page 232
request.
set cli user@host> set cli restart-on-upgrade on

restart-on-upgrade Enabling restart-on-upgrade
232 ! set cli restart-on-upgrade

set cli screen-length
Syntax set cli screen-length length
Description Set terminal screen length.
Options length—Number of lines of text that the terminal screen displays. The range of
values, in number of lines, is 24 through 100,000. The default is 24.
The point at which the ---(more)--- prompt appears on the screen is a function of
this setting and the settings for the set cli screen-width and set cli terminal
commands.
See Also set cli screen-width on page 234

set cli terminal on page 235
show cli on page 238
List of Sample Output set cli screen-length on page 233
request.
set cli screen-length user@host> set cli screen-length 75

Screen length set to 75
set cli screen-length ! 233

set cli screen-width
Syntax set cli screen-width width
Description Set the terminal screen width.
Options width—Number of characters in a line. The range of values is 80 through 100,000.

The default is 80.
The point at which the ---(more)--- prompt appears on the screen is a function of
this setting and the settings for the set cli screen-length and set cli terminal
commands.
See Also set cli screen-length on page 233

set cli terminal on page 235
show cli on page 238
List of Sample Output set cli screen-width on page 234
request.
set cli screen-width user@host> set cli screen-width

Screen width set to 132
234 ! set cli screen-width

set cli terminal
Syntax set cli terminal terminal-type
Description Set the terminal type.
Options terminal-type—Type of terminal that is connected to the Ethernet management port:
! ansi—ANSI-compatible terminal (80 characters by 24 lines)
! small-xterm—Small xterm window (80 characters by 24 lines)
! vt100—VT100-compatible terminal (80 characters by 24 lines)
! xterm—Large xterm window (80 characters by 65 lines)
List of Sample Output set cli terminal on page 235
Output Fields This command provides no output.
set cli terminal user@host> set cli terminal xterm
set cli terminal ! 235

set cli timestamp
Syntax set cli timestamp (format timestamp-format | disable)
Description Set a timestamp for CLI output.
Options format timestamp-format—Set the date and time format for the timestamp. The
timestamp format you specify can include the following placeholders in any
order:
! %m—Two-digit month
! %d—Two-digit date
! %T—Six-digit hour, minute, and seconds
Enclose the format in single quotation marks ( ‘ ). Do not use spaces. Use a
hyphen ( - ) or similar character to separate placeholders.
disable—Remove the timestamp from the CLI.
List of Sample Output set cli timestamp on page 236
request.
set cli timestamp user@host> set cli timestamp format '%m-%d-%T'

'04-21-17:39:13'
CLI timestamp set to: '%m-%d-%T'
236 ! set cli timestamp

set date
Syntax set date (date-time | ntp <ntp-server> <source-address source-address>)
Description Set the data and time.
Options date-time—Date and time. Enter this string inside quotation marks.
ntp—Use a Network Time Protocol (NTP) server to synchronize the current date and
time setting on the router.
ntp-server—(Optional) Specify the IP address of one or more NTP servers.
source-address source-address—(Optional) Specify the source address that is used

by the router to contact the remote NTP server.
List of Sample Output set date on page 237
request.
set date user@host> set date ntp

21 Apr 17:22:02 ntpdate[3867]: step time server 172.17.27.46 offset 8.759252 sec
set date ! 237

show cli
Syntax show cli
Description Display configured CLI settings.
List of Sample Output show cli on page 238
Output Fields Table 68 lists the output fields for the show cli command. Output fields are listed in
the approximate order in which they appear.
Table 68: show cli Output Fields

CLI complete-on-space Whether the capability to complete a partial command entry when
you type a space or a tab status is enabled. Status can be on or off.
CLI idle-timeout Maximum time that an individual session can be idle before the user
is logged off the router. When this feature is enabled, the number of
minutes is displayed. Otherwise, the state is disabled.
CLI restart-on-upgrade Whether for this individual session, CLI is set to prompt you to restart
the router after upgrading the software. Status can be on or off.
CLI screen-length Number of lines of text that the terminal screen displays.
CLI screen-width Number of characters in a line on the terminal screen.
CLI terminal Terminal type.
CLI is operating in Mode: enhanced.
CLI timestamp Date and time format for the timestamp. If the timestamp is not set,
the state is disabled.
CLI working directory Pathname of the working directory.
show cli user@host> show cli

CLI complete-on-space set to on
CLI idle-timeout disabled
CLI restart-on-upgrade set to on
CLI screen-length set to 47
CLI screen-width set to 132
CLI terminal is 'vt100'
CLI is operating in enhanced mode
CLI timestamp disabled
CLI working directory is '/var/home/regress'
238 ! show cli

show cli authorization
Syntax show cli authorization
Description Display the permissions for the current user.
List of Sample Output show cli authorization on page 240
Output Fields Table 69 lists the output fields for the show cli authorization command. In the table,
all possible permissions are displayed and output fields are listed in alphabetical
order.
Table 69: show cli authorization Output Fields

access Can view access configuration information.
access-control Can modify access configuration.
admin Can view user account information.
admin-control Can modify user account information.
clear Can clear learned network information.
configure Can enter configuration mode.
control Can modify any configuration.
edit Can edit configuration files.
field Reserved for field (debugging) support.
firewall Can view firewall configuration information.
firewall-control Can modify firewall configuration information.
floppy Can read from and write to removable media.
flow-tap Can view flow-tap configuration information.
flow-tap-control Can configure flow-tap configuration information.
interface Can view interface configuration information.
interface-control Can modify interface configuration information.
maintenance Can perform system maintenance, including becoming the superuser.
network Can access the network by entering the ping, ssh, telnet, and
traceroute commands.
reset Can reset or restart interfaces and system processes.
rollback Can rollback to previous configurations.
routing Can view routing configuration information.
routing-control Can modify routing configuration information.
secret Can view passwords and authentication keys in the configuration.
secret-control Can modify passwords and authentication keys in the configuration.
security Can view security configuration information.
show cli authorization ! 239

Table 69: show cli authorization Output Fields

security-control Can modify security configuration information.
shell Can start a local shell.
snmp Can view SNMP configuration information.
snmp-control Can modify SNMP configuration information.
system Can view system configuration information.
system-control Can modify system configuration information.
trace Can view trace file settings information.
trace-control Can modify trace file settings information.,
view Can view current values and statistics.
view-configuration Can view all configuration information (not including secrets).
show cli authorization user@host> show cli authorization

Current user: 'remote' login: 'user' class 'superuser'
Permissions:
admin -- Can view user accounts
admin-control-- Can modify user accounts
clear -- Can clear learned network information
configure -- Can enter configuration mode
control -- Can modify any configuration
edit -- Can edit full files
field -- Special for field (debug) support
floppy -- Can read and write from the floppy
interface -- Can view interface configuration
interface-control-- Can modify interface configuration
network -- Can access the network
reset -- Can reset/restart interfaces and daemons
routing -- Can view routing configuration
routing-control-- Can modify routing configuration
shell -- Can start a local shell
snmp -- Can view SNMP configuration
snmp-control-- Can modify SNMP configuration
system -- Can view system configuration
system-control-- Can modify system configuration
trace -- Can view trace file settings
trace-control-- Can modify trace file settings
view -- Can view current values and statistics
maintenance -- Can become the super-user
firewall -- Can view firewall configuration
firewall-control-- Can modify firewall configuration
secret -- Can view secret configuration
secret-control-- Can modify secret configuration
rollback -- Can rollback to previous configurations
security -- Can view security configuration
security-control-- Can modify security configuration
access -- Can view access configuration
access-control-- Can modify access configuration
view-configuration-- Can view all configuration (not including secrets)
flow-tap -- Can view flow-tap configuration
flow-tap-control-- Can configure flow-tap service
Individual command authorization:
Allow regular expression: none
Deny regular expression: none
Allow configuration regular expression: none
Deny configuration regular expression: none
240 ! show cli authorization

show cli directory
Syntax show cli directory
Description Display the current working directory.
List of Sample Output show cli directory on page 241
Output Fields Table 70 lists the output fields for the show cli directory command. Output fields are
Table 70: show cli directory Output Fields

Current directory Pathname of the current working directory.
show cli directory user@host> show cli directory

Current directory: /var/home/regress
show cli directory ! 241

show cli history
Syntax show cli history

<count>
Description Display a list of previous CLI commands.
Options none—Display all previous CLI commands.
count—(Optional) Maximum number of commands to display.
List of Sample Output show cli history on page 242
Output Fields Table 71 lists the output fields for the show cli history command. Output fields are
Table 71: show cli history Output Fields

timestamp Time at which the command was entered.
command-syntax Command that was entered.
show cli history user@host> show cli history

11:14:14 -- show arp
11:22:10 -- show cli authorization
11:27:12 -- show cli history
242 ! show cli history

Chapter 8
File Management Operational Mode
Commands
perform and monitor file management functions. Commands are listed in
alphabetical order.
Table 72: File Management Operational Mode Commands
Task Command
Remove contents of a log file. clear log on page 244
Archive files or archive and compress files. file archive on page 245
Calculate checksums. file checksum md5 on page 246
Compare two files. file compare on page 247
Copy files. file copy on page 249
Delete files. file delete on page 250
List files and directories on the router. file list on page 251
Rename files. file rename on page 253
Display the contents of a file. file show on page 254

List log files, display log file contents, and display show log on page 256
information about users who have logged in to the
router.
NOTE: See also the monitor list, monitor start, and monitor stop commands, which
are documented in “Real-Time Router Monitoring Operational Mode Commands”
on page 51.
For information about how to configure file parameters, see the JUNOS System

! 243
clear log
Syntax clear log filename

<all>
Description Remove contents of a log file.
Options filename—Name of the specific log file to truncate.
all—(Optional) Truncate the specified log file and delete all archived versions of it.
See Also show log on page 256
List of Sample Output clear log on page 244
Output Fields See file list on page 251 for an explanation of output fields.
clear log The following sample commands list log file information, clear the contents of a log
file, and then display the updated log file information:
user@host> file list lcc0-re0:/var/log/sampled detail

lcc0-re0:
--------------------------------------------------------------------------
-rw-r----- 1 root wheel 26450 Jun 23 18:47 /var/log/sampled
total 1
user@host> clear log lcc0-re0:sampled

lcc0-re0:
--------------------------------------------------------------------------
user@host> file list lcc0-re0:/var/log/sampled detail

lcc0-re0:
--------------------------------------------------------------------------
-rw-r----- 1 root wheel 57 Sep 15 03:44 /var/log/sampled
total 1
244 ! clear log

Chapter 8: File Management Operational Mode Commands
file archive
Syntax file archive destination destination source source

<compress>
Description Archive, and optionally compress, one or multiple local system files as a single file,
locally or at a remote location.
Options destination destination—Destination of the archived file or files. Specify the

destination as a URL or filename. The JUNOS software adds one of the following
suffixes if the destination filename does not already have it:
! For archived files—The suffix .tar
! For archived and compressed files—The suffix .tgz
source source—Source of the original file or files. Specify the source as a URL or
filename.
compress—(Optional) Compress the archived file with the GNU zip (gzip)
compression utility. The compressed files have the suffix .tgz.
List of Sample Output file archive (Multiple Files) on page 245

file archive (Single File) on page 245
file archive (With Compression) on page 245
request.
file archive The following sample command archives all message files in the local directory
(Multiple Files) /var/log/messages as the single file messages-archive.tar in the same directory:
user@host> file archive source /var/log/messages* destination

/var/log/messages-archive.tar
/usr/bin/tar: Removing leading / from absolute path names in the archive.
user@host>
file archive (Single File) The following sample command archives one message file in the local directory
/var/log/messages as the single file messages-archive.tar in the same directory:
user@host> file archive source /var/log/messages destination

/var/log/messages-archive.tar
user@host
file archive The following sample command archives and compresses all message files in the
(With Compression) local directory /var/log/messages as the single file messages-archive.tgz in the
same directory:
user@host> file archive compress source /var/log/messages* destination

/var/log/messages-archive.tgz
user@host>
file archive ! 245

file checksum md5
Syntax file checksum md5 <pathname> filename
Description Calculate the Message Digest 5 (MD5) checksum of a file.
Options pathname—(Optional) Path to a filename.
filename—Name of a local file for which to calculate the MD5 checksum.
List of Sample Output file checksum md5 on page 246
request.
file checksum md5 user@host> file checksum md5 jbundle-5.3R2.4-export-signed.tgz

MD5 (jbundle-5.3R2.4-export-signed.tgz) = 2a3b69e43f9bd4893729cc16f505a0f5
246 ! file checksum md5

file compare
Syntax file compare (files filename filename)

<context | unified>
<ignore-white-space >
Description Compare two local files and describe the differences between them in default,
context, or unified output styles:
! Default—In the first line of output, c means lines were changed between the
two files, d means lines were deleted between the two files, and a means lines
were added between the two files. The numbers preceding this alphabetical
marker represent the first file, and the lines after the alphabetical marker
represent the second file. A left angle bracket (<) in front of output lines refers
to the first file. A right angle bracket (>) in front of output lines refers to the
second file.
! Context—Display is divided into two parts. The first part is the first file; the
second part is the second file. Output lines preceded by an exclamation point (!)
have changed. Additions are marked with a plus sign (+), and deletions are
marked with a minus sign (-).
! Unified—Display is preceded by the line number from the first and the second
file (xx,x xx,x). Before the line number, additions to the file are marked with a
plus sign (+), and deletions to the file are marked with a minus sign (-). The
body of the output contains the affected lines. Changes are viewed as additions
plus deletions.
Options context—(Optional) Display output in context format.
files filename—Names of two local files to compare.
ignore-white-space—(Optional) Ignore changes in amount of white space.
unified—(Optional) Display output in unified format.
Required Privilege Level none
List of Sample Output file compare files on page 248

file compare files context on page 248
file compare files unified on page 248
file compare files unified ignore-white-space on page 248
request.
file compare ! 247

file compare files user@host> file compare files /tmp/one /tmp/two

100c100
< full-name "File 1";
---
> full-name "File 2";
102c102
< class foo; # 'foo' is not defined
---
> class super-user;
file compare files user@host> file compare files /tmp/one /tmp/two context
context *** /tmp/one Wed Dec 3 17:12:50 2003
--- /tmp/two Wed Dec 3 09:13:14 2003
***************
*** 97,104 ****
}
}
user bill {
! full-name "Bill Smith";
! class foo; # 'foo' is not defined
authentication {
encrypted-password SECRET;
}
--- 97,105 ----
}
}
user bill {
! full-name "Bill Smith";
! uid 1089;
! class super-user;
authentication {
encrypted-password SECRET;
}
file compare files user@host> file compare files /tmp/one /tmp/two unified
unified --- /tmp/one Wed Dec 3 17:12:50 2003
+++ /tmp/two Wed Dec 3 09:13:14 2003
@@ -97,8 +97,9 @@
}
}
user bill {
- full-name "Bill Smith";
- class foo; # 'foo' is not defined
+ full-name "Bill Smith";
+ uid 1089;
+ class super-user;
authentication {
encrypted-passwordSECRET;
}
file compare files user@host> file compare files /tmp/one /tmp/two unified ignore-white-space
unified --- /tmp/one Wed Dec 3 09:13:10 2003
ignore-white-space +++ /tmp/two Wed Dec 3 09:13:14 2003
@@ -99,7 +99,7 @@
user bill {
full-name "Bill Smith";
uid 1089;
- class foo; # 'foo' is not defined
+ class super-user;
authentication {
encrypted-password <SECRET>; # SECRET-DATA
}
248 ! file compare

file copy
Syntax file copy source destination

<source-address address>

source-address option added in JUNOS Release 7.4.
Description Copy files from one place to another on the local router or between the local router
and a remote system.
Options source—Source of the original file. Specify this as a URL or filename.
destination—Destination of the copied file. Specify this as a URL or filename. If you

are copying a file to the current directory (your home directory on the local
router) and are not renaming the file, specify the destination with a period (.).
source-address address—(Optional) Source IP host address. This option is useful for

specifying the source address of a secure copy (scp) file transfer.
List of Sample Output file copy (A File from the Router to a PC) on page 249
file copy (A Configuration File Between Routing Engines) on page 249
file copy (A Log File Between Routing Engines) on page 249
request.
file copy (A File from user@host> file copy /var/tmp/rpd.core.4 berry:/c/junipero/tmp

the Router to a PC)
...transferring.file...... | 0 KB | 0.3 kB/s | ETA: 00:00:00 | 100%
file copy The following sample command copies a configuration file from Routing Engine 0
(A Configuration File to Routing Engine 1:
Between Routing
Engines) user@host> file copy /config/juniper.conf re1:/var/tmp/copied-juniper.conf
file copy (A Log File The following sample command copies a log file from Routing Engine 0 to Routing
Between Routing Engine 1:
Engines)
user@host> file copy lcc0-re0:/var/log/chassisd lcc0-re1:/var/tmp
file copy ! 249

file delete
Syntax file delete filename

<purge>
Description Delete a file on the local router.
Options filename—Name of the file to delete. For a routing matrix, include chassis
information in the filename if the file to be deleted is not local to the Routing
Engine from which the command is issued.
purge—(Optional) Overwrite regular files before deleting them.
List of Sample Output file delete on page 250

file delete (Routing Matrix) on page 250
request.
file delete user@host> file list /var/tmp

dcd.core
rpd.core
snmpd.core
user@host> file delete /var/tmp/snmpd.core
user@host> file list /var/tmp
dcd.core
rpd.core
file delete user@host> file list lcc0-re0:/var/tmp

(Routing Matrix) dcd.core
rpd.core
snmpd.core
user@host> file delete lcc0-re0:/var/tmp/snmpd.core
dcd.core
rpd.core
250 ! file delete

file list
Syntax file list

<detail | recursive>
<filename>
Description Display a list of files on the local router.
Options none—Display a list of all files for the current directory.
detail | recursive—(Optional) Display detailed output or descend recursively through

the directory hierarchy, respectively.
filename—(Optional) Display a list of files. For a routing matrix, the filename must
include the chassis information.
Additional information The default directory is the home directory of the user logged into the router. To
view available directories, enter a space and then a backslash (/) after the file list
command. To view files within a specific directory, include a backslash followed by
the directory and, optionally, subdirectory name after the file list command.
List of Sample Output file list on page 251

file list (Routing Matrix) on page 251
request.
file list user@host> file list /var/tmp

dcd.core
rpd.core
snmpd.core
file list (Routing Matrix) user@host> file list lcc0-re0:var/tmp

lcc0-re0:
--------------------------------------------------------------------------
/var/tmp/:
.gdbinit
.pccardd
Test/
chassisd*
chassisd.nathan*
check_time*
cores/
diagTestPrep*
diagtest*
diagtest.regress*
do_switchovers*
dump_test*
err.manoj.log
esw_clearstats*
esw_counter*
esw_debug*
esw_debug_ge*
esw_filt_test*
file list ! 251

esw_filter_tnp_addr*
esw_getstats*
esw_phy*
esw_stats*
252 ! file list

file rename
Syntax file rename source destination
Description Rename a file on the local router.
Options source—Original name of the file. For a routing matrix, the filename must include
the chassis information.
destination—New name for the file.
List of Sample Output file rename on page 253

file rename (Routing Matrix) on page 253
request.
file rename The following example lists the files in /var/tmp, renames one of the files, and then
displays the list of files again to reveal the newly named file.

dcd.core
rpd.core
snmpd.core
user@host> file rename /var/tmp/dcd.core /var/tmp/dcd.core.990413
dcd.core.990413
rpd.core
snmpd.core
file rename The following example lists the files in /var/tmp, renames one of the files, and then
(Routing Matrix) displays the list of files again to reveal the newly named file.
user@host> file list lcc0-re1:/var/tmp

lcc0-re1:
--------------------------------------------------------------------------
/var/tmp:
.pccardd
sartre.conf
snmpd
syslogd.core-tarball.0.tgz
user@host> file rename lcc0-re0:/var/tmp/snmpd /var/tmp/snmpd.rr
user@host> file list lcc0-re1:/var/tmp
lcc0-re1:
--------------------------------------------------------------------------
/var/tmp:
.pccardd
sartre.conf
snmpd.rr
syslogd.core-tarball.0.tgz
file rename ! 253

file show
Syntax file show filename

<encoding base64>
Description Display the contents of a file.
Options filename—Name of a file. For a routing matrix, the filename must include the
chassis information.
encoding base64—(Optional) Encode file contents.
List of Sample Output file show on page 254

file show (Routing Matrix) on page 255
request.
file show user@host> file show /var/log/messages

Apr 13 21:00:08 romney /kernel: so-1/1/2: loopback suspected; going to standby.
Apr 13 21:00:40 romney /kernel: so-1/1/2: loopback suspected; going to standby.
Apr 13 21:02:48 romney last message repeated 4 times
Apr 13 21:07:04 romney last message repeated 8 times
Apr 13 21:07:13 romney /kernel: so-1/1/0: Clearing SONET alarm(s) RDI-P
Apr 13 21:07:29 romney /kernel: so-1/1/0: Asserting SONET alarm(s) RDI-P
...
254 ! file show

file show user@host> file show lcc0-re0:/var/tmp/.gdbinit

--------------------------------------------------------------------------
####################################################################
# Settings
####################################################################
set print pretty
####################################################################
# Basic stuff
####################################################################
define msgbuf
printf "%s", msgbufp->msg_ptr
end
# hex dump of a block of memory
# usage: dump address length
define dump
p $arg0, $arg1
set $ch = $arg0
set $j = 0
set $n = $arg1
while ($j < $n)
#printf "%x %x ",&$ch[$j],$ch[$j]
printf "%x ",$ch[$j]
set $j = $j + 1
if (!($j % 16))
printf "\n"
end
end
end
file show ! 255

show log
Syntax show log

<filename | user <username>>
Syntax show log

(Routing Matrix) <all-lcc | lcc number | scc>
<filename | user <username>>
Description List log files, display log file contents, or display information about users who have
logged in to the router.
Options none—List all log files.
<all-lcc | lcc number | scc>—(Routing matrix only) (Optional) Display logging

information about all T640 routing nodes (or line-card chassis) or a specific
T640 routing node (replace number with a value from 0 through 3) connected to
a TX Matrix platform. Or, display logging information about the TX Matrix
filename—(Optional) Display the log messages in the specified log file. For the
routing matrix, the filename must include the chassis information.
user <username>—(Optional) Display logging information about users who have

recently logged in to the router. If you include username, display logging
information about the specified user.
List of Sample Output show log on page 256

show log filename on page 257
show log user on page 257
request.
show log user@host> show log

total 57518
-rw-r--r-- 1 root bin 211663 Oct 1 19:44 dcd
-rw-r--r-- 1 root bin 999947 Oct 1 19:41 dcd.0
-rw-r--r-- 1 root bin 999994 Oct 1 17:48 dcd.1
-rw-r--r-- 1 root bin 238815 Oct 1 19:44 rpd
-rw-r--r-- 1 root bin 1049098 Oct 1 18:00 rpd.0
-rw-r--r-- 1 root bin 1056309 Sep 30 18:21 rpd.3
-rw-rw-r-- 1 root bin 19656 Oct 1 19:37 wtmp
-rw-rw-r-- 1 root bin 27 Aug 26 18:00 wtmp.0.gz
256 ! show log

show log filename user@host> show log rpd

Oct 1 18:00:18 trace_on: Tracing to “/var/log/rpd” started
Oct 1 18:00:18 EVENT <MTU> ds-5/2/0.0 index 24 <Broadcast PointToPoint
Multicast
Oct 1 18:00:18
Oct 1 18:00:19 KRT recv len 56 V9 seq 148 op add Type route/if af 2 addr
13.13.13.21 nhop type local nhop 13.13.13.21
Oct 1 18:00:19 KRT recv len 56 V9 seq 149 op add Type route/if af 2 addr
13.13.13.22 nhop type unicast nhop 13.13.13.22
Oct 1 18:00:19 KRT recv len 48 V9 seq 150 op add Type ifaddr index 24 devindex
43
Oct 1 18:00:19 KRT recv len 144 V9 seq 151 op chnge Type ifdev devindex 44
...
show log user user@host> show log user

darius mg2546 Thu Oct 1 19:37 still logged in
darius mg2529 Thu Oct 1 19:08 - 19:36 (00:28)
darius mg2518 Thu Oct 1 18:53 - 18:58 (00:04)
root mg1575 Wed Sep 30 18:39 - 18:41 (00:02)
root ttyp2 jun.site.per Wed Sep 30 18:39 - 18:41 (00:02)
alex ttyp1 192.168.1.2 Wed Sep 30 01:03 - 01:22 (00:19)
show log ! 257

258 ! show log

Chapter 9
Packet Forwarding Engine Operational
Mode Commands
perform and monitor Packet Forwarding Engine management functions.
Commands are listed in alphabetical order.
Table 73: PFE Operational Mode Commands
Task Command
Display Packet Forwarding Engine Compact Forwarding Engine Board show pfe cfeb on page 261
(CFEB) status and statistics information.
Display Packet Forwarding Engine Forwarding Engine Board (FEB) status show pfe feb on page 264
and statistics information.
Display Packet Forwarding Engine statistics for the specified Flexible PIC show pfe fpc on page 267
Concentrator (FPC).
(J-series routing platform only) Display Packet Forwarding Engine show pfe fwdd on page 269
forwarding process (fwdd) status and statistics information.
(Routing matrix only) Display Packet Forwarding Engine information for the show pfe lcc on page 272
specified T640 routing node (or line-card chassis).
Display Packet Forwarding Engine next-hop information. show pfe next-hop on page 275
Display the routes in the Packet Forwarding Engine forwarding table. show pfe route on page 277
(M40 routers only) Display Packet Forwarding Engine System Control Board show pfe scb on page 280
(SCB) status and statistics information.
(M40e and M160 routers only) Display Packet Forwarding Engine Switching show pfe sfm on page 282
and Forwarding Module (SFM) status and statistics information.
(M20 routers only) Display Packet Forwarding Engine System and Switch show pfe ssb on page 284
Board (SSB) status and statistics information.
Display Packet Forwarding Engine direct memory access (DMA) statistics. show pfe statistics dma on page 287
Display Packet Forwarding Engine error statistics. show pfe statistics error on page 290
Display IPv4 Packet Forwarding Engine statistics. show pfe statistics ip on page 292
Display Packet Forwarding Engine IPv6 statistics. show pfe statistics ip6 on page 295
Display Packet Forwarding Engine notification statistics. show pfe statistics notification on page 298
Display Packet Forwarding Engine polled I/O (PIO) statistics. show pfe statistics pio on page 300
Display Packet Forwarding Engine traffic statistics. show pfe statistics traffic on page 301
Display Packet Forwarding Engine status information. show pfe terse on page 304
! 259
NOTE: For information about how to configure PFE parameters, see the JUNOS
260 !
Chapter 9: Packet Forwarding Engine Operational Mode Commands
show pfe cfeb
Syntax show pfe cfeb
Description (M7i routers only) Display Packet Forwarding Engine Compact Forwarding Engine
Board (CFEB) status and statistics information.
Required Privilege Level admin
List of Sample Output show pfe cfeb on page 261
Output Fields Output field descriptions to be provided.
show pfe cfeb user@host> show pfe cfeb

CFEB status:
Slot: Present
State: Online
Last State Change: 2005-03-10 09:01:25 PST
Uptime (total): 2d 00:44
Failures: 0
Pending: 0
Peer message type receive qualifiers:

Message Type Receive Qualifier
---------------- -----------------
TTP All
IFD All
IFL All
Nexthop All
COS All
Route All
SW Firewall All
HW Firewall All
PFE Statistics All
PIC Statistics All
Sampling All
Monitoring None
ASP None
L2TP None
Collector None
PIC Configuration All
Queue Statistics All
(null) None
PFE listener statistics:

Open: 1
Close: 0
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 1
Resync Fail: 0
Resync Time: 0
show pfe cfeb ! 261

PFE IPC statistics:

type TX Messages RX messages
----------- ----------- -----------
Header 0 0
Test 0 0
Interface 562 14582
Chassis 0 0
Boot 0 0
Next-hop 104 0
Jtree 0 0
Cprod 0 0
Route 103 1
Pfe 3770 2925
Dfw 10 0
Mastership 0 0
Sampling 0 0
GUCP 0 0
CoS 50 0
GCCP 0 0
GHCP 0 0
IRSD 0 0
Monitoring 0 0
RE 0 0
PIC 0 0
ASP cfg 0 0
ASP cmd 0 0
L2TP cfg 0 0
Collector 0 0
PIC state 0 0
Aggregator 0 0
Empty 0 0
PFE socket-buffer mbuf depth:

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
262 ! show pfe cfeb

PFE socket-buffer bytes pending transmit:

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe cfeb ! 263

show pfe feb
Syntax show pfe feb
Description (M5 and M10 routers only) Display Packet Forwarding Engine Forwarding Engine
Board (FEB) status and statistics information.
List of Sample Output show pfe feb on page 264
show pfe feb user@host> show pfe feb

FEB status:
Slot: Present
State: Online
Failures: 0
Pending: 0

---------------- -----------------
TTP All
IFD All
IFL All
Nexthop All
COS All
Route All
SW Firewall All
HW Firewall All
PFE Statistics All
PIC Statistics All
Sampling All
Monitoring None
ASP None
L2TP None
Collector None
PIC Configuration All
Queue Statistics All
(null) None

Open: 1
Close: 0
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 1
Resync Fail: 0
Resync Time: 0
264 ! show pfe feb

PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 639 11889
Chassis 0 0
Boot 0 0
Next-hop 104 0
Jtree 0 0
Cprod 0 0
Route 940 0
Pfe 3008 1995
Dfw 9 0
Mastership 0 0
Sampling 0 0
GUCP 0 0
CoS 35 0
GCCP 0 0
GHCP 0 0
IRSD 0 0
Monitoring 0 0
RE 0 0
PIC 0 0
ASP cfg 0 0
ASP cmd 0 0
L2TP cfg 0 0
Collector 0 0
PIC state 0 0
Aggregator 0 0
Empty 0 0

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe feb ! 265


bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
266 ! show pfe feb

show pfe fpc
Syntax show pfe fpc slot
Description Display Packet Forwarding Engine statistics for the specified Flexible PIC
Concentrator (FPC).
Options slot—FPC slot number, for example, 0. The number of slots depends on the routing
platform.
List of Sample Output show pfe fpc slot on page 267
show pfe fpc slot user@host> show pfe fpc 1

FPC 1 status:
Slot: Present
State: Online
Last State Change: 2000-01-10 18:12:27 UTC
Uptime: 1d 03:31
Failures: 0
Pending: 0

Open: 1
Close: 0
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 0
Resync Fail: 0
Resync Time: 0
PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 2251 2219
Chassis 0 0
Boot 0 0
Next-hop 0 0
Jtree 0 0
Cprod 0 0
Route 0 0
Pfe 0 1
Dfw 0 0
Mastership 0 0
Empty 0 0

bucket count
------ -----
0 52273
1 0
2 0
show pfe fpc ! 267

…
21 0
bucket count
------ -----
0 52273
1 0
…
21 0
268 ! show pfe fpc

show pfe fwdd
Syntax show pfe fwdd
Description (J-series routing platform only) Display Packet Forwarding Engine forwarding
process (fwdd) status and statistics information.
List of Sample Output show pfe fwdd on page 269
show pfe fwdd user@host> show pfe fwdd

FWDD status:
Slot: Present
State: Online
Last State Change: 2004-09-15 16:00:36 PDT
Failures: 0
Pending: 0

---------------- -----------------
TTP Slot only
IFD All
IFL All
Nexthop All
COS All
Route All
SW Firewall All
HW Firewall All
PFE Statistics All
PIC Statistics All
Sampling All
Monitoring All
ASP Slot only
L2TP None
Collector None

Open: 1
Close: 0
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 1
Resync Fail: 0
Resync Time: 0
show pfe fwdd ! 269

PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 221 3189
Chassis 0 0
Boot 0 0
Next-hop 40 0
Jtree 0 0
Cprod 0 0
Route 45 0
Pfe 1907 1520
Dfw 16 0
Mastership 0 0
Sampling 0 0
GUCP 0 0
CoS 20 0
GCCP 0 0
GHCP 0 0
IRSD 0 0
Monitoring 0 0
RE 0 0
PIC 0 0
ASP cfg 0 0
ASP cmd 0 0
L2TP cfg 0 0
Collector 0 0
PIC state 0 0

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
270 ! show pfe fwdd


bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe fwdd ! 271

show pfe lcc
Syntax show pfe lcc number

(Routing Matrix)
Description (Routing matrix only) Display Packet Forwarding Engine status and statistics for the
specified T640 routing node (or line-card chassis).
Options lcc number—Slot number of the T640 routing node (or line-card chassis) that is
0 through 3.
List of Sample Output show pfe lcc number on page 272
show pfe lcc number user@host> show pfe lcc 0

LCC 0 status:
Slot: Present
State: Online
Failures: 23
Pending: 0

---------------- -----------------
TTP All detail
IFD All detail
IFL All detail
Nexthop All
COS All
Route All
SW Firewall All
HW Firewall All
PFE Statistics All
PIC Statistics All
Sampling All detail
Monitoring All detail
ASP All detail
L2TP All detail
Collector All detail

Open: 25
Close: 23
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 2
Resync Fail: 0
Resync Time: 0
272 ! show pfe lcc

PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 163 2923
Chassis 0 0
Boot 0 0
Next-hop 15 0
Jtree 0 0
Cprod 0 0
Route 100 0
Pfe 5369 3072
Dfw 11 0
Mastership 0 0
Sampling 0 0
GUCP 0 0
CoS 20 0
GCCP 0 0
GHCP 0 0
IRSD 0 0
Monitoring 0 0
RE 3 6930
PIC 0 0
ASP cfg 0 0
ASP cmd 0 0
L2TP cfg 0 0
Collector 0 0
PIC state 4 0

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe lcc ! 273


bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
274 ! show pfe lcc

show pfe next-hop
Syntax show pfe next-hop

Syntax show pfe next-hop

(Routing Matrix) <fpc slot>
<lcc number>
Description Display Packet Forwarding Engine next-hop information.
Options none—Display all Packet Forwarding Engine next-hop information.
fpc slot—(Routing matrix only) (Optional) Show the next hops for a Flexible PIC
Concentrator (FPC) slot.
If you specify the number of a T640 routing node by using the lcc number
option (the recommended method), replace slot with a value from 0 through 7.
Otherwise, replace slot with a value from 0 through 31. For example, the
following commands have the same result:
user@host> show pfe next-hop fpc 1 lcc 1

user@host> show pfe next-hop fpc 9
interface interface-name—(Optional) Display the Packet Forwarding Engine next-hop

interface.
lcc number—(Routing matrix only) (Optional) Slot number of the T640 routing node
(or line-chard chassis) that houses the FPC. Replace number with a value from
0 through 3.
List of Sample Output show pfe next-hop on page 275

show pfe next-hop fpc (Routing Matrix) on page 276
show pfe next-hop user@host> show pfe next-hop

Nexthop Info:
ID Type Interface Protocol Encap Next Hop Addr MTU
----- -------- ------------- --------- ------------ --------------- -----
4 Mcast - IPv4 - 0.0.0.0 0
5 Bcast - IPv4 - - 0
7 Discard - IPv4 - - 0
8 MDiscard - IPv4 - - 0
9 Reject - IPv4 - - 0
13 Local - IPv4 - 192.168.4.60 0
14 Resolve fxp0.0 IPv4 Unspecified - 0
17 Local - IPv4 - 127.0.0.1 0
18 Unicast fxp0.0 IPv4 Unspecified 192.168.4.254 0
21 Local - IPv4 - 11.1.0.1 0
22 Unicast at-0/1/0.0 IPv4 ATM SNAP 11.1.0.2 4482
...
show pfe next-hop ! 275

show pfe next-hop fpc user@host> show pfe next-hop fpc 1

(Routing Matrix)
Slot 1
Nexthop Info:
ID Type Interface Next Hop Addr Protocol Encap MTU
----- -------- ------------- --------------- ---------- ------------ ----
5 Mcast - default IPv4 - 0
6 Bcast - - IPv4 - 0
8 Discard - - IPv4 - 0
9 MDiscard - - IPv4 - 0
13 Mcast - default IPV6 - 0
17 MDiscard - - IPV6 - 0
18 Reject - - IPV6 - 0
24 Discard - - None - 0
68 Local - 192.168.66.113 IPv4 - 0
69 Resolve fxp0.0 - IPv4 Unspecified 0
70 Unicast fxp0.0 192.168.71.254 IPv4 Unspecified 0
256 Local - 10.71.71.1 IPv4 - 0
257 Local - 127.0.0.1 IPv4 - 0
258 Mcast .local..1 default IPv4 Unspecified 0
259 Bcast .local..1 - IPv4 Unspecified 0
261 Discard .local..1 - IPv4 Unspecified 0
262 MDiscard .local..1 - IPv4 Unspecified 0
269 Mcast .local..1 default IPV6 Unspecified 0
271 Discard .local..1 - IPV6 Unspecified 0
...
276 ! show pfe next-hop

show pfe route
Syntax show pfe route

<<inet6 | ip> <prefix prefix> | <table <table-name> <index index> <prefix prefix>>>
<mpls>
<summary>
Syntax show pfe route

<<inet6 | ip> <prefix prefix> | <table <table-name> <index index> <prefix prefix>>>
<lcc number>
<mpls>
<summary>
Description Display the routes in the Packet Forwarding Engine forwarding table. The Packet
Forwarding Engine forwards packets between input and output interfaces.
NOTE: The Routing Engine maintains a master copy of the forwarding table. It
copies the forwarding table to the Packet Forwarding Engine, which is the part of
the router responsible for forwarding packets. To display the routes in the
Routing Engine forwarding table, use the show route forwarding table command.
For more information, see the JUNOS Routing Protocols and Policies Command
Reference.
Options none—Display all Packet Forwarding Engine forwarding table information.
fpc slot—(Routing matrix only) (Optional) Show the routes for a Flexible PIC
Concentrator (FPC) slot:
user@host> show pfe route fpc 1 lcc 1

user@host> show pfe route fpc 9
inet6—(Optional) Display Packet Forwarding Engine IPv6 routes.
ip—(Optional) Display Packet Forwarding Engine IPv4 routes.
prefix prefix—(Optional) IPv4 or IPv6 prefix for which to show table entries.
table <table-name> <index index> <prefix prefix>—(Optional) Display table

information. Optionally, specify the table name, index, or prefix.
lcc number—(Routing matrix only) (Optional) Slot number of the T640 routing node
(or line-card chassis) that houses the FPC. Replace number with a value from 0
through 3.
show pfe route ! 277

mpls—(Optional) Display Packet Forwarding Engine Multiprotocol Label Switching

(MPLS) information.
summary—(Optional) Display summary of Packet Forwarding Engine information.
List of Sample Output show pfe route ip on page 278

show pfe route lcc summary (Routing Matrix) on page 278
show pfe route ip user@host> show pfe route ip
IPv4 Route Table 0, default.0, 0x0:

Destination NH IP Addr Type NH ID Interface
--------------------------------- --------------- -------- ----- ---------
default Discard 8
127.0.0.1 127.0.0.1 Local 256
172.16/12 192.168.71.254 Unicast 68 fxp0.0
192.168.0/18 192.168.71.254 Unicast 68 fxp0.0
192.168.40/22 192.168.71.254 Unicast 68 fxp0.0
192.168.64/18 192.168.71.254 Unicast 68 fxp0.0
192.168.64/21 Resolve 67 fxp0.0
192.168.71.249 192.168.71.249 Local 66
192.168.220.0/30 Resolve 303 fe-0/0/0.0
192.168.220.0 192.168.220.0 Receive 301 fe-0/0/0.0
224.0.0.1 Mcast 5
255.255.255.255 Bcast 6
...
show pfe route lcc user@host> show pfe route lcc 2 summary
summary
(Routing Matrix) Slot 0
IPv4 Route Tables:

Index Routes Size(b)
-------- ---------- ----------
Default 43 3081
1 4 281
MPLS Route Tables:

-------- ---------- ----------
Default 1 68
IPV6 Route Tables:

-------- ---------- ----------
Default 9 717
1 5 389
Slot 1
IPv4 Route Tables:

-------- ---------- ----------
Default 43 3081
1 4 281
278 ! show pfe route

MPLS Route Tables:

-------- ---------- ----------
Default 1 68
IPV6 Route Tables:

-------- ---------- ----------
Default 9 717
1 5 389
Slot 16
IPv4 Route Tables:

-------- ---------- ----------
Default 41 2938
1 4 281
MPLS Route Tables:

-------- ---------- ----------
Default 1 68
IPV6 Route Tables:

-------- ---------- ----------
Default 9 717
1 5 389
Slot 17
IPv4 Route Tables:

-------- ---------- ----------
Default 41 2938
1 4 281
MPLS Route Tables:

-------- ---------- ----------
Default 1 68
IPV6 Route Tables:

-------- ---------- ----------
Default 9 717
1 5 389
show pfe route ! 279

show pfe scb
Syntax show pfe scb
Description (M40 routers only) Display Packet Forwarding Engine System Control Board (SCB)
status and statistics information.
List of Sample Output show pfe scb on page 280
show pfe scb user@host> show pfe scb

SCB status:
Slot: Present
State: Online
Uptime: 1d 02:31
Failures: 0
Pending: 0

Open: 1
Close: 0
Sleep: 1
Wakeup: 0
Resync Request: 1
Resync Done: 1
Resync Fail: 0
Resync Time: 0
PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 10715 10594
Chassis 0 0
Boot 0 0
Next-hop 8 0
Jtree 0 0
Cprod 0 0
Route 11 0
Pfe 1592 1593
Dfw 0 0
Mastership 0 0
Empty 0 0
280 ! show pfe scb


bucket count
------ -----
0 5298
1 0
2 0
3 0
4 0
5 0
6 0
7 0
...

bucket count
------ -----
0 5298
1 0
2 0
3 0
4 2
5 3
6 1
7 1
...
show pfe scb ! 281

show pfe sfm
Syntax show pfe sfm slot
Description (M40e and M160 routers only) Display Packet Forwarding Engine Switching and
Forwarding Module (SFM) status and statistics information.
Options slot—Display statistics from the specified SFM slot. Replace slot with a value from
0 through 3.
Additional Information This command applies only to systems with multiple SFMs.
List of Sample Output show pfe sfm slot on page 282
show pfe sfm slot user@host> show pfe sfm 1

SFM 1 status:
Slot: Offline
State: Init
Downtime: 17:47:29
Failures: 167
Pending: 0

Open: 167
Close: 167
Sleep: 2
Wakeup: 1
Resync Request: 2
Resync Done: 2
Resync Fail: 0
Resync Time: 1
PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 0 0
Chassis 0 0
Boot 0 0
Next-hop 0 0
Jtree 0 0
Cprod 0 0
Route 0 0
Pfe 0 0
Dfw 0 0
Mastership 0 0
Empty 0 0
282 ! show pfe sfm


bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe sfm ! 283

show pfe ssb
Syntax show pfe ssb
Description (M20 routers only) Display Packet Forwarding Engine System and Switch Board
(SSB) status and statistics information.
List of Sample Output show pfe ssb on page 284
show pfe ssb user@host> show pfe ssb
SSB status:
Slot: Present
State: Online
Uptime (total): 11:23:27
Failures: 0
Pending: 0

---------------- -----------------
TTP Slot only
IFD All
IFL All
Nexthop All
COS All
Route All
SW Firewall All
HW Firewall All
PFE Statistics All
PIC Statistics None
Sampling All
Monitoring None
ASP None
L2TP None
Collector None
PIC Configuration None
Queue Statistics None
(null) None

Open: 1
Close: 0
Sleep: 0
Wakeup: 0
Resync Request: 0
Resync Done: 1
Resync Fail: 0
Resync Time: 0
284 ! show pfe ssb

PFE IPC statistics:

----------- ----------- -----------
Header 0 0
Test 0 0
Interface 737 9911
Chassis 0 0
Boot 0 0
Next-hop 48 0
Jtree 0 0
Cprod 0 0
Route 94 0
Pfe 2034 683
Dfw 8 0
Mastership 0 0
Sampling 0 0
GUCP 0 0
CoS 73 0
GCCP 0 0
GHCP 0 0
IRSD 0 0
Monitoring 0 0
RE 0 0
PIC 0 0
ASP cfg 0 0
ASP cmd 0 0
L2TP cfg 0 0
Collector 0 0
PIC state 0 0
Aggregator 0 0
Empty 0 0

bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
show pfe ssb ! 285


bucket count
------ -----
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
13 0
14 0
15 0
16 0
17 0
18 0
19 0
20 0
21 0
286 ! show pfe ssb

show pfe statistics dma
Syntax show pfe statistics dma
Syntax show pfe statistics dma

<lcc number>
Description Display Packet Forwarding Engine direct memory access (DMA) statistics.
Options none—Display all Packet Forwarding Engine direct memory access statistics.
fpc slot—(Routing matrix only) (Optional) Display statistics for a Flexible PIC
Concentrator (FPC) slot.
user@host> show pfe statistics dma fpc 1 lcc 1

user@host> show pfe statistics dma fpc 9
lcc number—(Routing matrix only) (Optional) Display statistics for a specific T640
List of Sample Output show pfe statistics dma on page 287

show pfe statistics dma lcc (Routing Matrix) on page 288
show pfe statistics dma user@host> show pfe statistics dma

DMA Statistics:
Name Requests Completed Failed

-------------- ---------- ---------- ----------
Packet Read 905119 905119 0
Packet Write 943761 943761 0
Physical Read 0 0 0
Physical Write 0 0 0
DMA Errors:
Name Write 0 Write 1 Read 0 Read 1

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0 0 0
Address Range 0 0 0 0
ECC Error 0 0 0 0
PCI Retries 0 0 0 0
PCI Error 0 0 0 0
DMA Requests:
Requests available: 256, Requests used: 0
show pfe statistics dma ! 287

show pfe statistics dma user@host> show pfe statistics dma lcc 2
lcc (Routing Matrix)
Slot 0
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 10718 10718 0
Packet Write 9935 9935 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 0 0 0
Packet Write 0 0 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
Slot 1
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 2 2 0
Packet Write 10154 10154 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
288 ! show pfe statistics dma

Slot 16
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 0 0 0
Packet Write 0 0 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 0 0 0
Packet Write 0 0 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
Slot 17
DMA Statistics:

-------------- ---------- ---------- ----------
Packet Read 0 0 0
Packet Write 0 0 0
DMA Errors:

-------------- ---------- ---------- ---------- ----------
Illegal Bank 0 0
Address Range 0 0
ECC Error 0 0
DMA Requests:
show pfe statistics dma ! 289

show pfe statistics error
Syntax show pfe statistics error
Syntax show pfe statistics error

<lcc number>
Description Display Packet Forwarding Engine error statistics.
Options none—Display all Packet Forwarding Engine error statistics.
fpc slot—(Routing matrix only) (Optional) Display error statistics for a Flexible PIC
Concentrator (FPC) slot. If you specify the number of a T640 routing node by
using the lcc number option (the recommended method), replace slot with a
value from 0 through 7. Otherwise, replace slot with a value from 0 through 31.
For example, the following commands have the same result:
user@host> show pfe statistics error fpc 1 lcc 1

user@host> show pfe statistics error fpc 9
lcc number—(Routing matrix only) (Optional) Display error statistics for a specific
List of Sample Output show pfe statistics error on page 290

show pfe statistics error lcc (Routing Matrix) on page 291
show pfe statistics user@host> show pfe statistics error

error
PFE error statistics:
C chip A1 chip A2 chip
---------- ---------- ----------
0 0 0 scan fail
0 0 N/A A1<->C FCS error
0 N/A 0 A2<->C FCS error
N/A 0 0 A<->B FCS error
B chip slots:
0 1 2 3
---------- ---------- ---------- ----------
0 0 0 0 scan fail
0 0 0 0 A1->B FCS error
0 0 0 0 correctable ECC error
0 0 0 0 uncorrectable ECC error
0 0 0 0 multiple ECC errors
0 0 0 0 B->HS link error
0 0 0 0 A1->Bm error
0 0 0 0 A2->Bo error
0 0 0 0 write buffer overflow
0 0 0 0 Bo FIFO sync error
290 ! show pfe statistics error

0 0 0 0 Bo FIFO size error

0 0 0 0 Bo stream stuck error
0 0 0 0 Bo SRAM parity error
4 5 6 7
---------- ---------- ---------- ----------
0 0 0 0 scan fail
0 0 0 0 correctable ECC error
0 0 0 0 uncorrectable ECC error
0 0 0 0 multiple ECC errors
0 0 0 0 B->HS link error
0 0 0 0 A1->Bm error
0 0 0 0 A2->Bo error
0 0 0 0 write buffer overflow
0 0 0 0 Bo FIFO sync error
0 0 0 0 Bo FIFO size error
0 0 0 0 Bo stream stuck error
0 0 0 0 Bo SRAM parity error
show pfe statistics user@host> show pfe statistics error lcc 2

error lcc
Slot 0
(Routing Matrix)
LCHIP Error statistics:
LCHIP 0 1 2 3
-------------------------------------------------------
Lin PIF: 0 0 0 0
Lin SRCTL: 0 0 0 0
Lout NLIF: 0 0 0 0
Lout DESRD: 0 0 0 0
Lout HDRF: 0 0 0 0
HSL Map for PFE complex 0 (Top):
Index HST Name ----> Index HSR Name Errors

===== ========================= ===== ==================== ======
***** No errors on this PFE *****
HSL Map for PFE complex 1 (Bottom):

===== ========================= ===== ==================== ======
Slot 1
LCHIP Error statistics:
LCHIP 0 1 2 3
-------------------------------------------------------
Lin PIF: 0 0 0 0
Lin SRCTL: 0 0 0 0
Lout NLIF: 0 0 0 0
Lout DESRD: 0 0 0 0
Lout HDRF: 0 0 0 0
HSL Map for PFE complex 1 (Bottom):

===== ========================= ===== ==================== ======
show pfe statistics error ! 291

show pfe statistics ip
Syntax show pfe statistics ip

<icmp | options>
Syntax show pfe statistics ip

<icmp | options>
<lcc number>
Description Display IPv4 Packet Forwarding Engine statistics.
Options none—Display all IPv4 Packet Forward Engine statistics.
user@host> show pfe statistics ip fpc 1 lcc 1

user@host> show pfe statistics ip fpc 9
icmp—(Optional) Display Packet Forwarding Engine IP ICMP statistics.
options—(Optional) Display Packet Forwarding Engine IP options statistics.
lcc number—(Routing matrix only) (Optional) Display error statistics for a specific
List of Sample Output show pfe statistics ip icmp on page 294

show pfe statistics ip options on page 294
292 ! show pfe statistics ip

Output Fields Table 74 lists the output fields for the show pfe statistics ip command. Output fields
Table 74: show pfe statistics ip Output Fields

ICMP Statistics ICMP statistics, including the following:
! requests—Number of ICMP notifications sent to the PFE. If a
throttler is configured, the number of notifications might not
reflect all requests made. (See the throttled icmps field description.)
! network unreachables—When route lookups fail, ICMP packets are
sent to the source. These packets are ICMP Type=“Destination
Unreachable” (3) and ICMP Code=“Network Unreachable” (0).
! ttl expired—Number of notifications processed as a result of
time-to-live (TTL) expiration packets.
! ttl captured—Number of TTL expired packets sent by PFE
interfaces to the Routing Engine.
! redirects—Number of ICMP errors sent with Type=Redirect (5).
! mtu exceeded—Number of ICMP errors sent with Type=Source
Quench (4).
! icmp/option handoffs—Number of packets that the PFE hardware
requests the PFE software to process.
ICMP errors ICMP errors, including the following:
! unknown unreachables—Unknown code (greater than 16) found for
an unknown unreachable type ICMP error.
! unsupported ICMP type—Any ICMP type other than UNREACH,
REDIRECT, TIME_EXCEED, and PARAM_PROB.
! unprocessed redirects—When trying to find the neighbor to send
redirects to, the PFE could not find the next-hop information.
! invalid ICMP type—Any ICMP type other than UNREACH,
! invalid protocol—An incorrect protocol was detected by the ICMP
processor.
! bad input interface—The PFE software cannot map the interface
index supplied by the chips to a proper if1 data structure in the
microkernel.
! throttled icmps—Number of requests dropped because of rate
limiting by the PFE.
! runts—Number of packets for which the IP header length is less
than the minimum length that is supported.
ICMP Discards ICMP discard statistics, including the following:
! multicasts—ICMP packets are not sent for link-layer multicast
packets. These are counted as invalid source addresses (not a
unicast address or all zeros).
! bad source addresses—ICMP packets were received from an
invalid source address (not a unicast address or all zeros).
! bad dest addresses—ICMP packets were sent to an invalid
destination address (not a unicast address or all zeros).
! IP fragments—ICMP responses are sent only for the first
fragments. The rest do not receive a response. This is the count for
ICMP requests that receive no response.
! ICMP errors—Number of ICMP error packets.
show pfe statistics ip ! 293

show pfe statistics ip user@host> show pfe statistics ip icmp

icmp ICMP Statistics:
0 requests
0 network unreachables
0 ttl expired
0 ttl captured
0 redirects
0 mtu exceeded
0 icmp/option handoffs
ICMP Errors:
0 unknown unreachables
0 unsupported ICMP type
0 unprocessed redirects
0 invalid ICMP type
0 invalid protocol
0 bad input interface
0 throttled icmps
0 runts
ICMP Discards:
0 multicasts
0 bad source addresses
0 bad dest addresses
0 IP fragments
0 ICMP errors
show pfe statistics ip user@host> show pfe statistics ip options

options IP Option Values:
LSRR/SSRR forwarding enabled
IP Option Statistics:
0 loose source routes
0 strict source routes
0 record routes
889382 router alerts
0 other options
IP Option Errors:
0 runts
2 bad versions
0 runt header lengths
0 giant header lengths
0 null frames
0 bad option lengths
0 duplicate options
0 bad option pointers
0 source route frames dropped
294 ! show pfe statistics ip

show pfe statistics ip6
Syntax show pfe statistics ip6

<icmp>
Syntax show pfe statistics ip6

<icmp>
<lcc number>
Description Display Packet Forwarding Engine IPv6 statistics.
Options none—Display all Packet Forwarding Engine IPv6 statistics.
Concentrator slot. If you specify the number of a T640 routing node by using
the lcc number option (the recommended method), replace slot with a value
from 0 through 7. Otherwise, replace slot with a value from 0 through 31. For
example, the following commands have the same result:
user@host> show pfe statistics ip6 fpc 1 lcc 1

user@host> show pfe statistics ip6 fpc 9
icmp—(Optional) Display Packet Forwarding Engine IP ICMP statistics.
List of Sample Output show pfe statistics ip6 icmp on page 297
Output Fields Table 75 on page 296 lists the output fields for the show pfe statistics ip6
show pfe statistics ip6 ! 295

Table 75: show pfe statistics ip6 Output Fields

ICMP6 Statistics ICMP6 statistics, including the following:
! requests—Number of ICMP notifications sent to the PFE. If a
throttler is configured, the number of notifications might not
reflect all requests made. (See the throttled icmps field description.)
! network unreachables—When route lookups fail, ICMP packets are
sent to the source. These packets are ICMP Type=“Destination
Unreachable” (3) and ICMP Code=“Network Unreachable” (0).
! ttl expired—Number of notifications processed as a result of
time-to-live (TTL) expiration packets.
! ttl captured—Number of TTL expired packets sent by PFE
interfaces to the Routing Engine.
! redirects—Number of ICMP errors sent with Type=Redirect (5).
! mtu exceeded—Number of ICMP errors sent with Type=Source
Quench (4).
! icmp/option handoffs—Number of packets that the PFE hardware
requests the PFE software to process.
ICMP6 errors ICMP6 errors, including the following:
! unknown unreachables—Unknown code (greater than 16) found for
an unknown unreachable type ICMP error.
! unsupported ICMP type—Any ICMP type other than UNREACH,
! unprocessed redirects—When trying to find the neighbor to send
redirects to, the PFE could not find the next-hop information.
! invalid ICMP type—Any ICMP type other than UNREACH,
! invalid protocol—An incorrect protocol was detected by the ICMP
processor.
! bad input interface—The PFE software cannot map the interface
index supplied by the chips to a proper if1 data structure in the
microkernel.
! throttled icmps—Number of requests dropped because of rate
limiting by the PFE.
! runts—Number of packets for which the IP header length is less
than the minimum length that is supported.
ICMP6 Discards ICMP6 discard statistics, including the following:
! multicasts—ICMP packets are not sent for link-layer multicast
packets. These are counted as invalid source addresses (not a
unicast address or all zeros).
! bad source addresses—ICMP packets were received from an
invalid source address (not a unicast address or all zeros).
! bad dest addresses—ICMP packets were sent to an invalid
destination address (not a unicast address or all zeros).
! IP fragments—ICMP responses are sent only for the first
fragments. The rest do not receive a response. This is the count for
ICMP requests that receive no response.
! ICMP errors—Number of ICMP error packets.
296 ! show pfe statistics ip6

show pfe statistics ip6 user@host> show pfe statistics ip6 icmp
icmp ICMP6 Statistics:
0 requests
0 network unreachables
0 ttl expired
0 ttl captured
0 redirects
0 mtu exceeded
0 icmp/option handoffs
ICMP6 Errors:
0 unknown unreachables
0 unsupported ICMP type
0 unprocessed redirects
0 invalid ICMP type
0 invalid protocol
0 bad input interface
0 throttled icmps
0 runts
ICMP6 Discards:
0 multicasts
0 bad source addresses
0 bad dest addresses
0 IP fragments
0 ICMP errors
show pfe statistics ip6 ! 297

show pfe statistics notification
Syntax show pfe statistics notification
Syntax show pfe statistics notification

<lcc number>
Description Display Packet Forwarding Engine notification statistics.
Options none—(Routing matrix only) Display statistics about the Packet Forwarding Engine
notification on the TX Matrix platform and its attached T640 routing nodes.
fpc slot—(Routing matrix only) (Optional) Display notification for a Flexible PIC
user@host> show pfe statistics notification fpc 1 lcc 1

user@host> show pfe statistics notification fpc 9
lcc number—(Routing matrix only) (Optional) Display notification for a specific T640
List of Sample Output show pfe statistics notification on page 298

show pfe statistics notification lcc (Routing Matrix) on page 299
show pfe statistics user@host> show pfe statistics notification

notification PFE Notification statistics:
2453 parsed
0 aged
0 corrupt
0 illegal
0 sample
0 giants
0 transit options/ttl-exceeded
PFE Notification Type statistics:

Parsed Input Failed Ignored
Illegal 0 0 0 0
Unclass 1733 1733 0 0
Option 0 0 0 0
Next-Hop 720 720 0 0
Discard 0 0 0 0
Sample 0 0 0 0
Redirect 0 0 0 0
DontFrag 0 0 0 0
CfDF 0 0 0 0
298 ! show pfe statistics notification

show pfe statistics user@host> show pfe statistics notification lcc 0

notification lcc
(Routing Matrix) Slot 0
PFE Notification statistics:

1252 parsed
0 aged
0 corrupt
0 illegal
0 sample
0 giants
0 transit options/ttl-exceeded
0 transit options/ttl-exceeded errors
0 svc options sent to ASP
0 svc options sent to RE
0 post svc options sent out
121 options or ttl expired (not RE-destined)
PFE Notification Type statistics:

Parsed Input Failed Ignored
Illegal 0 0 0 0
Unclass 695 695 0 0
Option 30 30 0 0
Next-Hop 527 527 0 0
Discard 0 0 0 0
Sample 0 0 0 0
Redirect 0 0 0 0
DontFrag 0 0 0 0
CfDF 0 0 0 0
Poison 0 0 0 0
Slot 1
PFE Notification statistics:

0 parsed
0 aged
...
show pfe statistics notification ! 299

show pfe statistics pio
Syntax show pfe statistics pio
Syntax show pfe statistics pio

<lcc number>
Description Display Packet Forwarding Engine polled I/O (PIO) statistics.
Options none—(Routing matrix only) Display statistics about the Packet Forwarding Engine
polled I/O on the TX Matrix platform and its attached T640 routing nodes.
user@host> show pfe statistics pio fpc 1 lcc 1

user@host> show pfe statistics pio fpc 9
List of Sample Output show pfe statistics pio on page 300

show pfe statistics pio lcc (Routing Matrix) on page 300
show pfe statistics pio user@host> show pfe statistics pio
PIO Statistics:
8542732 PIO read requests

8542732 PIO read replies
586193 PIO write requests
586191 PIO write replies
0 PIO error replies
0 PIO bad requests
0 PIO bad replies
0 PIO bad address
0 PIO extra replies
0 PIO timeouts
show pfe statistics pio user@host> show pfe statistics pio lcc 0
lcc (Routing Matrix) Slot 0
PIO Statistics (chip 0):
425582 PIO reads
120303 PIO writes
PIO Statistics (chip 1):
406993 PIO reads
117769 PIO writes
...
300 ! show pfe statistics pio

show pfe statistics traffic
Syntax show pfe statistics traffic

<fpc slot>
Syntax show pfe statistics traffic

<lcc number>
Description Display Packet Forwarding Engine traffic statistics.
Options none—Display statistics about PFE traffic.

On the TX Matrix platform, display statistics about PFE traffic for all its attached
T640 routing nodes.
fpc slot—(T-Series and M320 routers only) (Optional) Display statistics for a Flexible
PIC Concentrator (FPC) slot. If you specify the number of a T640 routing node
by using the lcc number option (the recommended method), replace slot with a
user@host> show pfe statistics traffic fpc 1 lcc 1

user@host> show pfe statistics traffic fpc 9
List of Sample Output show pfe statistics traffic on page 302
Output Fields Table 76 lists the output fields for the show pfe statistics traffic command. Output
Table 76: show pfe statistics traffic Output Fields (1 of 2)

Packet Forwarding Engine Information about Packet Forwarding Engine traffic:
Traffic statistics
! Input Packets—Number and rate of input packets.
! Output Packets—Number and rate of output packets.
Packet Forwarding Engine Information about Packet Forwarding Engine local traffic:
Local Traffic statistics
! Local packets input—Number of local input packets.
! Local packets output—Number of local output packets.
! Software input high drops—Number of software input high-priority drops.
! Software input medium drops—Number of software input medium-priority drops.
! Software input low drops—Number of software input low-priority drops.
! Software output drops—Number of software output drops.
! Hardware input drops—Number of hardware input drops.
show pfe statistics traffic ! 301

Table 76: show pfe statistics traffic Output Fields (2 of 2)

Packet Forwarding Engine Information about the Packet Forwarding Engine Local Protocol:
Local Protocol statistics
! HDLC keepalives—Number of HDLC keepalive packets.
! ATM OAM—Number of Asynchronous Transfer Mode (ATM) Operation, Administration, and
Maintenance (OAM) packets.
! Frame Relay LMI—Number of Frame Relay Local Management Interface (LMI) packets.
! PPP LCP/NCP—Number of Point-to-Point Protocol (PPP) Link Control Protocol (LCP) or Network
Control Protocol (NCP) packets.
! OSPF hello—Number of Open Shortest Path First (OSPF) hello packets.
! OSPF3 hello—Number of Open Shortest Path First version 3 (OSPFv3) hello packets.
! RSVP hello—Number of Reservation Setup Protocol (RSVP) hello packets.
! LDP hello—Number of Label Distribution Protocol (LDP) hello packets.
! BFD—Number of Bidirectional Forwarding Detection Protocol (BFD) hello packets.
! IS-IS IIH—Number of Intermediate System-to-Intermediate System Hello (IIH) packets.
Packet Forwarding Engine Information about Packet Forwarding Engine hardware discards:
Hardware Discard
statistics ! Timeout—Number of packets discarded because of timeouts.
! Truncated key—Number of packets discarded because of truncated keys.
! Bits to test—Number of bits to test.
! Data error—Number of packets discarded because of data errors.
! Stack underflow—Number of packets discarded because of stack underflows.
! Stack overflow—Number of packets discarded because of stack overflows.
! Normal discard—Number of packets discarded because of discard routes.
! Extended discard—Number of packets discarded because of illegal next hops.
! Invalid interface—Number of packets discarded because of invalid incoming interfaces.
! Info cell drops—Number of information cell drops.
! Fabric drops—Number of fabric drops.
show pfe statistics user@host> show pfe statistics traffic

traffic Packet Forwarding Engine traffic statistics:
Input packets: 46717727 27 pps
Output packets: 748984 4 pps
Packet Forwarding Engine local traffic statistics:
Local packets input : 42800731
Local packets output : 499430
Software input high drops : 0
Software input medium drops: 1456047
Software input low drops : 0
Software output drops : 4
Hardware input drops : 0
Packet Forwarding Engine local protocol statistics:
HDLC keepalives : 0
ATM OAM : 0
Frame Relay LMI : 0
PPP LCP/NCP : 257643
OSPF hello : 0
OSPF3 hello : 0
RSVP hello : 0
LDP hello : 0
BFD : 0
IS-IS IIH : 0
302 ! show pfe statistics traffic

Packet Forwarding Engine hardware discard statistics:

Timeout : 0
Truncated key : 0
Bits to test : 0
Data error : 0
Stack underflow : 0
Stack overflow : 0
Normal discard : 55017
Extended discard : 0
Invalid interface : 0
Info cell drops : 0
Fabric drops : 0
show pfe statistics traffic ! 303

show pfe terse
Syntax show pfe terse
Syntax show pfe terse

Description Display Packet Forwarding Engine status information.
Options none—(Routing matrix only) Display brief information about the Packet Forwarding
Engine on the TX Matrix platform and its attached T640 routing nodes.
lcc number—(Routing matrix only) (Optional) Display Packet Forwarding Engine

information for a specific T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Display Packet Forwarding Engine

information for the TX Matrix platform (or switch-card chassis).
List of Sample Output show pfe terse on page 304
show pfe terse user@host> show pfe terse

Slot Type Slot State Flags Uptime
0 SFM Present Online 0x0bf 01:25:42
2 SFM Present Online 0x0bf 01:25:40
0 FPC Present Online 0x102 01:25:57
304 ! show pfe terse

Chapter 10
Remote System Access Operational
Mode Commands
access remote systems. Commands are listed in alphabetical order.
Table 77: Remote System Access Operational Mode Commands
Task Command
Open a Secure Shell (SSH) connection to a remote system. ssh on page 306
Open a telnet session to a remote system. telnet on page 308
NOTE: To configure SSH and Telnet parameters, see the JUNOS System Basics
Configuration Guide.
! 305
ssh
Syntax ssh host

<bypass-routing>
<inet | inet6>
<logical-router logical-router-name>
<source address>
<v1 | v2>
Description Use the Secure Shell (SSH) program to open a connection between a local router
and a remote system and execute commands on the remote system. You can issue
the ssh command from the JUNOS CLI to log in to a remote system or from a
remote system to log in to the local router. When executing this command, you
include one or more CLI commands by enclosing them in quotation marks and
separating the commands with semicolons:
ssh address ‘cli-command1; cli-command2’
Options host—Name or address of the remote system.
inet | inet6—(Optional) Create an IPv4 or IPv6 connection, respectively.
interface interface-name—(Optional) Interface name for the SSH session. (This

option does not work when default-address-selection is configured at the [edit
system] hierarchy level, because this configuration uses the loopback interface
as the source address for all locally generated IP packets.)
logical-router logical-router-name—(Optional) Name of a particular logical router for

the SSH attempt.

the SSH attempt.
source address—(Optional) Source address of the SSH connection.
v1 | v2—(Optional) Use SSH version 1 or 2, respectively, when connecting to a

remote host.
Additional Information To configure an SSH (version 1) key for your user account, include the authentication
ssh-rsa statement at the [edit system login user user-name] hierarchy level. To
configure an SSH (version 2) key for your user account, include the authentication
dsa-rsa statement at the [edit system login user user-name] hierarchy level. For
details, see the JUNOS System Basics Configuration Guide.
306 ! ssh
Chapter 10: Remote System Access Operational Mode Commands
Beginning with Release 8.0, you can limit the number of times a user can attempt
to enter a password while logging in through SSH. To specify the number of times a
user can attempt to enter a password to log in through SSH, include the retry-options
statement at the [edit system login] hierarchy level. For details, see the JUNOS
If you use SSH to connect between a router running JUNOS Release 5.x and one
running Release 4.x, the console displays warnings because of minor discrepancies
between the two implementations: “Warning: Server lies about size of server host
key: actual size is 1023 bits vs. announced 1024. Warning: This may be due to an
old implementation of ssh.” The warnings are informational and do not affect SSH
operation.
List of Sample Output ssh host on page 307
request.
ssh host user@host> ssh cree

Host key not found from the list of known hosts.
Are you sure you want to continue connecting (yes/no)? yes
Host ‘cree’ added to the list of known hosts.
boojun@cree’s password:
Last login: Sun Jun 21 10:43:42 1998 from junos-router
% ...
ssh ! 307
telnet
Syntax telnet host

<8bit>
<bypass-routing>
<inet | inet6>
<logical-router logical-router-name>
<no-resolve>
<port port-number>
Description Open a telnet session to a remote system.
Type Ctrl+] to escape from the telnet session to the telnet command level, and
then type quit to exit from telnet.
Options host—Name or address of the remote system.
8bit—(Optional) Use an 8-bit data path.
inet | inet6—(Optional) Open an IPv4 or IPv6 session, respectively.
interface interface-name—(Optional) Interface name for the telnet session. (This

option does not work when default-address-selection is configured at the [edit
system] hierarchy level, because this configuration uses the loopback interface
as the source address for all locally generated IP packets.)
logical-router logical-router-name—(Optional) Name of a particular logical router for

the telnet attempt.

to the IP address.
port port-number—(Optional) Port number or service name on the remote system.

the telnet attempt.
source source-address—(Optional) Source address of the telnet connection.
Additional Information Beginning with Release 8.0, you can limit the number of times a user can attempt
to enter a password while logging in through telnet. To specify the number of times
a user can attempt to enter a password to log in through telnet, include the
retry-options statement at the [edit system login] hierarchy level. For details, see the
JUNOS System Basics Configuration Guide.
308 ! telnet
Chapter 10: Remote System Access Operational Mode Commands
List of Sample Output telnet host on page 309
request.
telnet host user@host> telnet 192.154.1.254

Trying 192.154.169.254...
Connected to level5.company.net.
Escape character is '^]'.
ttypa
login:
telnet ! 309
310 ! telnet
Chapter 11
Simple Network Management Protocol
Table 78 summarizes the command-line interface (CLI) commands that allow you to
monitor the Simple Network Management Protocol (SNMP). Commands are listed
in alphabetical order.
Table 78: SNMP Operational Commands
Task Command
Clear SNMP statistics. clear snmp statistics on page 312
Display information about health monitor alarms. show snmp health-monitor on

page 313
Display statistics about SNMP informs. show snmp inform-statistics on
page 320
Display local Management Information Base (MIB) object show snmp mib on page 321
values through the command-line interface (CLI).
Display information about Remote Monitoring (RMON) show snmp rmon on page 323
alarms and events.
Display statistics about SNMP packets sent and received. show snmp statistics on page 326
Display SNMP version 3 statistics. show snmp v3 on page 329
NOTE: For information about how to configure SNMP, see the JUNOS Network
Management Configuration Guide.
! 311
clear snmp statistics
Syntax clear snmp statistics
Description Clear Simple Network Management Protocol (SNMP) statistics.
See Also show snmp statistics on page 328
List of Sample Output clear snmp statistics on page 312
Output Fields See show snmp statistics on page 326 for an explanation of output fields.
clear snmp statistics In the following example, SNMP statistics are displayed before and after the clear
snmp statistics command is issued:
user@host> show snmp statistics

SNMP statistics:
Input:
Packets: 8, Bad versions: 0, Bad community names: 0,
Bad community uses: 0, ASN parse errors: 0,
Too bigs: 0, No such names: 0, Bad values: 0,
Read onlys: 0, General errors: 0,
Total request varbinds: 8, Total set varbinds: 0,
Get requests: 0, Get nexts: 8, Set requests: 0,
Get responses: 0, Traps: 0,
Silent drops: 0, Proxy drops 0
Output:
Packets: 2298, Too bigs: 0, No such names: 0,
Bad values: 0, General errors: 0,
Get responses: 8, Traps: 2290
user@host> clear snmp statistics
user@host> show snmp statistics

SNMP statistics:
Input:
Silent drops: 0, Proxy drops 0
Output:
312 ! clear snmp statistics

Chapter 11: Simple Network Management Protocol Operational Mode Commands
show snmp health-monitor
Syntax show snmp health-monitor

<alarms <detail>> | <logs>
Description Display information about Simple Network Management Protocol (SNMP) health
monitor alarms and logs.
Options none—Display information about all health monitor alarms and logs.
alarms <detail>—(Optional) Display detailed information about health monitor

alarms.
logs—(Optional) Display information about health monitor logs.
List of Sample Output show snmp health-monitor on page 315

show snmp health-monitor alarms detail on page 317
Output Fields Table 79 describes the output fields for the show snmp health-monitor command.
Table 79: show snmp health-monitor Output Fields (1 of 2)

Alarm Index Alarm identifier. All levels
Variable description Description of the health monitor object instance being monitored. All levels
Variable name Name of the health monitor object instance being monitored. All levels
Value Current value of the monitored variable in the most recent sample interval. All levels
State State of the alarm or event entry. It can be one of the following: All levels
! Alarms:
! active—Entry is fully configured and activated.
! falling threshold crossed—Value of the variable has crossed the lower
threshold limit.
! rising threshold crossed—Value of the variable has crossed the upper
threshold limit.
! under creation—Entry is being configured and is not yet activated.
! startup—Alarm is waiting for the first sample of the monitored variable.
! object not available—Monitored variable of that type is not available to the
health monitor agent.
! instance not available—Monitored variable’s instance is not available to the
health monitor agent.
! object type invalid—Monitored variable is not a numeric value.
! object processing errored—An error occurred when the monitored variable
was processed.
! unknown—State is not one of the above.
Variable OID Object ID to which the variable name is resolved. The format is x.x.x.x. detail
show snmp health-monitor ! 313

Table 79: show snmp health-monitor Output Fields (2 of 2)

Sample type Method of sampling the monitored variable and calculating the value to compare detail
against the upper and lower thresholds. It can have the value of absolute value or
delta value.
Startup alarm Alarm that might be sent when this entry is first activated, depending on the detail
following criteria:
! Alarm is sent when one of the following situations exists:
! Value of the alarm is above or equal to the rising threshold and the startup
type is either rising alarm or rising or falling alarm.
! Value of the alarm is below or equal to the falling threshold and the startup
type is either falling alarm or rising or falling alarm.
! Alarm is not sent when one of the following situations exists:
type is falling alarm.
type is rising alarm.
! Value of the alarm is between the thresholds.
Owner Name of the entry configured by the user. If the entry was created through the detail
CLI, the owner has monitor prepended to it.
Creator Mechanism by which the entry was configured (Health Monitor). detail
Sample interval Time period between samples (in seconds). detail
Rising threshold Upper limit threshold value as a percentage of the maximum possible value. detail
Falling threshold Lower limit threshold value as a percentage of the maximum possible value. detail
Rising event index Event triggered when the rising threshold is crossed. detail
Falling event index Event triggered when the falling threshold is crossed. detail
314 ! show snmp health-monitor

show snmp user@host> show snmp health-monitor

health-monitor
Alarm
Index Variable description Value State
32768 Health Monitor: root file system utilization

jnxHrStoragePercentUsed.1 58 active
32769 Health Monitor: /config file system utilization

jnxHrStoragePercentUsed.2 0 active
32770 Health Monitor: RE 0 CPU utilization

jnxOperatingCPU.9.1.0.0 0 active
32773 Health Monitor: RE 0 Memory utilization

jnxOperatingBuffer.9.1.0.0 35 active
32775 Health Monitor: jkernel daemon CPU utilization

Init daemon 0 active
Chassis daemon 50 active
Firewall daemon 0 active
Interface daemon 5 active
SNMP daemon 11 active
MIB2 daemon 42 active
Sonet APS daemon 0 active
VRRP daemon 0 active
Alarm daemon 3 active
PFE daemon 0 active
CRAFT daemon 0 active
Traffic sampling control daemon 0 active
Ilmi daemon 0 active
Remote operations daemon 0 active
CoS daemon 0 active
Pic Services Logging daemon 0 active
Internal Routing Service Daemon 3 active
Network Access Service daemon 0 active
Forwarding UDP daemon 0 active
Routing socket proxy daemon 0 active
Disk Monitoring daemon 1 active
Inet daemon 0 active
Syslog daemon 0 active
Adaptive Services PIC daemon 0 active
ECC parity errors logging Daemon 0 active
Layer 2 Tunneling Protocol daemon 0 active
PPPoE daemon 3 active
Redundancy device daemon 0 active
PPP daemon 0 active
Dynamic Flow Capture Daemon 0 active
32776 Health Monitor: jroute daemon CPU utilization

Routing protocol daemon 1 active
Management daemon 0 active
Command line interface 4 active
Periodic Packet Management daemon 0 active
Link Management daemon 0 active
Pragmatic General Multicast daemon 0 active
Bidirectional Forwarding Detection daemon 0 active
SDX daemon 0 active
audit daemon 0 active
Event daemon 0 active

32777 Health Monitor: jcrypto daemon CPU utilization

IPSec Key Management daemon 0 active
32779 Health Monitor: jkernel daemon Memory utilization

Init daemon 47384 active
Chassis daemon 20204 active
Firewall daemon 1956 active
Interface daemon 3340 active
SNMP daemon 4540 active
MIB2 daemon 3880 active
Sonet APS daemon 2632 active
VRRP daemon 2672 active
Alarm daemon 1856 active
PFE daemon 2600 active
CRAFT daemon 2000 active
Traffic sampling control daemon 3164 active
Ilmi daemon 2132 active
Remote operations daemon 2964 active
CoS daemon 3044 active
Pic Services Logging daemon 1944 active
Internal Routing Service Daemon 1392 active
Network Access Service daemon 1992 active
Forwarding UDP daemon 1876 active
Routing socket proxy daemon 1296 active
Disk Monitoring daemon 1180 active
Inet daemon 1296 active
Syslog daemon 1180 active
Adaptive Services PIC daemon 3220 active
ECC parity errors logging Daemon 1100 active
Layer 2 Tunneling Protocol daemon 3372 active
PPPoE daemon 1424 active
Redundancy device daemon 1820 active
PPP daemon 2060 active
Dynamic Flow Capture Daemon 10740 active
32780 Health Monitor: jroute daemon Memory utilization

Routing protocol daemon 8104 active
Command line interface 9912 active
Periodic Packet Management daemon 1484 active
Link Management daemon 2016 active
Pragmatic General Multicast daemon 1968 active
Bidirectional Forwarding Detection daemon 1956 active
SDX daemon 1772 active
audit daemon 1772 active
Event daemon 1808 active
32781 Health Monitor: jcrypto daemon Memory utilization

IPSec Key Management daemon 5600 active

show snmp user@host> show snmp health-monitor alarms detail

health-monitor alarms
detail Alarm Index 32768:
Variable name jnxHrStoragePercentUsed.1
Variable OID 1.3.6.1.4.1.2636.3.31.1.1.1.1.1
Sample type absolute value
Startup alarm rising alarm
Owner Health Monitor: root file system
utilization
Creator Health Monitor
State active
Sample interval 300 seconds
Rising threshold 80
Falling threshold 70
Rising event index 32768
Falling event index 32768
Instance Value: 58
Instance State: active
Alarm Index 32769:

Variable name jnxHrStoragePercentUsed.2
Variable OID 1.3.6.1.4.1.2636.3.31.1.1.1.1.2
Owner Health Monitor: /config file system
utilization
State active
Rising threshold 80
Instance Value: 0
Alarm Index 32770:

Variable name jnxOperatingCPU.9.1.0.0
Variable OID 1.3.6.1.4.1.2636.3.1.13.1.8.9.1.0.0
Owner Health Monitor: RE 0 CPU utilization

State active
Rising threshold 80
Instance Value: 0

Alarm Index 32773:

Variable name jnxOperatingBuffer.9.1.0.0
Variable OID 1.3.6.1.4.1.2636.3.1.13.1.11.9.1.0.0
Owner Health Monitor: RE 0 Memory utilization

State active
Rising threshold 80
Instance Value: 35
Alarm Index 32775:

Variable name sysApplElmtRunCPU.3
Variable OID 1.3.6.1.2.1.54.1.2.3.1.9.3
Sample type delta value
Owner Health Monitor: jkernel daemon CPU
utilization
State active
Rising threshold 24000
Instance Name: sysApplElmtRunCPU.3.1.1
Instance Description: Init daemon
Instance Value: 0

Instance Description: Chassis daemon
Instance Value: 50

Instance Description: Firewall daemon
Instance Value: 0

Instance Description: Interface daemon
Instance Value: 5

Instance Description: SNMP daemon
Instance Value: 11

Instance Description: MIB2 daemon
Instance Value: 42


Instance Description: Sonet APS daemon
Instance Value: 0

Instance Description: VRRP daemon
Instance Value: 0

Instance Description: Alarm daemon
Instance Value: 3

Instance Description: PFE daemon
Instance Value: 0

Instance Description: CRAFT daemon
Instance Value: 0

Instance Description: Traffic sampling control daemon
---(more 23%)---

show snmp inform-statistics
Syntax show snmp inform-statistics
Description Display information about Simple Network Management Protocol (SNMP) inform
requests.
List of Sample Output show snmp inform-statistics on page 320
Output Fields Table 80 describes the output fields for the show snmp inform-statistics command.
Table 80: show snmp inform-statistics Output Fields

Target Name Name of the device configured to receive and respond to SNMP informs.
Address IP address of the target device.
Sent Number of informs sent to the target device and acknowledged by the
target device.
Pending Number of informs held in memory pending a response from the target device.
Discarded Number of informs discarded after the specified number of retransmissions to
the target device were attempted.
Timeouts Number of informs that did not receive an acknowledgement from the target
device within the timeout specified.
Probe Failures Connection failures that occurred (for example, when the target server returned
invalid content or you incorrectly configured the target address).
show snmp user@host> show snmp inform-statistics

inform-statistics Inform Request Statistics:
Target Name: TA1_v3_md5_none Address: 172.17.20.184
Sent: 176, Pending: 0
Discarded: 0, Timeouts: 0, Probe Failures: 0
Target Name: TA2_v3_sha_none Address: 192.168.110.59
Sent: 0, Pending: 4
Target Name: TA5_v2_none Address: 172.17.20.184
Sent: 0, Pending: 0
320 ! show snmp inform-statistics

show snmp mib
Syntax show snmp mib (get | get-next | walk)

<name |”name name name ...”>
Description Display local Simple Network Management Protocol (SNMP) Management

Information Base (MIB) object values.
Options get—Retrieve and display one or more SNMP object values.
get-next—Retrieve and display the next SNMP object values.
walk—Retrieve and display the SNMP object values that are associated with the
requested object identifier (OID). When you use this option, the JUNOS
software displays the objects below the subtree that you specify.
name—(Optional) The object can be represented by a sequence of dotted integers

(such as 1.3.6.1.2.1.2) or by its subtree name (such as interfaces). When
entering multiple objects, enclose the objects in quotation marks.
Required Privilege Level snmp—To view this statement in the configuration.
List of Sample Output show snmp mib get on page 321

show snmp mib get (Multiple Objects) on page 321
show snmp mib get-next on page 321
show snmp mib get-next (Specify an OID) on page 321
show snmp mib walk name on page 322
Output Fields Table 81 describes the output fields for the show snmp mib command. Output fields
Table 81: show snmp mib Output Fields

name Object name and numeric instance value.
object value Object value. The JUNOS software translates OIDs into the corresponding
object names.
show snmp mib get user@host> show snmp mib get sysObjectID.0
sysObjectID.0 = jnxProductNameM20
show snmp mib get user@host> show snmp mib get “sysObjectID.0 sysUpTime.0”
(Multiple Objects) sysObjectID.0 = jnxProductNameM20
sysUpTime.0 = 1640992
show snmp mib user@host> show snmp mib get-next jnxMibs

get-next jnxBoxClass.0 = jnxProductLineM20.0
show snmp mib user@host> show snmp mib get-next 1.3.6.1

get-next sysDescr.0 = Juniper Networks, Inc. m20 internet router, kernel
(Specify an OID) JUNOS release: 2004-1 Build date: build date UTC Copyright (c) 1996-2004 Juniper
Networks, Inc.
show snmp mib ! 321

show snmp mib walk user@host> show snmp mib walk system
name sysDescr.0 = Juniper Networks, Inc. m20 internet router, kernel
JUNOS release #0: 2004-1 Build date: build date UTC Copyright (c) 1996-2004
Juniper Networks, Inc.
sysObjectID.0 = jnxProductNameM20
sysUpTime.0 = 1640992
sysContact.0 = Your contact
sysName.0 = my router
sysLocation.0 = building 1
sysServices.0 = 4
322 ! show snmp mib

show snmp rmon
Syntax show snmp rmon

<alarms <brief | detail> | events <brief | detail> | logs>
Description Display information about Simple Network Management Protocol (SNMP) Remote
Monitoring (RMON) alarms and events.
Options none—Display information about all RMON alarms and events.
alarms—(Optional) Display information about RMON alarms.
brief | detail—(Optional) Display brief or detailed information about RMON alarms

or events.
events—(Optional) Display information about RMON events.
logs—(Optional) Display information about RMON monitoring logs.
List of Sample Output show snmp rmon on page 325

show snmp rmon alarms detail on page 325
show snmp rmon events detail on page 325
Output Fields Table 82 describes the output fields for the show snmp rmon command. Output
Table 82: show snmp rmon Output Fields (1 of 2)

Alarm Index Alarm identifier. All levels
State State of the alarm or event entry. It can be one of the following: All levels
! Alarms
! active—Entry is fully configured and activated.
! falling threshold crossed—Value of the variable has crossed the lower
threshold limit.
! rising threshold crossed—Value of the variable has crossed the upper
threshold limit.
! startup—Alarm is waiting for the first sample of the monitored variable.
! object not available—Monitored variable of that type is not available to the
SNMP agent.
! instance not available—Monitored variable’s instance is not available to the
SNMP agent.
! object type invalid—Monitored variable is not a numeric value.
! object processing errored—An error occurred when the monitored variable
was processed.
show snmp rmon ! 323

Table 82: show snmp rmon Output Fields (2 of 2)

State (continued) ! Events All levels
! active—Entry has been fully configured and activated.
Variable name Name of the SNMP object instance being monitored. All levels
Event Index Event identifier. All levels
Type Type of notification made when an event is triggered. It can be one of the detail
following:
! log—A system log message is generated and an entry is made to the log table.
! snmptrap—An SNMP trap is sent to the configured destination.
! log and trap—A system log message is generated, an entry is made to the log
table, and an SNMP trap is sent to the configured destination.
! none—Neither log nor trap will be sent.
Last Event Date and time of the last event. It has the format yyyy-mm-dd hh:mm:ss timezone. brief
Community Identifies the trap group used for sending the SNMP trap. detail
Variable OID Object ID to which the variable name is resolved. The format is x.x.x.x. detail
Sample type Method of sampling the monitored variable and calculating the value to compare detail
against the upper and lower thresholds. It can have the value of absolute value or
delta value.
Startup alarm Alarm that might be sent when this entry is first activated, depending on the detail
following criteria:
! Alarm is sent when one of the following situations exists:
type is either rising alarm or rising or falling alarm.
type is either falling alarm or rising or falling alarm.
! Alarm is not sent when one of the following situations exists:
type is falling alarm.
type is rising alarm.
! Value of the alarm is between the thresholds.
Owner Name of the entry configured by the user. If the entry was created through the detail
CLI, the owner has monitor prepended to it.
Creator Mechanism by which the entry was configured (CLI or SNMP). detail
Sample interval Time period between samples (in seconds). detail
Rising threshold Upper limit threshold value configured by the user. detail
Falling threshold Lower limit threshold value configured by the user. detail
Rising event index Event triggered when the rising threshold is crossed. detail
Falling event index Event triggered when the falling threshold is crossed. detail
Current value Current value of the monitored variable in the most recent sample interval. detail
324 ! show snmp rmon

show snmp rmon user@host> show snmp rmon
Alarm
Index State Variable name
1 falling threshold crossed ifInOctets.1
Event
Index Type Last Event
1 log and trap 2002-01-30 01:13:01 PST
show snmp rmon alarms user@host> show snmp rmon alarms detail
detail
Alarm Index 1:
Variable name ifInOctets.1
Variable OID 1.3.6.1.2.1.2.2.1.10.1
Sample type delta value
Startup alarm rising or falling alarm
Owner monitor
Creator CLI
State falling threshold crossed
Rising threshold 100000
Current value 0
show snmp rmon events user@host> show snmp rmon events detail
detail
Event Index 1:
Type log and trap
Community boy-elroy
Last event 2002-01-30 01:13:01 PST
Creator CLI
State active
show snmp rmon ! 325

show snmp statistics
Syntax show snmp statistics
Description Display statistics about Simple Network Management Protocol (SNMP) packets sent
and received by the router.
See Also clear snmp statistics on page 312
List of Sample Output show snmp statistics on page 328
Output Fields Table 83 describes the output fields for the show snmp statistics command. Output
Table 83: show snmp statistics Output Fields (1 of 3)

Input Information about received packets:
! Packets—(snmpInPkts) Total number of messages delivered to the SNMP entity from the transport service.
! Bad versions—(snmpInBadVersions) Total number of messages delivered to the SNMP entity that were for an
unsupported SNMP version.
! Bad community names—(snmpInBadCommunityNames) Total number of messages delivered to the SNMP entity
that used an SNMP community name not known to the entity.
! Bad community uses—(snmpInBadCommunityUses) Total number of messages delivered to the SNMP entity
that represented an SNMP operation that was not allowed by the SNMP community named in the message.
! ASN parse errors—(snmpInASNParseErrs) Total number of ASN.1 or BER errors encountered by the SNMP
entity when decoding received SNMP messages.
! Too bigs—(snmpInTooBigs) Total number of SNMP PDUs delivered to the SNMP entity with an error status field
of tooBig.
! No such names—(snmpInNoSuchNames) Total number of SNMP PDUs delivered to the SNMP entity with an
error status field of noSuchName.
! Bad values—(snmpInBadValues) Total number of SNMP PDUs delivered to the SNMP entity with an error status
field of badValue.
! Read onlys—(snmpInReadOnlys) Total number of valid SNMP PDUs delivered to the SNMP entity with an error
status field of readOnly. Only incorrect implementations of SNMP generate this error.
! General errors—(snmpInGenErrs) Total number of SNMP PDUs delivered to the SNMP entity with an error
status field of genErr.
! Total requests varbinds—(snmpInTotalReqVars) Total number of MIB objects retrieved successfully by the SNMP
entity as a result of receiving valid SNMP GetRequest and GetNext PDUs.
! Total set varbinds—(snmpInSetVars) Total number of MIB objects modified successfully by the SNMP entity as a
result of receiving valid SNMP SetRequest PDUs.
! Get requests—(snmpInGetRequests) Total number of SNMP GetRequest PDUs that have been accepted and
processed by the SNMP entity.
! Get nexts—(snmpInGetNexts) Total number of SNMP GetNext PDUs that have been accepted and processed
by the SNMP entity.
326 ! show snmp statistics


Input ! Set requests—(snmpInSetRequests) Total number of SNMP SetRequest PDUs that have been accepted and
(continued) processed by the SNMP entity.
! Get responses—(snmpInGetResponses) Total number of SNMP GetResponse PDUs that have been accepted
and processed by the SNMP entity.
! Traps—(snmpInTraps) Total number of SNMP traps generated by the SNMP entity.
! Silent drops—(snmpSilentDrops) Total number of
GetRequest, GetNextRequest, GetBulkRequest,
SetRequests, and InformRequest PDUs delivered to the SNMP entity that were silently dropped because
the size of a reply containing an alternate response PDU with an empty variable-bindings field was greater
than either a local constraint or the maximum message size associated with the originator of the requests.
! Proxy drops—(snmpProxyDrops) Total number of GetRequest, GetNextRequest, GetBulkRequest, SetRequests,
and InformRequest PDUs delivered to the SNMP entity that were silently dropped because the transmission of
the message to a proxy target failed in such a way (other than a timeout) that no response PDU could be
returned.
! Commit pending drops—Number of SNMP packets for Set requests dropped because of a previous pending
SNMP Set request on the committed configuration.
! Throttle drops—Number of SNMP packets for any requests dropped reaching the throttle limit.
V3 Input Information about SNMP version 3 packets:

! Unknown security models—(snmpUnknownSecurityModels) Total number of packets received by the SNMP
engine that were dropped because they referenced a security model that was not known to or supported by
the SNMP engine.
! Invalid messages—(snmpInvalidMsgs) Number of packets received by the SNMP engine that were dropped
because there were invalid or inconsistent components in the SNMP message.
! Unknown pdu handlers—(snmpUnknownPDUHandlers) Number of packets received by the SNMP engine that
were dropped because the PDU contained in the packet could not be passed to an application responsible for
handling the PDU type.
! Unavailable contexts—(snmpUnavailableContexts) Number of requests received for a context that is known to
the SNMP engine, but is currently unavailable.
! Unknown contexts—(snmpUnknownContexts) Total number of requests received for a context that is unknown
to the SNMP engine.
! Unsupported security levels—(usmStatsUnsupportedSecLevels) Total number of packets received by the SNMP
engine which were dropped because they requested a security level unknown to the SNMP engine (or
otherwise unavailable).
! Not in time windows—(usmStatsNotInTimeWindows) Total number of packets received by the SNMP engine that
were dropped because they appeared outside of the authoritative SNMP engine’s window.
! Unknown user names—(usmStatsUnknownUserNames) Total number of packets received by the SNMP engine
that were dropped because they referenced a user that was not known to the SNMP engine.
! Unknown engine ids—(usmStatsUnknownEngineIDs) Total number of packets received by the SNMP engine that
were dropped because they referenced an SNMP engine ID that was not known to the SNMP engine.
! Wrong digests—(usmStatsWrongDigests) Total number of packets received by the SNMP engine that were
dropped because they didn't contain the expected digest value.
! Decryption errors—(usmStatsDecryptionErrors) Total number of packets received by the SNMP engine that were
dropped because they could not be decrypted.
show snmp statistics ! 327


Output Information about transmitted packets:
! Packets—(snmpOutPkts) Total number of messages passed from the SNMP entity to the transport service.
! Too bigs—(snmpOutTooBigs) Total number of SNMP PDUs generated by the SNMP entity with an error status
field of tooBig.
! No such names—(snmpOutNoSuchNames) Total number of SNMP PDUs delivered to the SNMP entity with an
error status field of noSuchName.
! Bad values—(snmpOutBadValues) Total number of SNMP PDUs generated by the SNMP entity with an error
status field of badValue.
! General errors—(snmpOutGenErrs) Total number of SNMP PDUs generated the SNMP entity with an error
status field of genErr.
! Get requests—(snmpOutGetRequests) Total number of SNMP GetRequest PDUs generated by the SNMP
entity.
! Get nexts—(snmpOutGetNexts) Total number of SNMP GetNext PDUs generated by the SNMP entity.
! Set requests—(snmpOutSetRequests) Total number of SNMP SetRequest PDUs generated by the SNMP
entity.
! Get responses—(snmpOutGetResponses) Total number of SNMP GetResponse PDUs generated by the SNMP
entity.
! Traps—(snmpOutTraps) Total number of SNMP traps generated by the SNMP entity.
show snmp statistics user@host> show snmp statistics

SNMP statistics:
Input:
Silent drops: 0, Proxy drops: 0, Commit pending drops: 0,
Throttle drops: 0,
V3 Input:
Unknown security models: 0, Invalid messages: 0
Unknown pdu handlers: 0, Unavailable contexts: 0
Unknown contexts: 0, Unsupported security levels: 1
Not in time windows: 0, Unknown user names: 0
Unknown engine ids: 44, Wrong digests: 23, Decryption errors: 0
Output:
328 ! show snmp statistics

show snmp v3
Syntax show snmp v3

<access <brief | detail> | community | general | groups | notify <filter> |
target <address | parameters> | users>
Description Display the Simple Network Management Protocol version 3 (SNMPv3) operating
configuration.
Options none—Display all of the SNMPv3 operating configuration.
access—(Optional) Display SNMPv3 access information.
brief | detail—(Optional) Display brief or detailed information about SNMPv3 access

information.
community—(Optional) Display SNMPv3 community information.
general—(Optional) Display SNMPv3 general information.
groups—(Optional) Display SNMPv3 security-to-group information.
notify <filter>—(Optional) Display SNMPv3 notify, and optionally notify filter,

information.
target <address | parameters>—(Optional) Display SNMPv3 target, and optionally,

either target address or target parameter, information.
users—(Optional) Display SNMPv3 user information.
Additional Information To edit the default display of the show snmp v3 command, specify options in the
show statement at the [edit snmp v3] hierarchy level.
List of Sample Output show snmp v3 on page 330
Output Fields Table 84 describes the output fields for the show snmp v3 command. Output fields
Table 84: show snmp v3 Output Fields (1 of 2)

Access control Information about access control:
! Group—Group name for which the configured access privileges apply. The group, together with the
context prefix and the security model and security level, forms the index for this table.
! Context prefix—SNMPv3 context for which the configured access privileges apply.
! Security model/level—Security model and security level for which the configuration access privileges
apply.
! Read view—Identifies the MIB view applied to SNMPv3 read operations.
! Write view—Identifies the MIB view applied to SNMPv3 write operations.
! Notify view—Identifies the MIB view applied to outbound SNMP notifications.
show snmp v3 ! 329

Table 84: show snmp v3 Output Fields (2 of 2)

Engine Information about local engine configuration:
! Local engine ID—Identifier that uniquely and unambiguously identifies the local SNMPv3 engine.
! Engine boots—Number of times the local SNMPv3 engine has rebooted or reinitialized since the engine
ID was last changed.
! Engine time—Number of seconds since the local SNMPv3 engine was last rebooted or reinitialized.
! Max msg size—Maximum message size the sender can accommodate.
Engine ID Information about engine ID:

! Local engine ID—Identifier that uniquely and unambiguously identifies the local SNMPv3 engine.
! Engine boots—Number of times the local SNMPv3 engine has rebooted or reinitialized since the engine
ID was last changed.
! Engine time—Number of seconds since the local SNMPv3 engine was last rebooted or reinitialized.
! Max msg size—Maximum message size the sender can accommodate.
! Engine ID—SNMPv3 engine ID associated with each user.
! User—SNMPv3 user.
! Auth/Priv—Authentication and encryption algorithm available for use by each user.
! Storage—Indicates whether a user is saved to the configuration file (nonvolatile) or not (volatile).
Applies only to users with active status.
! Status—Status of the conceptual row. Only rows with an active status are used by the SNMPv3 engine.
Group name Name of the group to which this entry belongs.

Security model Identifies the security model context for the security name.
Security name Used with the security model; identifies a specific security name instance. Each security model/security
name combination can be assigned to a specific group.
Storage type Indicates whether a user is saved to the configuration file (nonvolatile) or not (volatile). Applies only to
users with active status.
Status Status of the conceptual row. Only rows with active status are used by the SNMPv3 engine.
show snmp v3 user@host> show snmp v3

Local engine ID: 80 00 0a 4c e04 31 32 33 34
Engine boots: 38
Engine time: 64583 seconds
Max msg size: 2048 bytes
Engine ID: local

User Auth/Priv Storage Status
user1 md5/des nonvolatile active
user2 sha/none nonvolatile active
user3 none/none nonvolatile active

Engine ID: 81 00 0a 4c 04 64 64 64 64
User Auth/Priv Storage Status
UNEW md5/none nonvolatile active
Group name Security Security Storage Status
model name type
g1 usm user1 nonvolatile active
330 ! show snmp v3

Access control:
Group Context Security Read Write Notify
prefix model/level view view view
g1 usm/privacy v1 v1
g2 usm/authent v1 v1
g3 usm/none v1 v1
show snmp v3 ! 331

332 ! show snmp v3

Chapter 12
System Software Operational Mode
Commands
perform and monitor system software management functions. Commands are
Table 85: System Software Operational Mode Commands (1 of 4)
Task Command
Clear the Address Resolution Protocol (ARP) table. clear arp on page 337
Clear a pending commit operation. clear system commit on page 338

Clear a pending system halt or reboot. clear system reboot on page 339
(J-series routing platform only) Remove obsolete IP address bindings clear system services dhcp binding on page 341
on a Dynamic Host Configuration Protocol (DHCP) server.
(J-series routing platform only) Clear IP addresses from the DHCP clear system services dhcp conflict on page 342
server conflicts list.
(J-series routing platform only) Clear DHCP server statistics. clear system services dhcp statistics on page 343
Enter configuration mode. configure on page 344
Execute an operation (op) script. op on page 345

Send messages to users currently logged in to the router. request message on page 346
On a routing platform with two Routing Engines, specify a tty request routing-engine login on page 347
connection for login
Collect information for customer support. request support information on page 348
Delete an existing rescue configuration. request system configuration rescue delete on page 351
Save the most recently committed configuration as the rescue request system configuration rescue save on page 352
configuration.
(J-series routing platform only) Upgrade or downgrade firmware. request system firmware on page 353
Stop the routing software. request system halt on page 354
(J-series routing platform only) Add a license key. request system license add on page 357
(J-series routing platform only) Delete a license key. request system license delete on page 358
(J-series routing platform only) Save installed license keys to a file request system license save on page 359
or URL.
Log out a user from the configuration database. request system logout on page 360
Abort a previously scheduled partition request. request system partition abort on page 361
Schedule the hard disk for partitioning. request system partition hard-disk on page 362
! 333
Task Command
Power off the routing software request system power-off on page 363
Reboot the routing software. request system reboot on page 365
Back up the file systems on the router. request system snapshot on page 368
Install software bundles or packages onto the router. request system software add on page 372
Remove software bundles or packages from the router. request system software delete on page 376
(J-series routing platform only) Delete the backup JUNOS software file request system software delete-backup on page 378
(if it exists) to free up compact flash drive space.
Roll back to a previously installed version. request system software rollback on page 379
Check candidate software compatibility against the current request system software validate on page 381
configuration.
Free storage space on the router by rotating log files and deleting request system storage cleanup on page 383
unnecessary files.
Restart a JUNOS software process. restart on page 385
Display the contents of the ARP table. show arp on page 389
Display the current running system configuration. show configuration on page 391
Display Domain Name System (DNS) hostname information. show host on page 393
Display Network Time Protocol (NTP) peers. show ntp associations on page 394
Display variables returned by NTP peers. show ntp status on page 396
Show system alarms. show system alarms on page 397
Display state and checksum values for files in a file system. show system audit on page 398
(J-series routing platform only) Display autoinstallation status show system autoinstallation status on page 402
information.
Display boot messages. show system boot-messages on page 403
Display system memory and buffer usage information. show system buffers on page 406
Display information about a pending commit operation. show system commit on page 408
Display directory and number of files queued for archival transfer. show system configuration archival on page 410
Display information about the rescue configuration. show system configuration rescue on page 411
Display information about active IP sockets on the Routing Engine. show system connections on page 412
Display directory usage information. show system directory-usage on page 415
(J-series routing platform only) Display system firmware information. show system firmware on page 417
(J-series routing platform only) Display a list of installed licenses. show system license on page 418
Display software processes running on the router. show system processes on page 421
Display statistics about queues on interfaces. show system queues on page 427
Display any pending system reboots or halts. show system reboot on page 429
View or compare previous configurations. show system rollback on page 430
(J-series routing platform only) Display client binding information. show system services dhcp binding on page 431
(J-series routing platform only) Display DHCP client-detected conflicts show system services dhcp conflict on page 433
for IP addresses.
(J-series routing platform only) Display global configuration settings show system services dhcp global on page 434
for a DHCP server.
334 !
Chapter 12: System Software Operational Mode Commands
Task Command
(J-series routing platform only) Display IP address pools defined for a show system services dhcp pool on page 435
DHCP server.
(J-series routing platform only) Display statistics associated with a show system services dhcp statistics on page 437
DHCP server.
Display information about a Service Deployment System (SDX) client. show system services service-deployment on page 439
Display information about the backup software that located in the show system snapshot on page 440
/altroot and /altconfig file systems.
Display JUNOS software extensions. show task memory on page 494 show system software on page 441
Display system-wide protocol-related statistics. show system statistics on page 443
Display system-wide Address Resolution Protocol (ARP) statistics. show system statistics arp on page 452
Display system-wide Connectionless Network Layer (CLNL) statistics. show system statistics clnl on page 454
Display system-wide End System-to-Intermediate System (ES-IS) show system statistics esis on page 456
statistics.
Display system-wide Internet Control Message Protocol (ICMP) show system statistics icmp on page 457
statistics.
Display system-wide ICMP version 6 statistics. show system statistics icmp6 on page 458
Display system-wide Internet Group Management Protocol (IGMP) show system statistics igmp on page 459
statistics.
Display system-wide IPv4 statistics. show system statistics ip on page 460
Display system-wide IPv6 statistics. show system statistics ip6 on page 462
Display system-wide Multiprotocol Label Switching (MPLS) statistics. show system statistics mpls on page 464
Display system-wide Reliable Datagram Protocol (RDP) statistics. show system statistics rdp on page 465
Display system-wide Transmission Control Protocol (TCP) statistics. show system statistics tcp on page 466
Display system-wide Trivial Network Protocol (TNP) statistics. show system statistics tnp on page 469
Display system-wide Trivial User Datagram Protocol (TUDP) statistics. show system statistics tudp on page 471
Display system-wide User Datagram Protocol (UDP) statistics. show system statistics udp on page 472
Display system-wide Virtual Private LAN Services (VPLS) statistics. show system statistics vpls on page 473
Display statistics about the amount of free disk space in the router’s show system storage on page 475
file systems.
View configurations of the primary and secondary Routing Engines. show system switchover on page 477
Display the current time and information about how long the router, show system uptime on page 479
router software, and routing protocols have been running.
Display users currently logged in to the router. show system users on page 481
Display JUNOS kernel memory usage. show system virtual-memory on page 483
Display routing protocol tasks on the Routing Engine. show task on page 490
Display I/O statistics for routing protocol tasks on the Routing Engine. show task io on page 492
Display memory utilization for routing protocol tasks on the Routing show task memory on page 494
Engine.
Display the hostname and version information about the software show version on page 497
running on the router.
! 335
Task Command
Display the hostname and version information about the software show version invoke-on on page 498
running on a routing platform with two Routing Engines.
Create a UNIX-level shell. start shell on page 502
Verify the syntax of a configuration file. test configuration on page 503
NOTE: For information about the request system certificate add and show system
certificate commands, see “IP Security Operational Mode Commands” on
page 627.
NOTE: For information about how to configure system software parameters, see
the JUNOS System Basics Configuration Guide.

336 !
clear arp
Syntax clear arp

<hostname hostname>
<vpn vpn>
Description Remove entries from the Address Resolution Protocol (ARP) table for the current CLI
view. To clear entries for a specific logical router, you must first enter the set cli
logical-router logical-router-name command, and then issue the clear arp command.
Options none—Clear all entries from the ARP table.
hostname hostname—(Optional) Clear the specified host entry only.
vpn vpn—(Optional) Clear entries from the ARP table for the specified virtual private
network (VPN).
See Also set cli logical-router on page 230

show arp on page 389
List of Sample Output clear arp on page 337
request.
clear arp user@host> clear arp

192.168.71.254 deleted
192.168.65.46 deleted
192.168.64.10 deleted
10.0.12.14 deleted
10.0.17.14 deleted
clear arp ! 337

clear system commit
Syntax clear system commit
Description Clear any pending commit operation.
Required Privilege Level maintenance (or the actual user who scheduled the commit)
See Also show system commit on page 408
List of Sample Output clear system commit on page 338

clear system commit (None Pending) on page 338
clear system commit (User Does Not Have Required Privilege Level) on page 338
request.
clear system commit user@host> clear system commit

Pending commit cleared.

(None Pending) No commit scheduled.

(User Does Not Have error: Permission denied
Required Privilege
Level)
338 ! clear system commit

clear system reboot
Syntax clear system reboot

<both-routing-engines>
Syntax clear system reboot

(Routing Matrix) <both-routing-engines>
<all-lcc | lcc number | scc>
Description Clear any pending system software reboots or halts. When used on a routing matrix
without any options, the default behavior clears all pending system software
reboots or halts on all T640 routing nodes connected to the TX Matrix platform.
Options none—Clear all pending system software reboots or halts.
both-routing-engines—(Optional) Clear all halt or reboot requests on both Routing

Engines. For a routing matrix, clears both Routing Engines on all chassis
connected to the routing matrix.
all-lcc—(Routing matrix only) (Optional) Clear all halt or reboot requests for all T640
routing nodes (or line-card chassis) connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Clear all halt or reboot requests for a
specific T640 routing node (or line-card chassis) that is connected to a
scc—(Routing matrix only) (Optional) Clear all halt or reboot requests for the
See Also request system reboot on page 365
List of Sample Output clear system reboot on page 339

clear system reboot (Routing Matrix) on page 340
request.
clear system reboot user@host> clear system reboot

reboot requested by root at Sat Dec 12 19:37:34 1998
[process id 17855]
Terminating...
clear system reboot ! 339

clear system reboot user@host> clear system reboot

--------------------------------------------------------------------------
No shutdown/reboot scheduled.
lcc0-re0:
--------------------------------------------------------------------------
lcc2-re0:
--------------------------------------------------------------------------
340 ! clear system reboot

clear system services dhcp binding
Syntax clear system services dhcp binding

<address>
Description (J-series routing platform only) Remove obsolete IP address bindings on a Dynamic
Host Configuration Protocol (DHCP) server and return them to the IP address pool.
Options address—(Optional) Remove a specific IP address binding and return it to the

address pool.
Required Privilege Level view and system
See Also show system services dhcp binding on page 431
List of Sample Output clear system services dhcp binding on page 341
request.
clear system services user@host> clear system services dhcp binding

dhcp binding
clear system services dhcp binding ! 341

clear system services dhcp conflict
Syntax clear system services dhcp conflict

<address>
Description (J-series routing platform only) Remove IP addresses from the Dynamic Host
Configuration Protocol (DHCP) server conflict list and return them to the IP address
pool.
Options address—(Optional) Remove a specific IP address from the conflict list and return it
to the address pool.
See Also show system services dhcp conflict on page 433
List of Sample Output clear system services dhcp conflict on page 342
request.
clear system services user@host> clear system services dhcp conflict

dhcp conflict
342 ! clear system services dhcp conflict

clear system services dhcp statistics
Syntax clear system services dhcp statistics
Description (J-series routing platform only) Clear Dynamic Host Configuration Protocol (DHCP)
server statistics.
See Also show system services dhcp statistics on page 437
List of Sample Output clear system services dhcp statistics on page 343
request.
clear system services user@host> clear system services dhcp statistics

dhcp statistics
clear system services dhcp statistics ! 343

configure
Syntax configure
<exclusive>
<private>
Description Enter configuration mode. When this command is entered without any optional
keywords, everyone can make configuration changes and commit all changes made
to the configuration.
Options exclusive—(Optional) Lock the candidate configuration for as long as you remain in
configuration mode, allowing you to make changes without interference from
other users. Other users can enter and exit configuration mode, but they cannot
change the configuration.
private—(Optional) Allow multiple users to edit different parts of the configuration

at the same time and to commit only their own changes, or to roll back without
interfering with one another’s changes. You cannot commit changes in
configure private mode when another user is in configure exclusive mode.
Additional Information For more information about the different methods of entering configuration mode
and the restrictions that apply, see the JUNOS System Basics Configuration Guide.
Required Privilege Level configure
See Also show configuration on page 391
Output Fields When you enter this command, you are placed in configuration mode and the
system prompt changes from hostname> to hostname#.
List of Sample Output configure on page 344
configure user@host> configure

Entering configuration mode
[edit]
user@host#
344 ! configure
op
Syntax op filename
<argument-name argument-value>
Description Execute an op script stored in the /var/db/scripts/op directory on the routing

platform.
Options argument-name argument-value—(Optional) Specify one or more arguments to the

script. For each argument you include on the command line, you must specify a
corresponding value for the argument.
Additional Information For more information about JUNOS op scripts, see the JUNOS Configuration and
Diagnostic Automation Guide.
List of Sample Output op on page 345
request.
op user@host> op script1 interface ge-0/2/0.0 protocol inet
op ! 345
request message
Syntax request message all message "text"

request message message "text" (terminal terminal-name | user user-name)
Description Display a message on the screens of all users who are logged in to the router or on
specific screens.
Options all—Display a message on the terminal of all users who are currently logged in.
message "text"—Message to display.
terminal terminal-name—Name of the terminal on which to display the message.
user user-name—Name of the user to whom to direct the message.
List of Sample Output request message message on page 346
request.
request message user@host> request message message “Maintenance window in 10 minutes” user maria
message Message from user@host on ttyp0 at 20:27 ...
Maintenance window in 10 minutes
EOF
346 ! request message

request routing-engine login
Syntax request routing-engine login (other-routing-engine | re0 | re1)
Syntax request routing-engine login (backup | master | other-routing-engine | re0 | re1)

Description On a routing platform with two Routing Engines, specify a tty connection for login.
Options backup—(Routing matrix only) Log in to the backup Routing Engine.
master—(Routing matrix only) Log in to the master Routing Engine.
other-routing-engine—Log in to the other Routing Engine.
re0—Log in to the Routing Engine in slot 0.
re1—Log in to the Routing Engine in slot 1.
lcc number—(Routing matrix only) (Optional) Log in to a specific T640 routing node
List of Sample Output request routing-engine login other-routing-engine on page 347
request.
request user@host> request routing-engine login other-routing-engine

routing-engine login €
other-routing-engine --- JUNOS 7.2-20050217.0 built 2005-02-17 08:12:50 UTC
request routing-engine login ! 347

request support information
Syntax request support information
Syntax request support information


show chassis alarms added to output in JUNOS Release 8.0
Description Display information about the system. Issue this command before contacting
customer support, and then include the command output in your support request.
Options all-lcc—(Routing matrix only) (Optional) Display system information for all T640
routing nodes connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display system information for a

specific T640 routing node (or line-card chassis) that is connected to a
scc—(Routing matrix only) (Optional) Display system information for the TX Matrix
Additional Information The output of this command can be lengthy. We recommend that you redirect the
output to a file. This command is a combination of the following commands:
! show chassis alarms
! show chassis environment
! show chassis firmware
! show chassis fpc detail
! show chassis hardware detail
! show chassis hardware extensive
! show chassis routing-engine
! show configuration | except SECRET DATA
! show interfaces extensive
! show pfe statistics error
! show system boot messages
! show system core-dumps
! show system processes extensive
! show system queues
! show system statistics
! show system storage
348 ! request support information

! show system uptime
! show system virtual memory
! show version
List of Sample Output request support information | save filename on page 349
request support information scc (Routing Matrix) on page 349
Output Fields See the output field descriptions for the commands listed in the “Additional
Information” section.
request support user@host> request support information | save goose

information | save Wrote 1143 lines of output to ‘goose’
filename user@host>
request support user@host> request support information scc

information scc
(Routing Matrix)
user@host>> show system uptime
scc-re0:
--------------------------------------------------------------------------
Current time: 2004-09-15 00:49:06 PDT
System booted: 2004-09-14 12:53:26 PDT (11:55:40 ago)
Protocols started: 2004-09-14 12:54:19 PDT (11:54:47 ago)
Last configured: 2004-09-14 13:07:47 PDT (11:41:19 ago) by regress
12:49AM PDT up 11:56, 3 users, load averages: 0.00, 0.02, 0.03
lcc0-re0:
--------------------------------------------------------------------------
Current time: 2004-09-15 00:49:06 PDT
Last configured: 2004-09-14 15:38:06 PDT (09:11:00 ago) by root
lcc2-re0:
--------------------------------------------------------------------------
Current time: 2004-09-15 00:49:06 PDT
user@host>> show version
scc-re0:
--------------------------------------------------------------------------
Hostname: hostA
Model: TX Matrix
JUNOS Base OS boot [7.0I20040914_1707_mapte]
JUNOS Base OS Software Suite [7.0I20040907_1922_rtuplur]
JUNOS Kernel Software Suite [7.0I20040914_1707_mapte]
JUNOS Packet Forwarding Engine Support (T-Series) [7.0I20040914_1707_mapte]
JUNOS Routing Software Suite [7.0I20040914_1707_mapte]
JUNOS Online Documentation [7.0I20040914_1707_mapte]
JUNOS Crypto Software Suite [7.0I20040914_1707_mapte]
JUNOS Support Tools Package [7.0-20040908.0]
request support information ! 349

lcc0-re0:
--------------------------------------------------------------------------
Hostname: hostB
Model: t640
lcc2-re0:
--------------------------------------------------------------------------
Hostname: dewey
Model: t640
...
350 ! request support information

request system configuration rescue delete
Syntax request system configuration rescue delete
Description Delete an existing rescue configuration.
See Also request system configuration rescue save on page 352

request system software rollback on page 379
show system commit on page 408
List of Sample Output request system configuration rescue delete on page 351
request system user@host> request system configuration rescue delete

configuration rescue
delete
request system configuration rescue delete ! 351

request system configuration rescue save
Syntax request system configuration rescue save
Description Save the most recently committed configuration as the rescue configuration so that
you can return to it at any time by using the rollback command.
See Also request system software delete on page 376

show system commit on page 408
List of Sample Output request system configuration rescue save on page 352
request system user@host> request system configuration rescue save

configuration rescue
save
352 ! request system configuration rescue save

request system firmware
Syntax request system firmware (upgrade | downgrade)

(fpc <slot slot number> | pic <assembly-id assembly-id> <fpc-slot fpc-slot-number >
<partnumber partnumber> <pic-slot pic-slot-number> <tag tag>)
Description (J-series routing platform only) Upgrade or downgrade firmware on a Physical

Interface Modules (PIM).
Options fpc—Flexible PIM concentrator (FPC).
slot slot-number—(Optional) Location of the FPC to upgrade or downgrade.
pic—Physical interface card (PIC).
assembly-id assembly-id—(Optional) Component assembly identifier.
fpc-slot fpc-slot-number—(Optional) Physical location of the PIC to upgrade or

downgrade.
partnumber partnumber—(Optional) Part number of the component to upgrade or

downgrade.
pic-slot pic-slot-number—(Optional) Location of the PIC to upgrade or downgrade.
tag tag—(Optional) Firmware release number.
List of Sample Output request system firmware upgrade on page 353
request.
request system user@host> request system configuration firmware upgrade fpc

firmware upgrade
request system firmware ! 353

request system halt
Syntax request system halt

<at time>
<other-routing-engine>
<in minutes>
<media (compact-flash | disk | removable-compact-flash | usb)>
<message "text">
Syntax request system halt

<at time>
<in minutes>
<media (compact-flash | disk)>
<message "text">

other-routing-engine option introduced in JUNOS Release 8.0.
Description Stop the router software.
Options none—Stop the router software immediately.
all-lcc—(Optional) (Routing matrix only) Halt all T640 routing nodes (or line-card
lcc number—(Optional) (Routing matrix only) Halt a T640 routing node that is
connected to the TX Matrix platform. Replace number with a value from
0 through 3.
scc—(Optional) (Routing matrix only) Halt only the master Routing Engine or the
backup Routing Engine on the TX Matrix platform (or switch-card chassis). If
you issue the command from the master Routing Engine, the master SCC is
halted. If you issue the command from the backup Routing Engine, the backup
SCC is halted.
at time—(Optional) Time at which to stop the software, specified in one of the

following ways:
! now—Stop the software immediately. This is the default.
! +minutes—Number of minutes from now to stop the software.
! yymmddhhmm—Absolute time at which to stop the software, specified as

year, month, day, hour, and minute.
! hh:mm—Absolute time on the current day at which to stop the software.
both-routing-engines—(Optional) Halt both Routing Engines at the same time.
354 ! request system halt

other-routing-engine—(Optional) Halt the other Routing Engine from which the

command is issued. For example, if you issue the command from the master
Routing Engine, the backup Routing Engine is halted. Similarly, if you issue the
command from the backup Routing Engine, the master Routing Engine is
halted.
in minutes—(Optional) Number of minutes from now to stop the software. This

option is an alias for the at +minutes option.
media (compact-flash | disk | removable-compact-flash | usb)—(Optional) Boot

medium for next boot. (The options removable-compact-flash and usb pertain to
the J-series routing platform only.)
message "text"—(Optional) Message to display to all system users before stopping

the software.
Additional Information On the M7i router, the request system halt command does not immediately power
down the Packet Forwarding Engine. The power-down process can take as long as
5 minutes.
On a routing matrix, if you issue the request system halt command on the TX
Matrix master Routing Engine, all the master Routing Engines connected to the
routing matrix are halted. If you issue this command on the backup Routing Engine,
all the backup Routing Engines connected to the routing matrix are halted.
If you issue the request system halt both-routing-engines command on the TX Matrix,
all the Routing Engines on the routing matrix are halted.
NOTE: If you have a router with two Routing Engines and you want to shut the
power off to the router or remove a Routing Engine, you must first halt the backup
Routing Engine (if it has been upgraded), then halt the master Routing Engine. To
halt a Routing Engine, issue the request system halt command. You can also halt
both Routing Engines at the same time by issuing the request system halt
both-routing-engines command.
List of Sample Output request system halt on page 355

request system halt (In 2 Hours) on page 356
request system halt (Immediately) on page 356
request system halt (at 1:20 AM) on page 356
request.
request system halt user@host> request system halt

Halt the system ? [yes,no] (no) yes
*** FINAL System shutdown message from root@section2 ***
System going down IMMEDIATELY
Terminated
...
syncing disks... 11 8 done
The operating system has halted.
Please press any key to reboot.
request system halt ! 355

request system halt The following example, which assumes that the time is 5 PM (1700), illustrates
(In 2 Hours) three different ways to request the system to stop 2 hours from now:
user@host> request system halt at +120

user@host> request system halt in 120
user@host> request system halt at 19:00
request system halt user@host> request system halt at now

(Immediately)
request system halt To stop the system at 1:20 AM, enter the following command. Because 1:20 AM is
(at 1:20 AM) the next day, you must specify the absolute time.
user@host> request system halt at yymmdd120

request system halt at 120
Halt the system at 120? [yes,no] (no) yes
356 ! request system halt

request system license add
Syntax request system license add (filename | terminal)
Description (J-series routing platform only) Add a license key.
Options filename—License key from a file or URL. Specify the filename or the URL where the
key is located.
terminal—License key from the terminal.
List of Sample Output request system license add on page 357
request.
request system license user@host> request system license add terminal

add
request system license add ! 357

request system license delete
Syntax request system license delete license-id
Description (J-series routing platform only) Delete a license key. You can delete only one license
at a time.
Options license-id—License ID that uniquely identifies a license key.
List of Sample Output request system license delete on page 358
request.
request system license user@host> request system license delete G03000002223

delete
358 ! request system license delete

request system license save
Syntax request system license save (filename | terminal)
Description (J-series routing platform only) Save installed license keys to a file or URL.
Options filename—License key from a file or URL. Specify the filename or the URL where the
key is located.
terminal—License key from the terminal.
List of Sample Output request system license save on page 359
request.
request system license user@host> request system license save ftp://user@host/license.conf

save
request system license save ! 359

request system logout
Syntax request system logout (pid pid | terminal terminal | user username)
<all>
Description Log out users from the router and the configuration database. If a user held the
configure exclusive lock, this command clears the exclusive lock.
Options pid pid—Log out the user session using the specified management process identifier
(PID). The PID type must be management process.
terminal terminal—Log out the user for the specified terminal session.
user username—Log out the specified user.
all—(Optional) Log out all sessions owned by a particular PID, terminal session, or
user. (On a TX Matrix platform, this command is broadcast to all chassis.)
Additional Information For information about using the configure exclusive command, see the JUNOS
Required Privilege Level configure
List of Sample Output request system logout on page 360
request.
request system logout user@host> request system logout user tammy all
Connection closed by foreign host.
360 ! request system logout

request system partition abort
Syntax request system partition abort
Syntax request system partition abort

Description Terminate a previously scheduled storage media partition operation. If the

command is issued between the time of a partition request and a reboot, the
partition request is aborted and the storage media is not affected.
Options all-lcc—(Routing matrix only) (Optional) Abort a previously scheduled partition

operation on all T640 routing nodes (or line-card chassis) connected to a
TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Abort a previously scheduled partition

operation on a specific T640 routing node that is connected to a TX Matrix
scc—(Routing matrix only) (Optional) Abort a previously scheduled partition

operation for only the TX Matrix platform (or switch-card chassis).
See Also request system partition hard-disk on page 362
List of Sample Output request system partition abort on page 361
request.
request system user@host> request partition abort

partition abort The hard disk is no longer scheduled to be partitioned.
request system partition abort ! 361

request system partition hard-disk
Syntax request system partition hard-disk
Syntax request system partition hard-disk

Description Set up the hard disk for partitioning. After this command is issued, the hard disk is
partitioned the next time the system is rebooted. When the hard disk is partitioned,
the contents of /altroot and /altconfig are saved and restored. All other data on the
hard disk is at risk of being lost.
Options all-lcc—(Routing matrix only) (Optional) Schedule a partition of the hard disk for all
T640 routing nodes (or line-card chassis) connected to the TX Matrix platform
at their next reboot.
lcc number—(Routing matrix only) (Optional) Schedule a partition of the hard disk
on a specific T640 routing node that is connected to a TX Matrix platform at its
next reboot. Replace number with a value from 0 through 3.
scc—(Routing matrix only) (Optional) Schedule a partition of the hard disk for the
Additional Information To immediately partition the hard disk, use the request system reboot command. To
cancel the partition request, use the request system partition abort command.
See Also request system partition abort on page 361
List of Sample Output request system partition hard-disk on page 362
request.
request system user@host> request partition hard-disk

partition hard-disk
362 ! request system partition hard-disk

request system power-off
Syntax request system power-off

<at time>
<in minutes>
<message “text”>
Syntax request system power-off

<at time>
<in minutes>
<message "text">
Description Power off the software.
Options none—Power off the router software immediately.
all-lcc—(Optional) (Routing matrix only) Power off all T640 routing nodes (or
line-card chassis) connected to the TX Matrix platform.
lcc number—(Optional) (Routing matrix only) Power off a T640 routing node that is
connected to the TX Matrix platform. Replace number with a value from
0 through 3.
scc—(Optional) (Routing matrix only) Power off only the master Routing Engine or
the backup Routing Engine on the TX Matrix platform (or switch-card chassis).
If you issue the command from the master Routing Engine, the master SCC is
powered off. If you issue the command from the backup Routing Engine, the
backup SCC is powered off.
at time—(Optional) Time at which to power off the software, specified in one of the
following ways:
! now—Power off the software immediately. This is the default.
! +minutes—Number of minutes from now to power off the software.
! yymmddhhmm—Absolute time at which to power off the software, specified

as year, month, day, hour, and minute.
! hh:mm—Absolute time on the current day at which to power off the

software.
both-routing-engines—(Optional) Power off both Routing Engines at the same time.
request system power-off ! 363

other-routing-engine—(Optional) Power off the other Routing Engine from which the
command is issued. For example, if you issue the command from the master
Routing Engine, the backup Routing Engine is halted. Similarly, if you issue the
halted.
in minutes—(Optional) Number of minutes from now to power off the software. This

message “text”—(Optional) Message to display to all system users before powering

off the software.
Additional Information On a routing matrix, if you issue the request system power-off command on the TX
Matrix master Routing Engine, all the master Routing Engines connected to the
routing matrix are powered off. If you issue this command on the backup Routing
Engine, all the backup Routing Engines connected to the routing matrix are
powered off.
If you issue the request system power-off both-routing-engines command on the TX

Matrix, all the Routing Engines on the routing matrix are powered off.
List of Sample Output request system power-off on page 364
request.
request system user@host> request system power-off message “This router will be powered off in
power-off 30 minutes. Please save your data and log out immediately.”
warning: This command will not halt the other routing-engine.
If planning to switch off power, use the both-routing-engines option.
Power Off the system ? [yes,no] (no) yes
*** FINAL System shutdown message from remote@nutmeg ***

System going down IMMEDIATELY
This router will be powered off in 30 minutes. Please save your data and log out
immediately.
Shutdown NOW!
[pid 5177]
364 ! request system power-off

request system reboot
Syntax request system reboot

<at time>
<in minutes>
<message “text”>
Syntax request system reboot

<at time>
<in minutes>
<message "text">

other-routing-engine option added in JUNOS Release 8.0
Description Reboot the software.
Options none—Reboot the software immediately.
all-lcc—(Routing matrix only) (Optional) Reboot all T640 routing nodes (or line-card
lcc number—(Routing matrix only) (Optional) Number of a T640 routing node that is
0 through 3.
scc—(Routing matrix only) (Optional) Reboot the Routing Engine on the TX Matrix
platform (or switch-card chassis). If you issue the command from the re0, re0 is
rebooted; if you issue the command from re1, re1 is rebooted.
other-routing-engine—Reboot the other Routing Engine from which the command is

issued. For example, if you issue the command from the master Routing
Engine, the backup Routing Engine is rebooted. Similarly, if you issue the
rebooted.
at time—(Optional) Time at which to reboot the software, specified in one of the

following ways:
! now—Stop or reboot the software immediately. This is the default.
! +minutes—Number of minutes from now to reboot the software.
! yymmddhhmm—Absolute time at which to reboot the software, specified as

year, month, day, hour, and minute.
! hh:mm—Absolute time on the current day at which to stop the software,

specified in 24-hour time.
request system reboot ! 365

in minutes—(Optional) Number of minutes from now to reboot the software. This


message “text”—(Optional) Message to display to all system users before stopping

or rebooting the software.
Additional Information Reboot requests are recorded in the system log files, which you can view with the
show log command. Also, the names of any running processes that are scheduled to
be shut down are changed. You can view the process names with the show system
processes command.
On a routing matrix, if you issue the request system reboot command on the master
Routing Engine, all the master Routing Engines connected to the routing matrix are
rebooted. If you issue this command on the backup Routing Engine, all the backup
Routing Engines connected to the routing matrix are rebooted.
NOTE: To reboot a router that has two Routing Engines, reboot the backup Routing
Engine (if you have upgraded it) first, and then reboot the master Routing Engine.
See Also clear system reboot on page 339
List of Sample Output request system reboot on page 366

request system reboot (at 2300) on page 366
request system reboot (In 2 Hours) on page 366
request system reboot (Immediately) on page 366
request system reboot (At 1:20 AM) on page 367
request.
request system reboot user@host> request system reboot

Reboot the system ? [yes,no] (no)
request system reboot user@host> request system reboot at 2300 message “Maintenance time!”
(at 2300) Reboot the system ? [yes,no] (no) yes
shutdown: [pid 186]
*** System shutdown message from [email protected] ***
System going down at 23:00
request system reboot The following example, which assumes that the time is 5 PM (17:00), illustrates
(In 2 Hours) three different ways to request the system to reboot in two hours:
user@host> request system reboot at +120

user@host> request system reboot in 120
user@host> request system reboot at 19:00
request system reboot user@host> request system reboot at now

(Immediately)
366 ! request system reboot

request system reboot To reboot the system at 1:20 AM, enter the following command. Because 1:20 AM
(At 1:20 AM) is the next day, you must specify the absolute time.
user@host> request system reboot at 06060120

request system reboot at 120
Reboot the system at 120? [yes,no] (no) yes
request system reboot ! 367

request system snapshot
Syntax request system snapshot

<partition>

<partition>

(J-series Routing <as-primary>
Platform) <config-size size>
<data-size size>
<factory>
<media type >
<partition>
<root-size size>
<swap-size size>
Description Back up the currently running and active file system partitions on the router to
standby partitions that are not running. Specifically, the root file system (/) is
backed up to /altroot, and /config is backed up to /altconfig. The root and /config
file systems are on the router’s flash drive, and the /altroot and /altconfig file
systems are on the router’s hard drive.
CAUTION: After you run the request system snapshot command, you cannot return
to the previous version of the software, because the running and backup copies of
the software are identical.
Options none—Back up the currently running and active file system partitions on the router
to standby partitions that are not running.
all-lcc—(Routing matrix only) (Optional) Archive data and executable areas for all
T640 routing nodes (or line-card chassis) connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Archive data and executable areas for
a specific T640 routing node (or line-card chassis) that is connected to a
scc—(Routing matrix only) (Optional) Archive data and executable areas for a
as-primary—(J-series routing platform only) (Optional) Create a snapshot that can be

used to replace the medium in the primary compact flash drive. This option can
be used on the removable compact flash only. The option copies the default
files that were loaded on the primary compact flash drive when it was shipped
from the factory, plus the rescue configuration if one has been set. This option
is useful if you have multiple routers and want to use the same software and
configuration on each router. After a boot device is created as a primary
compact flash drive, it can operate in only a primary compact flash drive slot.
This option causes the boot medium to be partitioned.
368 ! request system snapshot

config-size size—(J-series routing platform only) (Optional) Specify the size of the
config partition, in megabytes. The default value is 10 percent of physical
memory on the boot partition. The config partition is mounted on /config, and
the configuration files are stored in this partition. This option causes the boot
medium to be partitioned.
data-size size—(J-series routing platform only) (Optional) Specify the size of the data
partition, in megabytes. The default value is 0 MB. The data partition is
mounted on /data. This space is not used by the router, and can be used for
extra storage. This option causes the boot medium to be partitioned.
factory—(J-series routing platform only) (Optional) Copy only default files that were
loaded on the primary compact flash drive when it was shipped from the
factory, plus the rescue configuration if one has been set. After the boot
medium is created with the factory option, it can operate in only the primary
compact flash drive.
media type—(J-series routing platform only) (Optional) Specify the boot device the
software is copied to:
! compact-flash—Copy software to the primary compact flash drive.
! removable-compact-flash—Copy software to the removable compact flash

drive.
! usb—Copy software to the device connected to the USB port.
partition—(Optional) Repartition the flash drive before a snapshot occurs. If the

partition table on the flash drive is corrupted, the request system snapshot
command fails and reports errors. The partition option is only supported for
restoring the software image from the hard drive to the flash drive. You cannot
issue the request system snapshot command when you enable flash disk
mirroring. We recommend that you disable flash disk mirroring when you
upgrade or downgrade the software. For more information, see the JUNOS
root-size size—(J-series routing platform only) (Optional) Specify the size of the root
partition, in megabytes. The default value is one-third of the physical memory
minus the config, data, and swap partitions. The root partition is mounted on /
and does not include configuration files. This option causes the boot medium to
be partitioned.
swap-size size—(J-series routing platform only) (Optional) Specify the size of the
swap partition, in megabytes. The default value is one-third of the physical
memory on a boot medium larger than 128 MB, or 0 MB on a smaller boot
device. The swap partition is used for swap files and software failure memory
snapshots. Software failure memory snapshots are saved to the boot medium
only if it is specified as the dump device in the system dump-device
configuration hierarchy. This option causes the boot medium to be partitioned.
request system snapshot ! 369

Additional Information Before upgrading the software on the router, when you have a known stable
system, issue the request system snapshot command to back up the software,
including the configuration, to the /altroot and /altconfig file systems. After you
have upgraded the software on the router and are satisfied that the new packages
are successfully installed and running, issue the request system snapshot command
again to back up the new software to the /altroot and /altconfig file systems.
On a routing matrix, if you issue the request system snapshot command on the
master Routing Engine, all the master Routing Engines connected to the routing
matrix are backed up. If you issue this command on the backup Routing Engine, all
the backup Routing Engines connected to the routing matrix are backed up.
You cannot issue the request system snapshot command when you enable flash
disk mirroring. We recommend that you disable flash disk mirroring when you
upgrade or downgrade the software. For more information, see the JUNOS System
See Also show system snapshot on page 440
List of Sample Output request system snapshot on page 370

request system snapshot (When Partition Flag Is On) on page 370
request system snapshot (When Mirroring Is Enabled) on page 370
request system snapshot all-lcc (Routing Matrix) on page 371
request.
request system user@host> request system snapshot

snapshot umount: /altroot: not currently mounted
Copying / to /altroot.. (this may take a few minutes)
umount: /altconfig: not currently mounted
Copying /config to /altconfig.. (this may take a few minutes)
The following filesystems were archived: / /config
request system user@host> request system snapshot partition

snapshot (When Performing preliminary partition checks ...
Partition Flag Is On) Partitioning ad0 ...
umount: /altroot: not currently mounted
Copying / to /altroot.. (this may take a few minutes)
request system user@host> request system snapshot

snapshot (When Snapshot is not possible since mirror-flash-on-disk is configured.
Mirroring Is Enabled)
370 ! request system snapshot

request system user@host> request system snapshot all-lcc

snapshot all-lcc lcc0-re0:
(Routing Matrix) --------------------------------------------------------------------------
Copying '/' to '/altroot' .. (this may take a few minutes)
Copying '/config' to '/altconfig' .. (this may take a few minutes)
lcc2-re0:
--------------------------------------------------------------------------
Copying '/' to '/altroot' .. (this may take a few minutes)
Copying '/config' to '/altconfig' .. (this may take a few minutes)
request system snapshot ! 371

request system software add
Syntax request system software add package-name

<best-effort-load>
<delay-restart>
<force>
<no-copy>
<no-validate>
<reboot>
<unlink>
<validate>
Syntax request system software add package-name

(Routing Matrix) <best-effort-load>
<delay-restart>
<force>
<lcc number | scc>
<no-copy>
<no-validate>
<re0 | re1>
<reboot>
<unlink>
<validate>

best-effort-load and unlink options added in JUNOS Release 7.4.
Description Install a software package or bundle on the router.
Options package-name—Location from which the software package or bundle is to be

installed. For example:
! /var/tmp/package-name—For a software package or bundle that is being

installed from a local directory on the router.
! protocol://hostname/pathname/package-name—For a software package or

bundle that is to be downloaded and installed from a remote location. Replace
protocol with one of the following:
! ftp—File Transfer Protocol
! http—Hypertext Transfer Protocol
! scp—Secure copy (available only for Canada and U.S. version)
NOTE: On a J-series Services Router, when you install the software from a remote
location, the package is removed at the earliest opportunity in order to make room
for the installation to be completed. If you copy the software to a local directory on
the router and then install the new package, use the unlink option to achieve the
same effect and allow the installation to be completed.
best-effort-load—(Optional) Activate a partial load and treat parsing errors as

warnings instead of errors.
372 ! request system software add

delay-restart—(Optional) Install software package or bundle, but do not restart

software processes.
force—(Optional) Force the addition of the software package or bundle

(ignore warnings).
lcc number | scc—(Routing matrix only) (Optional) Install a software package or

bundle on a T640 routing node (or line-card chassis) or on a Routing Engine on
a TX Matrix platform (or switch-card chassis), respectively. Replace number with
a value from 0 through 3.
no-copy—(Optional) Install a software package or bundle, but do not save copies of

package or bundle files.
no-validate—(Optional) When loading a software package or bundle with a different

release, suppress the default behavior of the validate option.
re0 | re1—(Routing matrix only) Load a software package or bundle on a particular

Routing Engine.
reboot—(Optional) After adding the software package or bundle, reboot the system.
unlink—(Optional) On J-series Services Routers, this option ensures that the

software package is removed at the earliest opportunity in order to make room
for the installation to be completed. On M-series and T-series routers, use the
unlink option to remove the software package from this directory after a
successful upgrade is completed.
validate—(Optional) Validate the software package or bundle against the current

configuration as a prerequisite to adding the software package or bundle. This is
the default behavior when the software package or bundle being added is a
different release.
Additional Information Before upgrading the software on the router, when you have a known stable system,
issue the request system snapshot command to back up the software, including the
configuration, to the /altroot and /altconfig file systems. After you have upgraded
the software on the router and are satisfied that the new package or bundle is
successfully installed and running, issue the request system snapshot command
again to back up the new software to the /altroot and /altconfig file systems.
After you run the request system snapshot command, you cannot return to the
previous version of the software, because the running and backup copies of the
software are identical.
If you are upgrading more than one package at the same time, delete the operating
system package, jkernel, last. Add the operating system package, jkernel, first and
the routing software package, jroute, last. If you are upgrading all packages at once,
delete and add them in the following order:
user@host> request system software add /var/tmp/jbase

user@host> request system software add /var/tmp/jkernel
user@host> request system software add /var/tmp/jpfe
user@host> request system software add /var/tmp/jdocs
user@host> request system software add /var/tmp/jroute
user@host> request system software add /var/tmp/jcrypto
request system software add ! 373

By default, when you issue the request system software add package-name
command on a TX Matrix master Routing Engine, all the T640 master Routing
Engines that are connected to it are upgraded to the same version of software. If
you issue the same command on the TX Matrix backup Routing Engine, all the T640
backup Routing Engines that are connected to it are upgraded to the same version
of software.
See Also request system software delete on page 376

request system software validate on page 381
request system storage cleanup on page 383
List of Sample Output request system software add validate on page 374
request.
request system user@host> request system software add validate /var/tmp/

software add validate jinstall-7.2R1.7-domestic-signed.tgz
Checking compatibility with configuration
Initializing...
Using jbase-7.1R2.2
Using /var/tmp/jinstall-7.2R1.7-domestic-signed.tgz
Verified jinstall-7.2R1.7-domestic.tgz signed by PackageProduction_7_2_0
Using /var/validate/tmp/jinstall-signed/jinstall-7.2R1.7-domestic.tgz
Using /var/validate/tmp/jinstall/jbundle-7.2R1.7-domestic.tgz
Checking jbundle requirements on /
Using /var/validate/tmp/jbundle/jbase-7.2R1.7.tgz
Using /var/validate/tmp/jbundle/jkernel-7.2R1.7.tgz
Using /var/validate/tmp/jbundle/jcrypto-7.2R1.7.tgz
Using /var/validate/tmp/jbundle/jpfe-7.2R1.7.tgz
Using /var/validate/tmp/jbundle/jdocs-7.2R1.7.tgz
Using /var/validate/tmp/jbundle/jroute-7.2R1.7.tgz
Validating against /config/juniper.conf.gz
mgd: commit complete
Validation succeeded
Validating against /config/rescue.conf.gz
Validation succeeded
Installing package '/var/tmp/jinstall-7.2R1.7-domestic-signed.tgz' ...
Verified jinstall-7.2R1.7-domestic.tgz signed by PackageProduction_7_2_0
Adding jinstall...
WARNING: This package will load JUNOS 7.2R1.7 software.

WARNING: It will save JUNOS configuration files, and SSH keys
WARNING: (if configured), but erase all other files and information
WARNING: stored on this machine. It will attempt to preserve dumps
WARNING: and log files, but this can not be guaranteed. This is the
WARNING: pre-installation stage and all the software is loaded when
WARNING: you reboot the system.
Saving the config files ...

Installing the bootstrap installer ...
WARNING: A REBOOT IS REQUIRED TO LOAD THIS SOFTWARE CORRECTLY. Use the

WARNING: 'request system reboot' command when software installation is
WARNING: complete. To abort the installation, do not reboot your system,
WARNING: instead use the 'request system software delete jinstall'
WARNING: command as soon as this operation completes.
374 ! request system software add

Saving package file in /var/sw/pkg/jinstall-7.2R1.7-domestic-signed.tgz ...

Saving state for rollback ...
request system software add ! 375

request system software delete
Syntax request system software delete software-package

<force>
Syntax request system software delete software-package

(Routing Matrix) <force>
<lcc number | scc>
Description Remove a software package or bundle from the router.
CAUTION: Before removing a software package or bundle, make sure that you have
already placed the new software package or bundle that you intend to load onto
the router.
Options software-package—Software package or bundle name. You can delete any or all of
the following software bundles or packages:
! jbase—(Optional) JUNOS base software suite
! jcrypto—(Optional, in domestic version only) JUNOS security software
! jdocs—(Optional) JUNOS online documentation file
! jkernel—(Optional) JUNOS kernel software suite
! jpfe—(Optional) JUNOS Packet Forwarding Engine support
! jroute—(Optional) JUNOS routing software suite
! junos—(Optional) JUNOS base software
force—(Optional) Ignore warnings and force removal of the software.
lcc number—(Routing matrix only) (Optional) Remove an extension or upgrade

package from a specific T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Remove an extension or upgrade package

from the TX Matrix platform (or switch-card chassis).
Additional information Before upgrading the software on the router, when you have a known stable system,
issue the request system snapshot command to back up the software, including the
configuration, to the /altroot and /altconfig file systems. After you have upgraded
the software on the router and are satisfied that the new packages are successfully
installed and running, issue the request system snapshot command again to back
up the new software to the /altroot and /altconfig file systems. After you run the
request system snapshot command, you cannot return to the previous version of
the software, because the running and backup copies of the software are identical.
376 ! request system software delete

See Also request system software add on page 372

List of Sample Output request system software delete jdocs on page 377
request.
request system The following example displays the system software packages before and after the
software delete jdocs jdocs package is deleted through the request system software delete command:
user@host> show system software

Information for jbase:
Comment:
JUNOS Base OS Software Suite [7.2R1.7]
Information for jcrypto:
Comment:
JUNOS Crypto Software Suite [7.2R1.7]
Information for jdocs:
Comment:
JUNOS Online Documentation [7.2R1.7]
Information for jkernel:
Comment:
JUNOS Kernel Software Suite [7.2R1.7]
...
user@host> request system software delete jdocs

Removing package 'jdocs' ...
user@host> show system software

Comment:
Comment:
Comment:
...
request system software delete ! 377

request system software delete-backup
Syntax request system software delete-backup
Description (J-series routing platform only) Delete the backup JUNOS software file (if it exists) to
free up compact flash drive space. After running this command, you can no longer
use the request system software rollback command to revert to the earlier version of
the JUNOS software.
List of Sample Output request system software delete-backup on page 378
request.
request system user@host> request system software delete-backup

software delete-backup Delete backup system software package [yes,no] (no) yes
378 ! request system software delete-backup

request system software rollback
Syntax request system software rollback
Syntax request system software rollback

Description Revert to the software that was loaded at the last successful request system software
add command.
Options none—(Routing matrix only) Revert to the set of software as of the last successful
request system software add on the TX Matrix platform and its attached T640
routing nodes.
lcc number—(Routing matrix only) (Optional) Attempt to roll back to the previous set
of packages on a T640 routing node (or line-card chassis) connected to a
scc—(Routing matrix only) (Optional) Attempt to roll back to the previous set of
packages on the TX Matrix platform (or switch-card chassis).
Additional Information On the J-series routing platform, you can use this command to roll back to a
previous software package when the current upgrade has been successful or has
failed. On M-series and T-series routing platforms, use this command only to
recover from a failed software upgrade—you cannot issue this command to return
to the previously installed software after using a jinstall package. To return to the
previously installed software, use the corresponding jinstall package.
A software rollback fails if any required package (or a jbundle package containing
the required package) cannot be found in /var/sw/pkg.

request system software delete on page 376
request system configuration rescue delete on page 351
request system configuration rescue save on page 352
List of Sample Output request system software rollback on page 379
request.
request system user@host> request system software rollback

software rollback Verified SHA1 checksum of ./jbase-7.2R1.7.tgz
Verified SHA1 checksum of ./jdocs-7.2R1.7.tgz
Verified SHA1 checksum of ./jroute-7.2R1.7.tgz
Installing package './jbase-7.2R1.7.tgz' ...
Available space: 35495 require: 7335
Installing package './jdocs-7.2R1.7.tgz' ...
Installing package './jroute-7.2R1.7.tgz' ...
NOTICE: uncommitted changes have been saved in
request system software rollback ! 379

/var/db/config/juniper.conf.pre-install
Reloading /config/juniper.conf.gz ...
Activating /config/juniper.conf.gz ...
Restarting mgd ...
Restarting aprobed ...
Restarting apsd ...
Restarting cosd ...
Restarting fsad ...
Restarting fud ...
Restarting gcdrd ...
Restarting ilmid ...
Restarting irsd ...
Restarting l2tpd ...
Restarting mib2d ...
Restarting nasd ...
Restarting pppoed ...
Restarting rdd ...
Restarting rmopd ...
Restarting rtspd ...
Restarting sampled ...
Restarting serviced ...
Restarting snmpd ...
Restarting spd ...
Restarting vrrpd ...
WARNING: cli has been replaced by an updated version:

CLI release 7.2R1.7 built by builder on 2005-04-22 02:03:44 UTC
Restart cli using the new version ? [yes,no] (yes) yes
Restarting cli ...

user@host
380 ! request system software rollback

request system software validate
Syntax request system software validate package-name
Syntax request system software validate package-name

Description Validate candidate software against the current configuration of the router.
Options package-name—Name of the software bundle or package to test.
lcc number—(Routing matrix only) (Optional) Validate the software bundle or

package on a specific T640 routing node (or line-card chassis) that is connected
to a TX Matrix platform. Replace number with a value from 0 through 3.
scc—(Routing matrix only) (Optional) Validate the software bundle or package for
the TX Matrix platform (or switch-card chassis.
Additional Information By default, when you issue the request system software validate command on a TX
Matrix master Routing Engine, all the T640 master Routing Engines that are
connected to it are validated. If you issue the same command on the TX Matrix
backup Routing Engine, all the T640 backup Routing Engines that are connected to
it are upgraded to the same version of software.

request system software delete on page 376
List of Sample Output request system software validate (Successful Case) on page 381
request system software validate (Failure Case) on page 382
request.
request system user@host> request system software validate

software validate /var/sw/pkg/jbundle-5.3I20020124_0520_sjg.tgz
(Successful Case) Checking compatibility with configuration
Initializing...
Using /packages/jbase-5.3I20020122_1901_sjg
Using /var/sw/pkg/jbundle-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jbase-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jkernel-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jcrypto-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jpfe-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jdocs-5.3I20020124_0520_sjg.tgz
Using /var/chroot/var/tmp/jbundle/jroute-5.3I20020124_0520_sjg.tgz
Validating against /config/juniper.conf.gz
WARNING: cli has been replaced by an updated version:

CLI release 5.3I0 built by sjg on 2002-01-24 05:23:53 UTC
Restart cli using the new version ? [yes,no] (yes)
request system software validate ! 381

request system user@host> request system software validate 6.3/

software validate
(Failure Case) Pushing bundle to lcc0-re0
error: Failed to transfer package to lcc0-re0
user@host> request system software validate test

Pushing bundle to lcc0-re0
Pushing bundle to lcc2-re0
lcc0-re0:
gzip: stdin: not in gzip format
tar: child returned status 1
ERROR: Not a valid package: /var/tmp/test
382 ! request system software validate

request system storage cleanup
Syntax request system storage cleanup

<dry-run>

dry-run option introduced in JUNOS Release 7.6
Description Free storage space on the router by rotating log files and proposing a list of files for
deletion. User input is required for file deletion.
Options dry-run—(Optional) List files proposed for deletion (without deleting them).
Additional Information If logging is configured and being used, the dry-run option will rotate the log files. In
that case, the output displays the message Currently rotating log files, please
wait. If no logging is currently underway, the output displays only a list of files to
delete.
List of Sample Output request system storage cleanup dry-run on page 383,
request system storage cleanup on page 383
request.
request system storage user@host> request system storage cleanup dry-run

cleanup dry-run Currently rotating log files, please wait.
This operation can take up to a minute.
List of files to delete:
Size Date Name

11.4K Mar 8 15:00 /var/log/messages.1.gz
7245B Feb 5 15:00 /var/log/messages.3.gz
11.8K Feb 22 13:00 /var/log/messages.2.gz
3926B Mar 16 13:57 /var/log/messages.0.gz
3962B Feb 22 12:47 /var/log/sampled.1.gz
4146B Mar 8 12:20 /var/log/sampled.0.gz
4708B Dec 21 11:39 /var/log/sampled.2.gz
7068B Jan 16 18:00 /var/log/messages.4.gz
13.7K Dec 27 22:00 /var/log/messages.5.gz
890B Feb 22 17:22 /var/tmp/sampled.pkts
65.8M Oct 26 09:10 /var/sw/pkg/jinstall-7.4R1.7-export-signed.tgz
63.1M Oct 26 09:13 /var/sw/pkg/jbundle-7.4R1.7.tgz
request system storage user@host> request system storage cleanup

cleanup Currently rotating log files, please wait.
This operation can take up to a minute.
List of files to delete:
Size Date Name

request system storage cleanup ! 383


3962B Feb 22 12:47 /var/log/sampled.1.gz
4146B Mar 8 12:20 /var/log/sampled.0.gz
4708B Dec 21 11:39 /var/log/sampled.2.gz
7068B Jan 16 18:00 /var/log/messages.4.gz
13.7K Dec 27 22:00 /var/log/messages.5.gz
890B Feb 22 17:22 /var/tmp/sampled.pkts
65.8M Oct 26 09:10 /var/sw/pkg/jinstall-7.4R1.7-export-signed.tgz
63.1M Oct 26 09:13 /var/sw/pkg/jbundle-7.4R1.7.tgz
Delete these files ? [yes,no] (yes)
384 ! request system storage cleanup

restart
Syntax restart
<adaptive-services | audit-process | chassis-control | class-of-service | disk-monitoring |
dynamic-flow-capture | ecc-error-logging | event-processing | firewall | interface-control |
ipsec-key-management | kernel-replication | l2-learning | l2tp-service | lacp |
mib-process | pgm | pic-services-logging | ppp | pppoe | redundancy-interface-process |
remote-operations | routing <logical-router logical-router-name> | sampling |
service-deployment | snmp>
<gracefully | immediately | soft>
Syntax restart
(Routing Matrix) <adaptive-services | audit-process | chassis-control | class-of-service | disk-monitoring |
dynamic-flow-capture | ecc-error-logging | event-processing | firewall | interface-control |
ipsec-key-management | kernel-replication | l2-learning | l2tp-service | lacp |
link-management | mib-process | pgm | pic-services-logging | ppp | pppoe |
redundancy-interface-process | remote-operations | routing <logical-router
logical-router-name> | sampling | service-deployment | snmp>
<all | all-lcc | lcc number>
Syntax restart
(J-series Routing <adaptive-services | audit-process | chassis-control | class-of-service | dhcp |
Platform) dialer-services | dlsw | event-processing | firewall | interface-control |
ipsec-key-management | isdn-signaling | l2-learning | l2tp-service | mib-process |
network-access-service | pgm | ppp | pppoe | remote-operations | routing <logical-router
logical-router-name> | sampling | service-deployment | snmp | usb-control |
web-management>

dynamic-flow-capture option added in JUNOS Release 7.4.
dlsw option added in JUNOS Release 7.5.
event-processing option added in JUNOS Release 7.5.
link-management option added in Release 8.0.
ppp option added in JUNOS Release 7.5.
l2ald option added in JUNOS Release 8.0.
Description Restart a JUNOS software process.
CAUTION: Never restart a software process unless instructed to do so by a

customer support engineer. A restart might cause the router to drop calls and
interrupt transmission, resulting in possible loss of data.
Options none—Same as gracefully.
adaptive-services—(Optional) Restart the configuration management process that

manages the configuration for stateful firewall, Network Address Translation
(NAT), intrusion detection services (IDS), and IP Security (IPSec) services on the
Adaptive Services PIC.
audit-process—(Optional) Restart the RADIUS accounting process.
chassis-control—(Optional) Restart the chassis management process.
restart ! 385
class-of-service—(Optional) Restart the class-of-service (CoS) process, which

controls the router’s CoS configuration.
dhcp—(J-series routing platform only) (Optional) Restart the software process for a
Dynamic Host Configuration Protocol (DHCP) server. A DHCP server allocates
network IP addresses and delivers configuration settings to client hosts without
user intervention.
dialer-services—(Optional) Restart the Integrated Services Digital Network (ISDN)

dial out process.
disk-monitoring—(Optional) Restart disk monitoring, which checks the health of the

hard disk drive on the Routing Engine.
dlsw—(J-series routing platform only) (Optional) Restart the data link switching
(DLSw) service.
dynamic-flow-capture—(Optional) Restart the dynamic flow capture (DFC) process,

which controls DFC configurations on Monitoring Services III PICs.
ecc-error-logging—(Optional) Restart the error checking and correcting (ECC)

process, which logs ECC parity errors in memory on the Routing Engine.
event-processing—(Optional) Restart the event process (eventd).
firewall—(Optional) Restart the firewall management process, which manages

firewall configuration.
interface-control—(Optional) Restart the interface process, which controls the

router’s physical interface devices and logical interfaces.
ipsec-key-management—(Optional) Restart the IPSEC key management process.
isdn-signaling—(Optional) Restart the ISDN signaling process, which initiates ISDN

connections.
kernel-replication—(Optional) Restart the kernel replication process, which replicates

the state of the backup Routing Engine when graceful Routing Engine
switchover is configured.
l2-learning—(Optional) Restart the Layer 2 address flooding and learning process.
l2tp-service—(Optional) (M10, M10i, and M7i routers only) Restart the Layer 2
Tunneling Protocol (L2TP) process, which establishes L2TP tunnels and
Point-to-Point Protocol (PPP) sessions through L2TP tunnels.
lacp—(Optional) Restart the link aggregation control protocol process.
link-management—(Optional) Restart the Link Management Protocol (LMP) process,

which establishes and maintains LMP control channels.
mib-process—(Optional) Restart the Management Information Base (MIB) II process,

which provides the router’s MIB II agent.
386 ! restart
network-access-service—(Optional) Restart the network access process, which

provides the router’s Challenge Handshake Authentication Protocol (CHAP)
authentication service.
pgm—(Optional) Restart the process that implements the Pragmatic General

Multicast (PGM) protocol for assisting in the reliable delivery of multicast
packets.
pic-services-logging—(Optional) Restart the logging process for some Physical

Interface Cards (PICs). With this process, also known as fsad (the file system
access daemon), PICs send special logging information to the Routing Engine
for archiving on the hard disk.
ppp—(Optional) Restart the Point-to-Point Protocol (PPP) process.
pppoe—(Optional) Restart the Point-to-Point Protocol over Ethernet (PPPoE) process.
redundancy-interface-process—(Optional) Restart the ASP redundancy process.
remote-operations—(Optional) Restart the remote operations process, which

provides the ping and traceroute MIBs.
routing <logical-router logical-router-name>—(Optional) Restart the routing protocol

process, which controls the routing protocols that run on the router and
maintains the routing tables. Optionally, restart the routing protocol process for
the specified logical router only.
sampling—(Optional) Restart the sampling process, which performs packet

sampling and cflowd export.
service-development—(Optional) Restart the service deployment service process.
snmp—(Optional) Restart the SNMP process, which provides the router’s SNMP
master agent.
usb-control—(J-series routing platform only) (Optional) Restart the USB control

process.
web-management—(J-series routing platform only) (Optional) Restart the Web

management process.
all—(Routing matrix only) (Optional) Restart the software process on all chassis.
all-lcc—(Routing matrix only) (Optional) Restart the software process on all T640
routing nodes connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Restart the software process for a
specific T640 routing node that is connected to a TX Matrix platform. Replace
restart ! 387
gracefully—(Optional) Restart the software process.
immediately—(Optional) Immediately restart the software process.
soft—(Optional) Reread and reactivate the configuration without completely

restarting the software processes. For example, Border Gateway Protocol (BGP)
peers stay up and the routing table stays constant. Omitting this option results
in a graceful restart of the software process.
Required Privilege Level reset
List of Sample Output restart interfaces on page 388
request.
restart interfaces user@host> restart interfaces

interfaces process terminated
interfaces process restarted
388 ! restart
show arp
Syntax show arp

<no-resolve>
<expiration-time>

expiration-time option added in JUNOS Release 8.1.
Description Display all entries in the Address Resolution Protocol (ARP) table. To display entries
for a particular logical router only, first enter the set cli logical-router
logical-router-name command, and then enter the show arp command.
Options none—Display the entries in the ARP table.

to the IP address.
expiration-time—(Optional) Display the amount of time, in seconds, until each ARP

entry is set to expire.
See Also clear arp on page 337

set cli logical-router on page 230
List of Sample Output show arp on page 389

show arp no-resolve on page 390
show arp expiration-time on page 390
Output Fields Table 86 describes the output fields for the show arp command. Output fields are
Table 86: show arp Output Fields

MAC Address Media access control (MAC) address that corresponds to the IP address.
Address IP address that corresponds to the hostname.
Name Hostname.
Interface Interface name.
Flags (no-resolve option only) Indicates how mappings between IP and MAC
addresses are defined:
! Permanent—Static mapping.
! Permanent and published—Static mapping that is published.
! None—Dynamic mapping.
TTE (expiration-time option only) Amount of time, in seconds, until ARP entry is set to
expire.
show arp user@host> show arp

MAC Address Address Name Interface
00:e0:81:22:fd:74 192.168.64.10 firewall.my.net fxp0.0
00:04:5a:65:78:e1 192.168.65.13 lab.my net fxp0.0
show arp ! 389

show arp no-resolve user@host> show arp no-resolve

MAC Address Address Interface Flags
00:90:69:96:00:01 10.10.45.5 fe-0/0/1.0 none
00:00:00:00:00:01 200.200.200.1 fe-0/0/0.0 permanent published
00:00:00:00:00:02 200.200.200.2 fe-0/0/0.0 permanent
00:90:69:91:b0:00 200.200.200.3 fe-0/0/0.0 none
Total entries: 4
show arp user@host> show arp expiration-time

expiration-time MAC Address Address Name Interface Flags TTE
00:a0:a5:12:3e:d4 10.0.0.5 10.0.0.5 fxp1.0 none
00:e0:81:22:fd:74 192.168.64.10 supernova.englab.juniper. fxp0.0 none 1491
00:30:48:84:03:56 192.168.65.46 kgb.englab.juniper.net fxp0.0 none 1279
00:03:ba:12:f7:5e 192.168.65.226 nmssun1-eri0.englab.junip fxp0.0 none 452
00:90:69:8e:b0:fc 192.168.71.254 stonewall-ge-200.englab.j fxp0.0 none 1421
Total entries: 5
390 ! show arp

show configuration
Syntax show configuration

<statement-path>
Description Display the configuration that currently is running on the router, which is the last
committed configuration.
Options none—Display the entire configuration.
statement-path—(Optional) Display one of the following hierarchies in a

configuration. (Each statement-path option has additional suboptions not
described here. See the appropriate configuration guide for more information.)
! access—Network access configuration.
! accounting-options—Accounting data configuration.
! applications—Applications defined by protocol characteristics.
! apply-groups—Groups from which configuration data is inherited.
! chassis—Chassis configuration.
! class-of-service—Class-of-service configuration.
! firewall—Firewall configuration.
! forwarding-options—Options that control packet sampling.
! groups—Configuration groups.
! interfaces—Interface configuration.
! logical-routers—Logical router configuration.
! policy-options—Routing policy option configuration.
! protocols—Routing protocol configuration.
! routing-instances—Routing instance configuration.
! routing-options—Protocol-independent routing option configuration.
! security—Security configuration.
! services—Service PIC applications configuration.
! snmp—Simple Network Management Protocol configuration.
! system—System parameters configuration.
show configuration ! 391

Additional Information The portions of the configuration that you can view depend on the user class that
you belong to and the corresponding permissions. If you do not have permission to
view a portion of the configuration, the text ACCESS-DENIED is substituted for that
portion of the configuration. If you do not have permission to view authentication
keys and passwords in the configuration, because the secret permission bit is not
set for your user account, the text SECRET-DATA is substituted for that portion of the
configuration. If an identifier in the configuration contains a space, the identifier is
displayed in quotation marks.
List of Sample Output show configuration on page 392

show configuration policy-options on page 392
Output Fields This command displays information about the current running configuration.
show configuration user@host> show configuration

Last commit: 2006-08-22 11:31:33 PDT by elizabet
system {
host-name nestor;
domain-name east.net;
backup-router 192.1.1.254;
time-zone America/Los_Angeles;
default-address-selection;
name-server {
192.154.169.254;
192.154.169.249;
192.154.169.176;
}
services {
telnet;
}
tacplus-server {
1.2.3.4 {
secret /* SECRET-DATA */;
...
}
}
}
interfaces {
...
protocols {
isis {
export "direct routes";
}
}
policy-options {
policy-statement "direct routes" {
from protocol direct;
then accept;
}
}
show configuration user@host> show configuration policy-options

policy-options policy-options {
policy-statement "direct routes" {
from protocol direct;
then accept;
}
}
392 ! show configuration

show host
Syntax show host hostname
Description Display Domain Name System (DNS) hostname information.
Options hostname—Hostname or address.
Additional Information The show host command displays the raw data received from the DNS server.
List of Sample Output show host on page 393
show host user@host> show host snark

snark.boojum.net has address 192.168.1.254
user@host> show host 192.168.1.254
Name: snark.boojum.net
Address: 192.168.1.254
Aliases:
show host ! 393

show ntp associations
Syntax show ntp associations

<no-resolve>
Description Display Network Time Protocol (NTP) peers and their state.
Options none—Display NTP peers and their state.
See Also show ntp status on page 396
List of Sample Output show ntp associations on page 395
Output Fields Table 87 describes the output fields for the show ntp associations command. Output
Table 87: show ntp associations Output Fields

remote Address or name of the remote NTP peer.
refid Reference identifier of the remote peer. If the reference identifier is not known,
this field shows a value of 0.0.0.0.
st Stratum of the remote peer.
t Type of peer: b (broadcast), l (local), m (multicast), or u (unicast).
when When the last packet from the peer was received.
poll Polling interval, in seconds.
reach Reachability register, in octal.
delay Current estimated delay of the peer, in milliseconds.
offset Current estimated offset of the peer, in milliseconds.
disp Current estimated dispersion of the peer, in milliseconds.
peer-name Peer name and status of the peer in the clock selection process:
! space—Discarded because of a high stratum value or failed sanity checks.
! x—Designated “falseticker,” by the intersection algorithm.
! . —Culled from the end of the candidate list.
! – —Discarded by the clustering algorithm.
! +—Included in the final selection set.
! #—Selected for synchronization, but the distance exceeds the maximum.
! *—Selected for synchronization.
! o—Selected for synchronization, but the packets-per-second (pps) signal is
in use.
394 ! show ntp associations

show ntp associations user@host> show ntp associations

remote refid st t when poll reach delay offset disp
==============================================================================
*wolfe-gw.junipe tick.ucla.edu 2 u 43 64 377 1.86 0.319 0.08
show ntp associations ! 395

show ntp status
Syntax show ntp status

<no-resolve>
Description Display the values of internal variables returned by Network Time Protocol (NTP)
peers.
Options none—Display the values of internal variables returned by NTP peers.
See Also show ntp associations on page 394
List of Sample Output show ntp status on page 396
show ntp status user@host> show ntp status

status=0644 leap_none, sync_ntp, 4 events, event_peer/strat_chg,
version="ntpd 4.1.0-a Fri Jun 24 06:40:56 GMT 2005 (1)",
processor="i386", system="JUNOS7.4-20050624.0", leap=00, stratum=2,
precision=-28, rootdelay=6.849, rootdispersion=10.615, peer=38788,
refid=ntp-server.company-a.net,
reftime=c66705d9.06ee0f3c Fri, Jun 24 2005 15:21:13.027, poll=6,
clock=c6670602.cf6db940 Fri, Jun 24 2005 15:21:54.810, state=4,
offset=0.205, frequency=75.911, jitter=0.396, stability=0.005
396 ! show ntp status

show system alarms
Syntax show system alarms
Description Display active system alarms.
Additional Information System alarms are preset. They include a configuration alarm that appears when no
rescue configuration alarm is set and a license alarm that appears when a software
feature is configured and no valid license is configured for the feature. For more
information about system alarms, see the JUNOS System Basics Configuration Guide.
List of Sample Output show system alarms on page 397
show system alarms user@host> show system alarms

2005-02-24 17:29:34 UTC Minor IPsec VPN tunneling usage requires a
license
2005-02-24 17:29:34 UTC Minor Rescue configuration is not sent
show system alarms ! 397

show system audit
Syntax show system audit

<root-only>
Syntax show system audit

<root-only>
Description Display the state and checksum values for file systems.
Options none—Display the state and checksum values for all file systems.
all-lcc—(Routing matrix only) (Optional) Display file system MD5 hash and
permissions information for all T640 routing nodes (or line-card chassis)
connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display file system MD5 hash and
permissions information for a specific T640 routing node (or line-card chassis)
0 through 3.
scc—(Routing matrix only) (Optional) Display file system MD5 hash and
permissions information for the TX Matrix platform (or switch-card chassis).
root-only—(Optional) Check only the root (/) file system.
Additional Information To redirect the output to a file, issue the following command:
ssh router-name 'show system audit root-only' > output-file
If you save the output of the show system audit root-only command to a file, you can
compare it to subsequent output from the command to determine whether
anything has changed.
By default, when you issue the show system audit command on a TX Matrix master
Routing Engine, the command is broadcast to all the T640 master Routing Engines
connected to it. If you issue the command on the TX Matrix backup Routing Engine,
the command is broadcast to all the T640 backup Routing Engines that are
connected to it.
List of Sample Output show system audit root-only on page 399

show system audit lcc (Routing Matrix) on page 399
398 ! show system audit

show system audit user@host> show system audit root-only

root-only # user: root
# machine: my-host
# tree: /
date: Fri Feb 11 21:21:46 2000
# .
/set type=file uid=0 gid=0 mode=0755 nlink=1
. type=dir nlink=23 size=1024 time=950252640.0
.cshrc uid=3 gid=7 mode=0644 size=177 time=939182975.0 \
md5digest=f414e06fea6bd646244b98e13d6e6226
.kernel.jkernel.backup \
mode=0744 size=1934552 time=944688902.0 \
md5digest=2c343cf0bd9fea8f04f78604feed7aa4
.profile uid=3 gid=7 mode=0644 nlink=2 size=173 time=939182975.0 \
md5digest=55a1e3c6c67789c9d3a1cce1ea39f670
COPYRIGHT uid=3 gid=7 mode=0444 size=3425 time=939182975.0 \
md5digest=7df8bc77dcee71382ea73eb0ec6a9243
boot.config mode=0644 size=3 time=945902618.0 \
md5digest=93d722493ed38477338a1405d7dcbb40
boot.help uid=3 gid=7 mode=0444 size=411 time=939182876.0 \
md5digest=9b7126385734bcae753f4179ab59d8e5
compat type=link mode=0777 size=11 time=915149058.0 \
link=/usr/compat
kernel mode=0444 size=1947607 time=950230892.0 \
md5digest=1a2a8aff2fec678a918ba0d6bf063980
kernel.avr uid=1112 size=1947642 time=950252597.0 \
md5digest=82e1637682d58ec28964dfee7fccb62e
kernel.config \
mode=0644 size=0 time=915149058.0 \
md5digest=d41d8cd98f00b204e9800998ecf8427e
sys type=link mode=0777 size=11 time=915149029.0 \
link=usr/src/sys
show system audit lcc user@host> show system audit lcc 2

--------------------------------------------------------------------------
# user: root
# machine: rodin-lcc2
# tree: /
# date: Mon Sep 13 11:55:33 2004
# .
/set type=file uid=0 gid=0 mode=0555 nlink=1 flags=none
. type=dir nlink=20 size=512 time=1094982121.0
COPYRIGHT mode=0644 size=4735 time=986012708.0 \
md5digest=78396df1404ad742e6eb1be28f0cd63b
kernel type=link mode=0700 size=17 time=1090266262.0 \
link=/packages/jkernel
# ./altconfig
altconfig type=dir nlink=2 size=512 time=1089801320.0
# ./altconfig
..
# ./altroot
altroot type=dir nlink=2 size=512 time=1089801320.0
# ./altroot
..
show system audit ! 399

# ./b
b type=dir mode=0755 nlink=2 size=512 time=1093961429.0
# ./b
..
# ./bin
bin type=dir mode=0755 nlink=2 size=512 time=1089843059.0
[ type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/test
cat type=link size=27 time=1090266270.0 \
link=/packages/mnt/jbase/bin/cat
chmod type=link size=29 time=1090266270.0 \
link=/packages/mnt/jbase/bin/chmod
cp type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/cp
csh type=link size=27 time=1090266270.0 \
link=/packages/mnt/jbase/bin/csh
date type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/date
dd type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/dd
df type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/df
echo type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/echo
ed type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/ed
expr type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/expr
hostname type=link size=32 time=1090266270.0 \
link=/packages/mnt/jbase/bin/hostname
kill type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/kill
ln type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/ln
ls type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/ls
mkdir type=link size=29 time=1090266270.0 \
link=/packages/mnt/jbase/bin/mkdir
mv type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/mv
ps type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/ps
pwd type=link size=27 time=1090266270.0 \
link=/packages/mnt/jbase/bin/pwd
rcp type=link size=27 time=1090266270.0 \
link=/packages/mnt/jbase/bin/rcp
red type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/ed
rm type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/rm
rmdir type=link size=29 time=1090266270.0 \
link=/packages/mnt/jbase/bin/rmdir
sh type=link size=26 time=1090266270.0 \
link=/packages/mnt/jbase/bin/sh
sleep type=link size=29 time=1090266270.0 \
link=/packages/mnt/jbase/bin/sleep
stty type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/stty
sync type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/sync
400 ! show system audit

tcsh type=link size=27 time=1090266270.0 \

link=/packages/mnt/jbase/bin/csh
test type=link size=28 time=1090266270.0 \
link=/packages/mnt/jbase/bin/test
# ./bin
..
# ./boot
boot type=dir mode=0555 nlink=3 size=512 time=1095069935.0
boot0 size=512 time=1094978286.0 \
md5digest=6f780822dd4ae482a20462b66e542cca
boot1 mode=0555 size=512 time=1094978294.0 \
md5digest=8d112b09df342cd0b60fdb9bdcde8e07
boot2 mode=0555 size=7680 time=1094978294.0 \
md5digest=28eb58c4068c6b85717e1484f9e028e4
cdboot mode=0555 size=165888 time=1094978298.0 \
md5digest=1474c6b800dfc82ba552d7c36116d07d
kgzldr.o size=5996 time=1094982121.0 \
md5digest=c53dc948eb07e2ea4eb0413e4c4634a3
loader mode=0555 size=163840 time=1094978298.0 \
md5digest=82d9dc2d31033476bfb61bb7264c4fed
loader.4th size=9237 time=986013631.0 \
md5digest=43144391465ad50267d31e0a320be1de
...
show system audit ! 401

show system autoinstallation status
Syntax show system autoinstallation status
Description (J-series routing platform only) Display autoinstallation status information.
LIst of Sample Output show system autoinstallation status on page 402
show system user@host> show system autoinstallation status

autoinstallation status Autoinstallation status:
Master state: Active
Last committed file: None
Configuration server of last committed file: 0.0.0.0
Interface:
Name: fe-0/0/1
State: None
Address acquisition:
Protocol: DHCP Client
Acquired address: None
Protocol: RARP Client
Acquired address: None
402 ! show system autoinstallation status

show system boot-messages
Syntax show system boot-messages
Syntax show system boot-messages

Description Display initial messages generated by the system kernel upon startup. These
messages are the contents of /var/run/dmesg.boot.
Options all-lcc—(Routing matrix only) (Optional) Display boot time messages for all T640
lcc number—(Routing matrix only) (Optional) Display boot time messages for a
specific T640 routing node connected to a TX Matrix platform. Replace number
scc—(Routing matrix only) (Optional) Display boot time messages for the TX Matrix
Additional information By default, when you issue the show system boot-messages command on a TX
Matrix master Routing Engine, the command is broadcast to all the T640 master
Routing Engines connected to it. Likewise, if you issue the same command on the
TX Matrix backup Routing Engine, the command is broadcast to all the T640
backup Routing Engines that are connected to it.
List of Sample Output show system boot-messages on page 403

show system boot-messages lcc (Routing Matrix) on page 405
show system user@host> show system boot-messages

boot-messages Copyright (c) 1992-1998 FreeBSD Inc.
Copyright (c) 1996-2000 Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
JUNOS 4.1-20000216-Zf8469 #0: 2000-02-16 12:57:28 UTC

[email protected]:/p/build/20000216-0905/4.1/release_kernel/sys/compil
e/GENERIC
CPU: Pentium Pro (332.55-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x66a Stepping=10
Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,<b
16>,<b17>,MMX,<b24>>
Teknor CPU Card Recognized
real memory = 805306368 (786432K bytes)
avail memory = 786280448 (767852K bytes)
Probing for devices on PCI bus 0:
chip0 <generic PCI bridge (vendor=8086 device=7192 subclass=0)> rev 3 class 6000
0 on pci0:0:0
chip1 <Intel 82371AB PCI-ISA bridge> rev 1 class 60100 on pci0:7:0
chip2 <Intel 82371AB IDE interface> rev 1 class 10180 on pci0:7:1
chip3 <Intel 82371AB USB interface> rev 1 class c0300 int d irq 11 on pci0:7:2
show system boot-messages ! 403

smb0 <Intel 82371AB SMB controller> rev 1 class 68000 on pci0:7:3

pcic0 <TI PCI-1131 PCI-CardBus Bridge> rev 1 class 60700 int a irq 15 on pci0:13
:0
TI1131 PCI Config Reg: [pci only][FUNC0 pci int]
pcic1 <TI PCI-1131 PCI-CardBus Bridge> rev 1 class 60700 int b irq 12 on pci0:13
:1
TI1131 PCI Config Reg: [pci only][FUNC1 pci int]
fxp0 <Intel EtherExpress Pro 10/100B Ethernet> rev 8 class 20000 int a irq 12 on
pci0:16:0
chip4 <generic PCI bridge (vendor=1011 device=0022 subclass=4)> rev 4 class 6040
0 on pci0:17:0
pci0:19:0
Probing for devices on PCI bus 1:
mcs0 <Miscellaneous Control Subsystem> rev 12 class ff0000 int a irq 12 on pci1:
13:0
pci1:14:0
Probing for devices on the ISA bus:
sc0 at 0x60-0x6f irq 1 on motherboard
sc0: EGA color <16 virtual consoles, flags=0x0>
ed0 not found at 0x300
psm0 not found at 0x60
sio0 at 0x3f8-0x3ff irq 4 flags 0x20010 on isa
sio0: type 16550A, console
sio1 at 0x3e8-0x3ef irq 5 flags 0x20000 on isa
sio1: type 16550A
sio2 at 0x2f8-0x2ff irq 3 flags 0x20000 on isa
sio2: type 16550A
pcic0 at 0x3e0-0x3e1 on isa
PC-Card ctlr(0) TI PCI-1131 [CardBus bridge mode] (5 mem & 2 I/O windows)
pcic0: slot 0 controller I/O address 0x3e0
npx0 flags 0x1 on motherboard
npx0: INT 16 interface
fdc0: direction bit not set
fdc0: cmd 3 failed at out byte 1 of 3
fdc0 not found at 0x3f0
wdc0 at 0x1f0-0x1f7 irq 14 on isa
wdc0: unit 0 (wd0): <SunDisk SDCFB-80>, single-sector-i/o
wd0: 76MB (156672 sectors), 612 cyls, 8 heads, 32 S/T, 512 B/S
wdc0: unit 1 (wd1): <IBM-DCXA-210000>
wd1: 8063MB (16514064 sectors), 16383 cyls, 16 heads, 63 S/T, 512 B/S
wdc1 not found at 0x170
wdc2 not found at 0x180
ep0 not found at 0x300
fxp0: Ethernet address 00:a0:a5:12:05:5a
fxp1: Ethernet address 00:a0:a5:12:05:59
fxp2: Ethernet address 02:00:00:00:00:01
swapon: adding /dev/wd1s1b as swap device
Automatic reboot in progress...
/dev/rwd0s1a: clean, 16599 free (95 frags, 2063 blocks, 0.1% fragmentation)
/dev/rwd0s1e: clean, 9233 free (9 frags, 1153 blocks, 0.1% fragmentation)
/dev/rwd0s1a: clean, 16599 free (95 frags, 2063 blocks, 0.1% fragmentation)
/dev/rwd1s1f: clean, 4301055 free (335 frags, 537590 blocks, 0.0% fragmentation)
404 ! show system boot-messages

show system user@host> show system boot-messages lcc 2

boot-messages lcc lcc2-re0:
(Routing Matrix) --------------------------------------------------------------------------
Copyright (c) 1996-2001, Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
JUNOS 7.0-20040912.0 #0: 2004-09-12 09:16:32 UTC
[email protected]:/build/benten-b/7.0/20040912.0/obj-i386/sys/compile/J
UNIPER
Timecounter "i8254" frequency 1193182 Hz
Timecounter "TSC" frequency 601368936 Hz
CPU: Pentium III/Pentium III Xeon/Celeron (601.37-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x68a Stepping = 10
Features=0x387f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,
PSE36,PN,MMX,FXSR,SSE>
real memory = 2147467264 (2097136K bytes)
sio0: gdb debugging port
avail memory = 2084040704 (2035196K bytes)
Preloaded elf kernel "kernel" at 0xc06d9000.
DEVFS: ready for devices
Pentium Pro MTRR support enabled
md0: Malloc disk
DRAM Data Integrity Mode: ECC Mode with h/w scrubbing
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <ServerWorks NB6635 3.0LE host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcic-pci0: <TI PCI-1410 PCI-CardBus Bridge> irq 15 at device 1.0 on pci0
pcic-pci0: TI12XX PCI Config Reg: [pwr save][pci only]
fxp0: <Intel Embedded 10/100 Ethernet> port 0x1000-0x103f mem
0xfb800000-0xfb81ffff,0xfb820000-0xfb820fff irq 9 at device 3.0 on pci0
fxp1: <Intel Embedded 10/100 Ethernet> port 0x1040-0x107f mem
0xfb840000-0xfb85ffff,0xfb821000-0xfb821fff irq 11 at device 4.0 on pci0
...
show system boot-messages ! 405

show system buffers
Syntax show system buffers
Syntax show system buffers

Description Display information about the buffer pool that the Routing Engine uses for local
traffic. Local traffic is the routing and management traffic that is exchanged
between the Routing Engine and the Packet Forwarding Engine within the router, as
well as the routing and management traffic from IP (that is, from OSPF, BGP, SNMP,
ping operations, and so on).
Options all-lcc—(Routing matrix only) (Optional) Show buffer statistics for all T640 routing
nodes (or line-card chassis) connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Show buffer statistics for a specific
scc—(Routing matrix only) (Optional) Show buffer statistics for the TX Matrix
Additional Information By default, when you issue the show system buffers command on a TX Matrix
master Routing Engine, the command is broadcast to all the T640 master Routing
Engines connected to it. Likewise, if you issue the same command on the TX Matrix
backup Routing Engine, the command is broadcast to all the T640 backup Routing
Engines that are connected to it.
A special type of memory buffer called a cluster is 2 KB in size. For more

information, see The Design and Implementation of the 4.4BSD Operation System by
McKusic, Bostic, Karels, and Quarterman.
List of Sample Output show system buffers on page 407

show system buffers scc (Routing Matrix) on page 407
Output Fields Table 88 describes the output fields for the show system buffers command. Output
Table 88: show system buffers Output Fields

mbufs in use Memory buffers (mbufs) are 128-byte buffers that are used for various purposes inside
the kernel. Each memory buffer has a type, and the output itemizes the amount
allocated for each type. Types with no memory buffers allocated are not displayed.
mbufs allocated to packet headers Number of memory buffers currently holding packet headers
mbufs allocated to control blocks Number of memory buffers currently holding state for sockets.
mbufs allocated to send data Number of memory buffers currently holding socket send data.
mbufs allocated to pfe refill data Number of memory buffers currently holding Packet Forwarding Engine refill data.
mbufs allocated to fxp data Number of memory buffers currently holding fxp data.
406 ! show system buffers

Table 88: show system buffers Output Fields

mbufs allocated to socket names Number of memory buffers currently holding addresses for sockets.
and addresses
mbuf clusters in use Allocation statistics for mbuf clusters.
allocated to network Total amount of memory in use by the networking and interprocess communication
(IPC) code.
requests for memory denied Number of times a memory allocation request within the IPC and networking code
failed.
requests for memory delayed Number of times a memory allocation request within the IPC and networking code was
postponed.
calls to protoocl drain routines Number of times a memory allocation request within the IPC and networking code
triggered a memory reclamation attempt.
show system buffers user@host> show system buffers

853 mbufs in use:
2 mbufs allocated to packet headers
37 mbufs allocated to protocol control blocks
28 mbufs allocated to socket names and addresses
2 mbufs allocated to socket send data
400 mbufs allocated to pfe refill data
384 mbufs allocated to fxp data
784/944 mbuf clusters in use
1994 Kbytes allocated to network (83% in use)
0 requests for memory denied
0 requests for memory delayed
0 calls to protocol drain routines
show system buffers user@host> show system buffers scc

scc (Routing Matrix) 213 mbufs in use:
11 mbufs allocated to packet headers
26 mbufs allocated to socket names and addresses
2 mbufs allocated to socket options
17 mbufs allocated to socket send data
2 mbufs allocated to pfe data
155 mbufs allocated to fxp data (rx)
511 mbufs allocated to <mbuf type 86>
256 mbufs allocated to <mbuf type 92>
924/1162 mbuf clusters in use
2788 Kbytes allocated to network (75% in use)
0 requests for memory delayed
0 calls to protocol drain routines
show system buffers ! 407

show system commit
Syntax show system commit
Description Display the pending commit operation (if any) and the commit history.
See Also clear system commit on page 338
List of Sample Output show system commit on page 408

show system commit (At a Particular Time) on page 408
show system commit (At the Next Reboot) on page 408
show system commit (Rollback Pending) on page 409
Output Fields Table 89 describes the output fields for the show system commit command. Output
Table 89: show system commit Output Fields

Commit History Displays the last 50 commit operations listed, most recent to first. The identifier rescue designates a
configuration created for recovery using the request system configuration rescue save command.
Timestamp Date and time of the commit operation.
User name User who executed the commit operation
Commit method Method used to execute the commit operation:
! cli—CLI interactive user performed the commit operation.
! junoscript—JUNOScript client performed the commit operation.
! synchronize—The commit synchronize command was performed on the other Routing Engine.
! snmp—An SNMP SET request caused the commit operation.
! button—A button on the router was pressed to commit a rescue configuration for recovery.
! autoinstall—A configuration obtained through autoinstallation was committed.
! other—A method other than those identified was used to perform the commit operation.
show system commit user@host> show system commit

0 2003-07-28 19:14:04 PDT by root via other
1 2003-07-25 22:01:36 PDT by regress via cli
3 2003-07-25 21:30:13 PDT by root via button
5 2003-07-25 05:33:21 PDT by root via autoinstall
...
rescue 2002-05-10 15:32:03 PDT by root via other

(At a Particular Time) commit requested by root via cli at Tue May 7 15:59:00 2002

(At the Next Reboot) commit requested by root via cli at reboot
408 ! show system commit


(Rollback Pending) 0 2005-01-05 15:00:37 PST by root via cli commit confirmed, rollback in 3mins
show system commit ! 409

show system configuration archival
Syntax show system configuration archival
Release Information Introduced in JUNOS Release 7.6.
Description Display directory and number of files queued for archival transfer.
List of Sample Output show system configuration archival on page 410
show system user@host> show system configuration archival

configuration archival
/var/transfer/config/:
total 8
410 ! show system configuration archival

show system configuration rescue
Syntax show system configuration rescue
Description Display a rescue configuration, if one exists.
List of Sample Output show system configuration rescue on page 411
show system user@host> show system configuration rescue

configuration rescue version "7.3"; groups {
global {
system {
host-name router1;
domain-name customer.net;
domain-search [ customer.net ];
backup-router 192.168.124.254;
name-server {
172.17.28.11;
172.17.28.101;
172.17.28.100;
172.17.28.10;
}
login {
user regress {
uid 928;
class superuser;
shell csh;
authentication {
encrypted-password "$1$kPU..$w.4FGRAGanJ8U4Yq6sbj7."; ##
SECRET-DATA
}
}
}
services {
ftp;
rlogin;
rsh;
telnet;
}
}
}
....
show system configuration rescue ! 411

show system connections
Syntax show system connections

<extensive>
<inet | inet6>
<show-routing-instances>
Syntax show system connections

(Routing Matrix) <extensive>
<inet | inet6>
<show-routing-instances>
Description Display information about the active IP sockets on the Routing Engine. Use this
command to verify which servers are active on a system and what connections are
currently in progress.
Options none—Display information about all active IP sockets on the Routing Engine.
extensive—(Optional) Display exhaustive system process information, which, for

TCP connections, includes the TCP control block. This option is useful for
debugging TCP connections.
all-lcc—(Routing matrix only) (Optional) Display system connection activity for all
lcc number—(Routing matrix only) (Optional) Display system connection activity for
a specific T640 routing node that is connected to a TX Matrix platform. Replace
scc—(Routing matrix only) (Optional) Display system connection activity for the
inet | inet6—(Optional) Display IPv4 connections or IPv6 connections, respectively.
show-routing-instances—(Optional) Display routing instances.
Additional information By default, when you issue the show system connections command on a TX Matrix
List of Sample Output show system connections on page 413

show system connections extensive on page 413
show system connections lcc (Routing Matrix) on page 414
412 ! show system connections

Output Fields Table 90 describes the output fields for the show system connections command.
Table 90: show system connections Output Fields

Proto Protocol of the socket: IP, TCP, or UDP for IPv4 or IPv6.
Recv-Q Number of input packets received by the protocol and waiting to be
processed by the application.
Send-Q Number of output packets sent by the application and waiting to be
processed by the protocol.
Local Address Local address and port of the socket, separated by a period. An asterisk (*)
indicates that the bound address is the wildcard address. Server sockets
typically have the wildcard address and a well-known port bound to them.
Foreign Address Foreign address and port of the socket, separated by a period. An asterisk (*)
indicates that the address or port is a wildcard.
(state) For TCP, the protocol state of the socket.
show system user@host> show system connections

connections Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp 0 2 192.168.4.16.513 208.197.169.254.894 ESTABLISHED
tcp 0 0 192.168.4.16.513 208.197.169.195.945 ESTABLISHED
tcp 0 0 *.23 *.* LISTEN
tcp 0 0 *.22 *.* LISTEN
tcp 0 0 *.513 *.* LISTEN
tcp 0 0 *.514 *.* LISTEN
tcp 0 0 *.21 *.* LISTEN
tcp 0 0 *.79 *.* LISTEN
tcp 0 0 *.1023 *.* LISTEN
tcp 0 0 *.111 *.* LISTEN
udp 0 0 192.168.4.16.1634 208.197.169.249.2049
udp 0 0 192.168.4.16.1627 208.197.169.254.2049
udp 0 0 192.168.4.16.1371 208.197.169.195.2049
udp 0 0 *.* *.*
udp 0 0 *.9999 *.*
udp 0 0 *.161 *.*
udp 0 0 192.168.4.16.1039 192.168.4.16.1023
udp 0 0 192.168.4.16.1038 192.168.4.16.1023
udp 0 0 192.168.4.16.1037 192.168.4.16.1023
udp 0 0 192.168.4.16.1036 192.168.4.16.1023
udp 0 0 *.1022 *.*
udp 0 0 *.1023 *.*
udp 0 0 *.111 *.*
udp 0 0 *.* *.*
show system user@host> show system connections extensive

connections extensive Active Internet connections (including servers)
tcp 0 2 192.168.4.16.513 208.197.169.254.894 ESTABLISHED
iss: 3972677059 sndup: 3972693435 sndcc: 10
snduna: 3972693435 sndnxt: 3972693437 sndwnd: 17376
sndmax: 3972693437 sndcwnd: 65535 sndssthresh: 1073725440
irs: 484187869 rcvup: 484188060 rcvcc: 98357
rcvnxt: 484188070 rcvadv: 484205446 rcvwnd: 17376
rtt: 1 srtt: 7 rttv: 5
rxtcur: 120 rxtshift: 0 rtseq: 1103707591
show system connections ! 413

rttmin: 2 duration: 5011 mss: 1448

flags: REQ_SCALE RCVD_SCALE REQ_TSTMP RCVD_TSTMP RCVD_CC [0x41e0]
tcp 0 0 192.168.4.16.513 208.197.169.195.945 ESTABLISHED
iss: 1057609890 sndup: 1057790796 sndcc: 2
snduna: 1057790810 sndnxt: 1057790810 sndwnd: 17376
sndmax: 1057790810 sndcwnd: 39096 sndssthresh: 1073725440
irs: 3551947312 rcvup: 3551947422 rcvcc: 0
rcvnxt: 3551947422 rcvadv: 3551964798 rcvwnd: 17376
rtt: 0 srtt: 17 rttv: 11
rxtcur: 300 rxtshift: 0 rtseq: 0
rttmin: 2 duration: 125814 mss: 1448
flags: REQ_SCALE RCVD_SCALE REQ_TSTMP RCVD_TSTMP [0x1e0]
udp 0 0 192.168.4.16.1634 208.197.169.249.2049
udp 0 0 192.168.4.16.1627 208.197.169.254.2049
udp 0 0 192.168.4.16.1371 208.197.169.195.2049
udp 0 0 *.* *.*
udp 0 0 *.9999 *.*
udp 0 0 *.161 *.*
udp 0 0 192.168.4.16.1039 192.168.4.16.1023
udp 0 0 192.168.4.16.1038 192.168.4.16.1023
udp 0 0 192.168.4.16.1037 192.168.4.16.1023
udp 0 0 192.168.4.16.1036 192.168.4.16.1023
udp 0 0 *.1022 *.*
udp 0 0 *.1023 *.*
udp 0 0 *.111 *.*
udp 0 0 *.* *.*
show system user@host> show system connections lcc 2

connections lcc
--------------------------------------------------------------------------
Active Internet connections (including servers)
tcp4 0 0 192.168.66.131.1342 192.168.66.130.23 ESTABLISHED
tcp4 0 0 192.168.66.131.2059 192.168.66.130.23 ESTABLISHED
tcp4 0 0 192.168.66.131.4571 192.168.66.130.23 ESTABLISHED
tcp4 0 0 192.168.66.131.2496 192.168.66.130.23 ESTABLISHED
tcp4 0 0 *.3221 *.* LISTEN
tcp4 0 0 *.23 *.* LISTEN
tcp4 0 0 *.22 *.* LISTEN
tcp4 0 0 *.514 *.* LISTEN
tcp4 0 0 *.513 *.* LISTEN
tcp4 0 0 *.21 *.* LISTEN
tcp4 0 0 *.79 *.* LISTEN
tcp4 0 0 *.6234 *.* LISTEN
udp4 0 0 *.514 *.*
udp4 0 0 *.6333 *.*
414 ! show system connections

show system directory-usage
Syntax show system directory-usage

<depth number>
<path>
Syntax show system directory-usage

<depth number>
<path>
Description Display directory usage information.
Options none—Display all directory usage information.
all-lcc—(Routing matrix only) (Optional) Display directory information for all T640
lcc number—(Routing matrix only) (Optional) Display directory information for a

specific T640 routing node that is connected to a TX Matrix platform. Replace
scc—(Routing matrix only) (Optional) Display Routing Engine graceful switchover

depth number—(Optional) Depth of the directory to traverse. This option is useful

when you want to limit the output shown for a large file system.
path—(Optional) Path or root directory to traverse.
List of Sample Output show system directory-usage scc (Routing Matrix) on page 415
Output Fields Table 91 describes the output fields for the show system directory-usage command.
Table 91: show system directory-usage Output Fields

bytes Number of bytes used by files in a directory.
directory-name Name of the directory.
show system user@host> show system directory-usage /var/tmp scc

directory-usage scc /var/tmp
(Routing Matrix) 1.0K /var/tmp/vi.recover
2.0K /var/tmp/instmp.tPMk8u
1.0K /var/tmp/install
/var/tmp/instmp.GUMpur
4.8M /var/tmp/instmp.GUMpur/packages
6.4M /var/tmp/troy1
297M /var/tmp/dsw
/var/tmp/pkg_tmp.2073
83K /var/tmp/pkg_tmp.2073/bin
/var/tmp/instmp.oMIDbl
show system directory-usage ! 415

89K /var/tmp/instmp.oMIDbl/bin
/var/tmp/instmp.byhMjR
4.6M /var/tmp/instmp.byhMjR/packages
/var/tmp/instmp.6fqHf3
1.7M /var/tmp/instmp.6fqHf3/packages
/var/tmp/instmp.mljECe
4.6M /var/tmp/instmp.mljECe/packages
416 ! show system directory-usage

show system firmware
Syntax show system firmware

<compatibility>
Description (J-series routing platform only) Display firmware information.
Options compatibility—Display firmware compatibility information.
List of Sample Output show system firmware on page 417

show system firmware compatibility on page 417
Output Fields Table 92 lists the output fields for the show system firmware command. Output
Table 92: show system firmware Output Fields

Part Physical part on the router affected by the firmware.
Type Type of firmware on the router.
Tag Location of the firmware on the interface.
Current version Firmware version on the affected router parts.
Available version New versions of firmware for upgrading or downgrading.
Status Firmware condition on the router.
Action Whether you can upgrade or downgrade, or if no action is available (none).
show system firmware user@host> show system firmware

Part Type Tag Current Available Status
version version
FPC 0 ROM Monitor 0 0 6.4.10 OK
Routing Engine 0 RE BIOS 0 0 OK
show system firmware user@host> show system firmware compatibility

compatibility Part Type Tag Current Available Action
version version
FPC 0 ROM Monitor 0 0 6.4.10 None
Routing Engine 0 RE BIOS 0 0 None
show system firmware ! 417

show system license
Syntax show system license

<installed | keys | usage>
Description (J-series routing platform only) Display licenses and information about how they are
used.
Options none—Display all license information.
installed—(Optional) Display installed licenses only.
keys—(Optional) Display a list of license keys. Use this information to verify that
each expected license key is present.
usage—(Optional) Display the state of licensed features.
List of Sample Output show system license on page 419

show system license installed on page 419
show system license keys on page 420
show system license usage on page 420
Output Fields Table 93 lists the output fields for the show system license command. Output fields
Table 93: show system license Output Fields

Feature name Name assigned to the configured feature. You use this information to verify
that all the features for which you installed licenses are present.
Licenses used Number of licenses used by a Services Router. You use this information to
verify that the number of licenses used matches the number configured. If a
licensed feature is configured, the feature is considered used.
Licenses installed Information about the installed license key:
! License identifier—Identifier associated with a license key.
! State—State of the license key:valid or invalid. An invalid state indicates
that the key was entered incorrectly or is not valid for the specific device.
! License version—Version of a license. The version indicates how the license
is validated, the type of signature, and the signer of the license key.
! Valid for device—Device that can use a license key.
! Group defined—Group membership of a device.
! Features—Feature associated with a license, such as data link
switching (DLSw).
! Licenses needed—Number of licenses required for a licensed feature.
418 ! show system license

show system license user@host> show system license
License usage:
Licenses Licenses Licenses
Feature name used installed needed
j-flow 0 1 0
bgp-reflection 1 1 0
dlsw 1 1 0
Licenses installed:
License identifier: G03000002223
State: valid
License version: 2
Valid for device: JN001875AB
Features:
bgp-reflection - Border Gateway Protocol route reflection

State: valid
License version: 2
Features:
dlsw - Data-Link Switching (DLSw) protocol

State: valid
License version: 2
Features:
j-flow - J-FLOW traffic analysis (CFLOW reporting)
show system license user@host> show system license installed

installed License identifier: G03000002223
State: valid
License version: 2
Features:
bgp-reflection - Border Gateway Protocol route reflection

State: valid
License version: 2
Features:
dlsw - Data-Link Switching (DLSw) protocol

State: valid
License version: 2
Features:
j-flow - J-FLOW traffic analysis (CFLOW reporting)
show system license ! 419

show system license user@host> show system license keys

keys
G03000002223 aeaqea qkjjhd ambrha 3tkqkc ayareb zicik6
nv6jck btlxao 2trfyq 65cdou r5tbbb xdarpg
qq53lu qcx4vm ydakcs t3yyh2 v5mq
G03000002224 aeaqea qkjjhd ambrha 3tkqkc ayargb zicik6

nv6jck btlxao 2trfyq 65cdou r5tbof l4uon5
7rokz7 wgdocl r4q32p 2wu4zf zrxa
G03000002225 aeaqea qkjjhd ambrha 3tkqkc ayarab zicik6

nv6jck btlxao 2trfyq 65cdou r5tbiu jr6ui2
lmqgqj ouzq5a aiokdn 4tr4u2 wmcq
show system license user@host> show system license usage

usage
Licenses Licenses Licenses
Feature name used installed needed
j-flow 0 1 0
bgp-reflection 1 1 0
dlsw 1 1 0
420 ! show system license

show system processes
Syntax show system processes

<brief | detail | extensive | summary>
<wide>
Syntax show system processes

(Routing Matrix) <brief | detail | extensive | summary>
<wide>
Description Display information about software processes that are running on the router and
that have controlling terminals.
Options none—Display standard information about system processes.
all-lcc—(Routing matrix only) (Optional) Display standard system process

information for all T640 routing nodes (or line-card chassis) connected to a
TX Matrix platform.
brief | detail | extensive | summary—(Optional) Display the specified level of detail.
lcc number—(Routing matrix only) (Optional) Display standard system process

information for a specific T640 routing node that is connected to a TX Matrix
scc—(Routing matrix only) (Optional) Display standard system process information

for the TX Matrix platform (or switch-card chassis).
wide—(Optional) Display process information that might be wider than 80 columns.
Additional information By default, when you issue the show system processes command on a TX Matrix
List of Sample Output show system processes on page 423

show system processes brief on page 423
show system processes detail on page 424
show system processes extensive on page 424
show system processes lcc wide (Routing Matrix) on page 425
show system processes summary on page 426
show system processes ! 421

Output Fields Table 94 describes the output fields for the show system processes command.
Table 94: show system processes Output Fields (1 of 2)

last PID Last process identifier assigned to the process. brief extensive summary
load averages Three load averages followed by the current time. brief extensive summary
processes Number of existing processes and the number of processes in each brief extensive summary
state (sleeping, running, starting, zombies, and stopped).
Mem Information about physical and virtual memory allocation. brief extensive summary
Swap Information about physical and virtual memory allocation. brief extensive summary
PID Process identifier. detail extensive summary
TT Control terminal name. none detail
STAT Symbolic process state. The state is given by a sequence of letters. The none detail
first letter indicates the run state of the process:
! D—In disk or other short-term, uninterruptible wait
! I—Idle (sleeping longer than about 20 seconds)
! R—Runnable
! S—Sleeping for less than 20 seconds
! T—Stopped
! Z—Dead (zombie)
Any additional characters indicate additional information:
! + —The process is in the foreground process group of its control
terminal.
! < —The process has raised CPU scheduling priority.
! > —The process has specified a soft limit on memory requirements
and is currently exceeding that limit; such a process is not swapped.
! A—The process requested random page replacement.
! E—The process is trying to exit.
! L—The process has pages locked in core.
! N—The process has reduced CPU scheduling priority.
! S—The process requested first-in, first-out (FIFO) page replacement.
! s—The process is a session leader.
! V—The process is temporarily suspended.
! W—The process is swapped out.
! X—The process is being traced or debugged.
UID User identifier. detail

USERNAME Process owner. extensive summary
PPID Parent process identifier. detail
CPU (D)—Short-term CPU usage. detail extensive summary
(E and S)—Raw (unweighted) CPU usage. The value of this field is used
to sort the processes in the output.
RSS Resident set size. detail
WCHAN Symbolic name of the wait channel. detail
STARTED Local time when the process started running. detail
422 ! show system processes

Table 94: show system processes Output Fields (2 of 2)

PRI Current priority of the process. A lower number indicates a higher detail extensive summary
priority.
NI or NICE UNIX “niceness” value. A lower number indicates a higher priority. detail extensive summary
SIZE Total size of the process (text, data, and stack), in kilobytes. extensive summary
RES Current amount of resident memory, in kilobytes. extensive summary
STATE Current state of the process (for example, sleep, wait, run, idle, zombie, extensive summary
or stop).
TIME (S)—Number of system and user CPU seconds that the process has detail extensive summary
used.
(None, D, and E)—Total amount of time that the command has been
running.
WCPU Weighted CPU usage. extensive summary
COMMAND Command that is currently running. detail extensive summary
show system processes user@host> show system processes

PID TT STAT TIME COMMAND
0 ?? DLs 0:00.70 (swapper)
1 ?? Is 0:00.35 /sbin/init --
2 ?? DL 0:00.00 (pagedaemon)
3 ?? DL 0:00.00 (vmdaemon)
4 ?? DL 0:42.37 (update)
5 ?? DL 0:00.00 (if_jnx)
80 ?? Ss 0:14.66 syslogd -s
96 ?? Is 0:00.01 portmap
128 ?? Is 0:02.70 cron
173 ?? Is 0:02.24 /usr/local/sbin/sshd (sshd1)
189 ?? S 0:03.80 /sbin/watchdog -t180
190 ?? I 0:00.03 /usr/sbin/tnetd -N
191 ?? S 2:24.76 /sbin/ifd -N
192 ?? S< 0:55.44 /usr/sbin/xntpd -N
195 ?? S 0:53.11 /usr/sbin/snmpd -N
196 ?? S 1:15.73 /usr/sbin/mib2d -N
198 ?? I 0:00.75 /usr/sbin/inetd -N
2677 ?? I 0:00.01 /usr/sbin/mgd -N
2712 ?? Ss 0:00.24 rlogind
2735 ?? R 0:00.00 /bin/ps -ax
1985 p0- S 0:07.41 ./rpd -N
2713 p0 Is 0:00.24 -tcsh (tcsh)
2726 p0 S+ 0:00.07 cli
show system processes user@host> show system processes brief

brief last pid: 543; load averages: 0.00, 0.00, 0.00 18:29:47
37 processes: 1 running, 36 sleeping
Mem: 25M Active, 3976K Inact, 19M Wired, 8346K Buf, 202M Free
Swap: 528M Total, 64K Used, 528M Free

show system processes user@host> show system processes detail

detail PID UID PPID CPU PRI NI RSS WCHAN STARTED TT STAT TIME COMMAND
3151 1049 3129 2 28 0 672 - 1:13PM p0 R+ 0:00.00 ps -ax -r
1 0 0 0 10 0 376 wait 1:51PM ?? Is 0:00.29 /sbin/ini
2 0 0 0 -18 0 12 psleep 1:51PM ?? DL 0:00.00 (pagedae
3 0 0 0 28 0 12 psleep 1:51PM ?? DL 0:00.00 (vmdaemo
4 0 0 0 28 0 12 update 1:51PM ?? DL 0:07.15 (update)
5 0 0 0 2 0 12 pfesel 1:51PM ?? IL 0:02.90 (if_pfe)
27 0 1 0 10 0 17936 mfsidl 1:51PM ?? Is 0:00.46 mfs /dev/
81 0 1 0 2 0 496 select 1:52PM ?? Ss 0:31.21 syslogd -
119 1 1 0 2 0 492 select 1:52PM ?? Is 0:00.00 portmap
134 0 1 0 2 0 580 select 1:52PM ?? S 0:02.95 amd -p -a
151 0 1 0 18 0 532 pause 1:52PM ?? Is 0:00.34 cron
183 0 1 0 2 0 420 select 1:52PM ?? Ss 0:00.07 /usr/loca
206 0 1 0 18 0 72 pause 1:52PM ?? S 0:00.51 /sbin/wat
207 0 1 0 2 0 520 select 1:52PM ?? I 0:00.16 /usr/sbin
208 0 1 0 2 0 536 select 1:52PM ?? S 0:08.21 /sbin/dcd
210 0 1 255 2 -12 740 select 1:52PM ?? S< 0:05.83 /usr/sbin
211 0 1 0 2 0 376 select 1:52PM ?? S 0:00.03 /usr/sbin
215 0 1 0 2 0 548 select 1:52PM ?? I 0:00.50 /usr/sbin
219 0 1 0 3 0 540 ttyin 1:52PM v0 Is+ 0:00.02 /usr/libe
1380 0 1 0 3 0 888 ttyin 7:32PM d0 Is+ 0:00.46 bash
3019 0 207 0 2 0 636 select 10:49AM ?? Ss 0:02.93 tnp.chass
3122 0 1380 0 2 0 1764 select 12:33PM d0 S 0:00.77 ./rpd -N
3128 0 215 0 2 0 580 select 12:45PM ?? Ss 0:00.12 rlogind
3129 1049 3128 0 18 0 944 pause 12:45PM p0 Ss 0:00.14 -tcsh (tc
0 0 0 0 -18 0 0 sched 1:51PM ?? DLs 0:00.10 (swapper
show system processes user@host> show system processes extensive

extensive last pid: 544; load averages: 0.00, 0.00, 0.00 18:30:33
PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
544 root 30 0 604K 768K RUN 0:00 0.00% 0.00% top
3 root 28 0 0K 12K psleep 0:00 0.00% 0.00% vmdaemon
4 root 28 0 0K 12K update 0:03 0.00% 0.00% update
528 aviva 18 0 660K 948K pause 0:00 0.00% 0.00% tcsh
204 root 18 0 300K 544K pause 0:00 0.00% 0.00% csh
131 root 18 0 332K 532K pause 0:00 0.00% 0.00% cron
186 root 18 0 196K 68K pause 0:00 0.00% 0.00% watchdog
27 root 10 0 512M 16288K mfsidl 0:00 0.00% 0.00% mount_mfs
1 root 10 0 620K 344K wait 0:00 0.00% 0.00% init
304 root 3 0 884K 900K ttyin 0:00 0.00% 0.00% bash
200 root 3 0 180K 540K ttyin 0:00 0.00% 0.00% getty
194 root 2 0 2248K 1640K select 0:11 0.00% 0.00% rpd
205 root 2 0 964K 800K select 0:12 0.00% 0.00% tnp.chassisd
189 root 2 -12 352K 740K select 0:03 0.00% 0.00% xntpd
114 root 2 0 296K 612K select 0:00 0.00% 0.00% amd
188 root 2 0 780K 600K select 0:00 0.00% 0.00% dcd
527 root 2 0 176K 580K select 0:00 0.00% 0.00% rlogind
195 root 2 0 212K 552K select 0:00 0.00% 0.00% inetd

187 root 2 0 192K 532K select 0:00 0.00% 0.00% tnetd

83 root 2 0 188K 520K select 0:00 0.00% 0.00% syslogd
538 root 2 0 1324K 516K select 0:00 0.00% 0.00% mgd
99 daemon 2 0 176K 492K select 0:00 0.00% 0.00% portmap
163 root 2 0 572K 420K select 0:00 0.00% 0.00% nsrexecd
192 root 2 0 560K 400K select 0:10 0.00% 0.00% snmpd
191 root 2 0 1284K 376K select 0:00 0.00% 0.00% mgd
537 aviva 2 0 636K 364K select 0:00 0.00% 0.00% cli
193 root 2 0 312K 204K select 0:07 0.00% 0.00% mib2d
5 root 2 0 0K 12K pfesel 0:00 0.00% 0.00% if_pfe
2 root -18 0 0K 12K psleep 0:00 0.00% 0.00% pagedaemon
0 root -18 0 0K 0K sched 0:00 0.00% 0.00% swapper
show system processes user@host> show system processes lcc 2 wide

lcc wide lcc2-re0:
(Routing Matrix) --------------------------------------------------------------------------
PID TT STAT TIME COMMAND
0 ?? DLs 0:00.00 (swapper)
1 ?? ILs 0:00.10 /sbin/preinit -- (init)
2 ?? DL 0:00.00 (pagedaemon)
3 ?? DL 0:00.00 (vmdaemon)
4 ?? DL 0:00.00 (bufdaemon)
5 ?? DL 0:00.04 (syncer)
6 ?? DL 0:00.00 (netdaemon)
7 ?? IL 0:00.00 (if_pic_listen)
8 ?? IL 0:00.00 (scs_housekeeping)
9 ?? IL 0:00.00 (if_pfe_listen)
10 ?? DL 0:00.00 (vmuncachedaemon)
11 ?? SL 0:00.02 (cb_poll)
172 ?? ILs 0:00.21 mfs -o noauto /dev/ad1s1b /tmp (newfs)
2909 ?? Is 0:00.00 pccardd
2932 ?? Ss 0:00.07 syslogd -r -s
3039 ?? Is 0:00.00 cron
3217 ?? I 0:00.00 /sbin/watchdog -d
3218 ?? I 0:00.02 /usr/sbin/tnetd -N
3221 ?? S 0:00.11 /usr/sbin/alarmd -N
3222 ?? S 0:00.85 /usr/sbin/craftd -N
3223 ?? S 0:00.05 /usr/sbin/mgd -N
3224 ?? I 0:00.02 /usr/sbin/inetd -N
3225 ?? I 0:00.00 /usr/sbin/tnp.sntpd -N
3226 ?? I 0:00.01 /usr/sbin/tnp.sntpc -N
3228 ?? I 0:00.01 /usr/sbin/smartd -N
3231 ?? I 0:00.01 /usr/sbin/eccd -N
3425 ?? S 0:00.09 /usr/sbin/dfwd -N
3426 ?? S 0:00.19 /sbin/dcd -N
3427 ?? I 0:00.04 /usr/sbin/pfed -N
3430 ?? S 0:00.10 /usr/sbin/ksyncd -N
3482 ?? S 1:53.63 /usr/sbin/chassisd -N
4285 ?? SL 0:00.01 (peer proxy)
4286 ?? SL 0:00.00 (peer proxy)
4303 ?? Ss 0:00.00 mgd: (mgd) (root) (mgd)
4304 ?? R 0:00.00 /bin/ps -ax -ww
3270 d0 Is+ 0:00.00 /usr/libexec/getty std.9600 ttyd0

show system processes user@host> show system processes summary

summary last pid: 543; load averages: 0.00, 0.00, 0.00 18:29:47
PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
527 root 2 0 176K 580K select 0:00 0.04% 0.04% rlogind
543 root 30 0 604K 768K RUN 0:00 0.00% 0.00% top

show system queues
Syntax show system queues
Syntax show system queues

Description Display queue statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system queue statistics for all LCC
chassis attached to the routing matrix.
lcc number—(Routing matrix only) (Optional) Display queue statistics for a specific
T640 routing node that is connected to a TX Matrix platform. Replace number
scc—(Routing matrix only) (Optional) Display queue statistics for the TX Matrix
platform.
Additional Information By default, when you issue the show system queues command on a TX Matrix
List of Sample Output show system queues on page 428

show system queues scc (Routing Matrix) on page 428
Output Fields Table 95 lists the output fields for the show system queues command. Output fields
Table 95: show system queues Output Fields

Output interface Interface on the router on which the queue exists:
! fxp0—Management Ethernet interface
! fxp1—Internal Ethernet interface
! lsi—Internally generated interface and not configurable
! dsc—Discard interface
bytes Number of bytes in the queue.

max Maximum number of bytes allowed in the queue.
packets Number of packets in the queue.
max Maximum number of packets allowed in the queue.
drops Number of packets dropped from the queue.
show system queues ! 427

show system queues user@host> show system queues

output interface bytes max packets max drops
fxp0 0 1250000 0 4166 6
fxp1 0 1250000 0 4166 19
lsi 0 12500 0 41 0
dsc 0 0 0 0 0
show system queues user@host> show system queues scc

scc (Routing Matrix) output interface bytes max packets max drops
fxp0 0 1250000 0 4166 5
lsi 0 12500 0 41 0
dsc 0 0 0 0 0
lo0 0 0 0 0 0
bcm0 0 12500000 0 30000 0
em0 0 12500000 0 30000 0
gre 0 12500 0 41 0
ipip 0 12500 0 41 0
tap 0 0 0 0 0
pime 0 12500 0 41 0
pimd 0 12500 0 41 0
mtun 0 12500 0 41 0
so-1/0/0 0 125000 0 416 0
so-1/1/0 0 125000 0 416 0
so-21/0/0 0 125000 0 416 0
ge-21/1/0 0 1250000 0 4166 0
ge-21/1/1 0 1250000 0 4166 3
ge-21/2/0 0 1250000 0 4166 0
ge-21/2/1 0 1250000 0 4166 3
so-21/3/0 0 125000 0 416 0
so-0/0/0 0 125000 0 416 0
so-0/1/0 0 125000 0 416 0
so-0/2/0 0 125000 0 416 0
pd-0/3/0 0 12500 0 41 0
pe-0/3/0 0 12500 0 41 0
gr-0/3/0 0 12500 0 41 0
ip-0/3/0 0 12500 0 41 0
vt-0/3/0 0 12500 0 41 0
mt-0/3/0 0 12500 0 41 0
lt-0/3/0 0 12500 0 41 0
so-17/0/0 0 125000 0 416 0
input protocol bytes max packets max drops
splfwdq 0 1000000 0 1000 0
splnetq 0 1000000 0 1000 0
arpintrq 0 1000 0 50 0
optionq 0 200000 0 200 0
icmpq 0 50000 0 50 0
frlmiq 0 0 0 0 0
spppintrq 0 25000 0 250 0
clnlintrq 0 200000 0 200 0
tnpintrq 0 1250000 0 4166 0
tagintrq 0 200000 0 200 0
tagfragq 0 200000 0 200 0
428 ! show system queues

show system reboot
Syntax show system reboot

Syntax show system reboot

Description Display pending system reboots or halts.
Options none—Display pending reboots or halts on the active Routing Engine.
all-lcc—(Routing matrix only) (Optional) Display halt or reboot request information

for all T640 routing nodes (or line-card chassis) connected to a TX Matrix
platform.
lcc number—(Routing matrix only) (Optional) Display halt or reboot request

information for a specific T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Display halt or reboot request information for
the TX Matrix platform (or switch-card chassis).
both-routing-engines—(Optional) Display halt or reboot request information on both

Routing Engines.
Additional information By default, when you issue the show system reboot command on a TX Matrix
List of Sample Output show system reboot on page 429

show system reboot all-lcc (Routing Matrix) on page 429
show system reboot user@host> show system reboot

reboot requested by root at Wed Feb 10 17:40:46 1999
[process id 17885]
show system reboot user@host> show system reboot all-lcc

all-lcc (Routing Matrix) lcc0-re0:
--------------------------------------------------------------------------
lcc2-re0:
--------------------------------------------------------------------------
show system reboot ! 429

show system rollback
Syntax show system rollback number

<compare number>
Description Display the contents of a previously committed configuration, or the differences

between two previously committed configurations.
Options number—Number of a configuration to view. The output displays the configuration.

compare number—(Optional) Number of another previously committed (rollback)

configuration to compare to rollback number. The output displays the differences
between the two configurations. The range of values is 0 through 49.
List of Sample Output show system rollback compare on page 430
show system rollback user@host> show system rollback 3 compare 1

compare [edit]
+ interfaces {
+ ge-1/1/1 {
+ unit 0 {
+ family inet {
+ filter {
+ input mf_plp;
+ }
+ address 14.1.1.1/30;
+ }
+ }
+ }
+ ge-1/2/1 {
+ unit 0 {
+ family inet {
+ filter {
+ input mf_plp;
+ }
+ address 13.1.1.1/30;
+ }
+ }
+ }
+ ge-1/3/0 {
+ unit 0 {
+ family inet {
+ filter {
+ input mf_plp;
+ }
+ address 12.1.1.1/30;
+ }
+ }
+ }
+ }
430 ! show system rollback

show system services dhcp binding
Syntax show system services dhcp binding

<detail>
<address>
Description (J-series routing platform only) Display Dynamic Host Configuration Protocol
(DHCP) server client binding information.
Options none—Display brief information about all active client bindings.
detail—(Optional) Display detailed information about all active client bindings.
address—(Optional) Display detailed client binding information for the specified IP

address only.
See Also clear system services dhcp binding on page 341
List of Sample Output show system services dhcp binding on page 432
show system services dhcp binding address on page 432
show system services dhcp binding address detail on page 432
Output Fields Table 96 describes the output fields for the show system services dhcp binding
Table 96: show system services dhcp binding Output Fields

Allocated address List of IP addresses the DHCP server has assigned to clients. All levels
MAC address Corresponding media access control (MAC) hardware address of the client. All levels
Client identifier (address option only) Client's unique identifier (represented by an ASCII All levels
string or hexadecimal digits). This identifier is used by the DHCP server to
index its database of address bindings.
Binding Type Type of binding assigned to the client. DHCP servers can assign a dynamic All levels
binding from a pool of IP addresses or a static binding to one or more
specific IP addresses.
Lease Expires at Time the lease expires or never for leases that do not expire. All levels
Lease Obtained at (address option only) Time the client obtained the lease from the DHCP detail
server.
State Status of the binding. Bindings can be active or expired. detail
Pool Address pool that contains the IP address assigned to the client. detail
Request received on Interface on which the DHCP message exchange occurs. The IP address detail
pool is configured based on the interface’s IP address. If a relay agent is
used, its IP address is also displayed.
DHCP options User-defined options created for the DHCP server. If no options have been detail
defined, this field is blank.
show system services dhcp binding ! 431

show system services user@host> show system services dhcp binding

dhcp binding
Allocated address MAC address Binding Type Lease expires at
192.168.1.2 00:a0:12:00:12:ab static never
192.168.1.3 00:a0:12:00:13:02 dynamic 2004-05-03 13:01:42 PDT
show system services user@host> show system services dhcp binding 192.168.1.3
dhcp binding address
DHCP binding information:
Allocated address 192.168.1.3
Mac address 00:a0:12:00:12:ab
Client identifier
61 63 65 64 2d 30 30 3a 61 30 3a 31 32 3a 30 30 aced-00:a0:12:00
3a 31 33 3a 30 32 :13:02
Lease information:
Binding Type dynamic
Obtained at 2004-05-02 13:01:42 PDT
Expires at 2004-05-03 13:01:42 PDT
show system services user@host> show system services dhcp binding 192.168.1.3 detail
dhcp binding address
detail DHCP binding information:
Allocated address 192.168.1.3
MAC address 00:a0:12:00:12:ab
Pool 192.168.1.0/24
Request received on fe-0/0/0, relayed by 192.168.4.254
Lease information:
Type DHCP
Obtained at 2004-05-02 13:01:42 PDT
Expires at 2004-05-03 13:01:42 PDT
State active
DHCP options:
Name: name-server, Value: { 6.6.6.6, 6.6.6.7 }
Name: domain-name, Value: mydomain.tld
Code: 19, Type: flag, Value: off
Code: 40, Type: string, Value: domain.tld
Code: 32, Type: ip-address, Value: 3.3.3.33
432 ! show system services dhcp binding

show system services dhcp conflict
Syntax show system services dhcp conflict
(DHCP) client-detected conflicts for IP addresses.
Additional Information When a conflict is detected, the DHCP server removes the address from the address
pool.
See Also clear system services dhcp conflict on page 342
List of Sample Output show system services dhcp conflict on page 433
Output Fields Table 97 describes the output fields for the show system services dhcp conflict
Table 97: show system services dhcp conflict Output Fields

Detection time Date and time the client detected the conflict.
Detection method How the conflict was detected.
Address IP address where the conflict occurs. The addresses in the conflicts list
remain excluded from the pool until you use a clear system services dhcp
conflict command to manually clear the list.
show system services user@host> show system services dhcp conflict

dhcp conflict
Detection time Detection method Address
2004-08-03 19:04:00 PDT ARP 3.3.3.5
2004-08-04 04:23:12 PDT Ping 4.4.4.8
2004-08-05 21:06:44 PDT Client 3.3.3.10
show system services dhcp conflict ! 433

show system services dhcp global
Syntax show system services dhcp global
(DHCP) global configuration options.
Global options apply to all scopes and clients served by the DHCP server. Global
options are overridden if specified otherwise in scope or client options. Scope
options apply to specific subnets or ranges of addresses. Client options apply to
specific clients.
List of Sample Output show system services dhcp global on page 434
Output Fields Table 98 describes the output fields for the show system services dhcp global
Table 98: show system services dhcp global Output Fields

BOOTP lease length Length of lease time assigned to BOOTP clients.
Default lease time Lease time assigned to clients that do not request a specific lease time.
Minimum lease time Minimum time a client retains an IP address lease on the server.
Maximum lease time Maximum time a client can retain an IP address lease on the server.
DHCP options User-defined options created for the DHCP server. If no options have been
show system services user@host> show system services dhcp global

dhcp global
Global settings:
BOOTP lease length infinite
DHCP lease times:

Default lease time 1 hour
Minimum lease time 2 hours
Maximum lease time infinite
DHCP options:
Code: 32, Type: ip-address, Value: 3.3.3.33
434 ! show system services dhcp global

show system services dhcp pool
Syntax show system services dhcp pool

<detail>
<subnet-address>
(DHCP) server IP address pools.
Options none—Display brief information about all IP address pools.
detail—(Optional) Display detailed information.
subnet-address—(Optional) Display information for the specified subnet address.
List of Sample Output show system services dhcp pool on page 435
show system services dhcp pool subnet-address on page 436
show system services dhcp pool subnet-address detail on page 436
Output Fields Table 99 describes the output fields for the show system services dhcp pool
Table 99: show system services dhcp pool Output Fields

Pool name Subnet on which the IP address pool is defined. None specified
Low address Lowest address in the IP address pool. None specified
High address Highest address in the IP address pool. None specified
Excluded addresses Addresses excluded from the address pool. None specified
Subnet (subnet-address option only) Subnet to which the specified address pool None specified
belongs.
Address range (subnet-address option only) Range of IP addresses in the address pool. None specified
Addresses assigned Number of IP addresses in the pool that are assigned to DHCP clients and detail
the total number of IP addresses in the pool.
Active Number of assigned IP addresses in the pool that are active. detail
Excluded Number of assigned IP addresses in the pool that are excluded. detail
Default lease time Lease time assigned to clients that do not request a specific lease time. detail
Minimum lease time Minimum time a client can retain an IP address lease on the server. detail
Maximum lease time Maximum time a client can retain an IP address lease on the server. detail
DHCP options User-defined options created for the DHCP server. If no options have been detail
show system services user@host> show system services dhcp pool

dhcp pool
Pool name Low address High address Excluded addresses
3.3.3.0/24 3.3.3.2 3.3.3.254 3.3.3.1
show system services dhcp pool ! 435

show system services user@host> show system services dhcp pool 3.3.3.0/24
dhcp pool
subnet-address Pool information:
Subnet 3.3.3.0/24
Address range 3.3.3.2 - 3.3.3.254
Addresses assigned 2/253
show system services user@host> show system services dhcp pool 3.3.3.0/24 detail
dhcp pool
subnet-address detail Pool information:
Subnet 3.3.3.0/24
Address range 3.3.3.2 - 3.3.3.254
Addresses assigned 2/253
Active: 1, Excluded: 1
DHCP lease times:

DHCP options:
Name: router, Value: { 3.3.3.1 }
Name: server-identifier, Value: 3.3.3.1
Code: 32, Type: ip-address, Value: 3.3.3.333.3.3.254 3.3.3.1
436 ! show system services dhcp pool

show system services dhcp statistics
Syntax show system services dhcp statistics
(DHCP) server statistics.
See Also clear system services dhcp statistics on page 343
List of Sample Output show system services dhcp statistics on page 437
Output Fields Table 100 describes the output fields for the show system services dhcp statistics
Table 100: show system services dhcp statistics Output Fields

Minimum lease time Minimum time a client can retain an IP address lease on the server.
Packets dropped Total number of packets dropped and number of packets dropped
because of:
! Invalid hardware address
! Invalid opcode
! Invalid server address
! No available address
! No interface match
! No routing instance match
! No valid local addresses
! Packet too short
! Read error
! Send error
Messages received Number of the following message types sent from DHCP clients and
received by the DHCP server:
! BOOTREQUEST
! DHCPDECLINE
! DHCPDISCOVER
! DHCPINFORM
! DHCPRELEASE
! DHCPREQUEST
show system services dhcp statistics ! 437

Table 100: show system services dhcp statistics Output Fields

Minimum lease time Minimum time a client can retain an IP address lease on the server.
Messages sent Number of the following message types sent from the DHCP server to
DHCP clients:
! BOOTREPLY
! DHCPACK
! DHCPOFFER
! DHCPNAK
show system services user@host> show system services dhcp statistics

dhcp statistics
DHCP lease times:
Packets dropped:
Total 0
Bad hardware address 0
Bad opcode 0
Invalid server address 0
No available addresses 0
No interface match 0
No routing instance match 0
No valid local address 0
Packet too short 0
Read error 0
Send error 0
Messages received:
BOOTREQUEST 0
DHCPDECLINE 0
DHCPDISCOVER 0
DHCPINFORM 0
DHCPRELEASE 0
DHCPREQUEST 0
Messages sent:
BOOTREPLY 0
DHCPACK 0
DHCPOFFER 0
DHCPNAK 0
438 ! show system services dhcp statistics

show system services service-deployment
Syntax show system services service-deployment
Description Display information about a Service Deployment System (SDX) client.
List of Sample Output show system services service-deployment on page 439
show system services user@host> show system services service-deployment

service-deployment Connected to 192.4.4.4 port 10288 since 2004-05-03 11:04:34 PDT Keepalive
settings: Interval 15 seconds Keepalives sent: 750 Notifications sent: 0 Last
update from peer: 00:00:06 ago
show system services service-deployment ! 439

show system snapshot
Syntax show system snapshot
Description Display information about the backup software that is located in the /altroot and
/altconfig file systems. To back up software, use the request system snapshot
command.
See Also request system snapshot on page 368
List of Sample Output show system snapshot on page 440
show system snapshot user@host> show system snapshot

Information for snapshot on hard-disk
Creation date: Oct 5 13:53:29 2005
JUNOS version on snapshot:
jbase : 7.3R2.5
jcrypto: 7.3R2.5
jdocs : 7.3R2.5
jkernel: 7.3R2.5
jpfe : M40-7.3R2.5
jroute : 7.3R2.5
440 ! show system snapshot

show system software
Syntax show system software

<detail>

(Routing Matrix) <detail>

(J-series Routing <detail>
Platform) <backup>
Description Display the JUNOS extensions loaded on your router.
Options none—Display standard information about all loaded JUNOS extensions.
detail—(Optional) Display detailed information about available JUNOS extensions.
all-lcc—(Routing matrix only) (Optional) Display loaded JUNOS extensions on all

lcc number—(Routing matrix only) (Optional) Display the system software running
on a T640 routing node (or line-card chassis) that is connected to a TX Matrix
scc—(Routing matrix only) (Optional) Display the system software running on a

backup—(J-series routing platform only) (Optional) Display the status of old system
software packages only.
List of Sample Output show system software on page 441
show system software user@host> show system software

Comment:
Comment:
Information for jdocs:
Comment:
show system software ! 441

Comment:
Information for jpfe:
Comment:
JUNOS Packet Forwarding Engine Support (M20/M40) [7.2R1.7]
Information for jroute:
Comment:
JUNOS Routing Software Suite [7.2R1.7]
Information for junos:
Comment:
JUNOS Base OS boot [7.2R1.7]
442 ! show system software

show system statistics
Syntax show system statistics
Syntax show system statistics

Description Display system-wide protocol-related statistics.
Options none—Display system statistics for all the following protocols:
! arp—Address Resolution Protocol
! clnl—Connectionless Network Layer
! esis—End System-to-Intermediate System
! icmp—Internet Control Message Protocol
! icmp6—Internet Control Message Protocol version 6
! igmp—Internet Group Management Protocol
! ip—Internet Protocol version 4
! ip6—Internet Protocol version 6
! mpls—Multiprotocol Label Switching
! rdp—Reliable Datagram Protocol
! tcp—Transmission Control Protocol
! tnp—Trivial Network Protocol
! tudp—Trivial User Datagram Protocol
! udp—User Datagram Protocol
! vpls—Virtual Private LAN Service
all-lcc—(Routing matrix only) (Optional) Display system statistics for a protocol for
all T640 routing nodes (or line-card chassis) connected to a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display systems statistics for a

protocol for a specific T640 routing node (or line-card chassis) connected to a
scc—(Routing matrix only) (Optional) Display system statistics for a protocol for the
show system statistics ! 443

Additional Information By default, when you issue the show system statistics command on a TX Matrix
List of Sample Output show system statistics on page 444
show system statistics user@host> show system statistics

ip:
3682087 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with header length < data size
0 with data length < header length
0 with incorrect version number
0 packets destined to dead next hop
0 fragments received
0 fragments dropped (dup or out of space)
0 fragments dropped (queue overflow)
0 fragments dropped after timeout
0 fragments dropped due to over limit
0 packets reassembled ok
3664774 packets for this host
17316 packets for unknown/unsupported protocol
0 packets forwarded
0 packets not forwardable
0 redirects sent
6528 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 packets with bad options
1123 packets with options handled without error
0 strict source and record route options
0 loose source and record route options
0 record route options
0 timestamp options
0 timestamp and address options
0 timestamp and prespecified address options
0 option packets dropped due to rate limit
1123 router alert options
0 multicast packets dropped (no iflist)
0 packets dropped (src and int don't match)
icmp:
0 drops due to rate limit
0 calls to icmp_error
0 errors not generated because old message was icmp
Output histogram:
444 ! show system statistics

echo reply: 75
0 messages with bad code fields
0 messages less than the minimum length
0 messages with bad checksum
0 messages with bad source address
0 messages with bad length
0 echo drops with broadcast or multicast destination address
0 timestamp drops with broadcast or multicast destination address
Input histogram:
echo: 75
router advertisement: 130
75 message responses generated
tcp:
3844 packets sent
3618 data packets (1055596 bytes)
0 data packets (0 bytes) retransmitted
0 resends initiated by MTU discovery
205 ack-only packets (148 packets delayed)
0 URG only packets
0 window probe packets
0 window update packets
1079 control packets
5815 packets received
3377 acks (for 1055657 bytes)
24 duplicate acks
0 acks for unsent data
2655 packets (15004 bytes) received in-sequence
1 completely duplicate packet (0 bytes)
0 old duplicate packets
0 packets with some dup. data (0 bytes duped)
0 out-of-order packets (0 bytes)
0 packets (0 bytes) of data after window
0 window probes
0 packets received after close
0 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
1 connection request
32 connection accepts
0 bad connection attempts
0 listen queue overflows
33 connections established (including accepts)
30 connections closed (including 0 drops)
27 connections updated cached RTT on close
27 connections updated cached RTT variance on close
0 connections updated cached ssthresh on close
0 embryonic connections dropped
3374 segments updated rtt (of 3220 attempts)
0 retransmit timeouts
0 connections dropped by rexmit timeout
0 persist timeouts
0 connections dropped by persist timeout
344 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
1096 correct ACK header predictions
1314 correct data packet header predictions
32 syncache entries added
0 retransmitted
0 dupsyn
0 dropped
32 completed

0 bucket overflow
0 cache overflow
0 reset
0 stale
0 aborted
0 badack
0 unreach
0 zone failures
0 cookies sent
0 cookies received
0 ACKs sent in response to in-window but not exact RSTs
0 ACKs sent in response to in-window SYNs on established connections
0 rcv packets dropped by TCP due to bad address
0 out-of-sequence segment drops due to insufficient memory
1058 RST packets
0 ICMP packets ignored by TCP
0 send packets dropped by TCP due to auth errors
0 rcv packets dropped by TCP due to auth errors
udp:
3658884 datagrams received
0 with incomplete header
0 with bad data length field
0 with bad checksum
3657342 dropped due to no socket
3657342 broadcast/multicast datagrams dropped due to no socket
0 dropped due to full socket buffers
0 not for hashed pcb
4291311496 delivered
1551 datagrams output
ipsec:
0 inbound packets processed successfully
0 inbound packets violated process security policy
0 inbound packets with no SA available
0 invalid inbound packets
0 inbound packets failed due to insufficient memory
0 inbound packets failed getting SPI
0 inbound packets failed on AH replay check
0 inbound packets failed on ESP replay check
0 inbound AH packets considered authentic
0 inbound AH packets failed on authentication
0 inbound ESP packets considered authentic
0 inbound ESP packets failed on authentication
0 outbound packets processed successfully
0 outbound packets violated process security policy
0 outbound packets with no SA available
0 invalid outbound packets
0 outbound packets failed due to insufficient memory
0 outbound packets with no route
igmp:
17186 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent
arp:
2 ARP requests received
2028 ARP replies received
3156 resolution requests received

0 unrestricted proxy requests

0 received proxy requests
0 proxy requests not proxied
0 with bogus interface
787 with incorrect length
712 for non-IP protocol
0 with unsupported op code
0 with bad protocol address length
0 with bad hardware address length
0 with multicast source address
7611 with multicast target address
0 with my own hardware address
14241699 for an address not on the interface
0 with a broadcast source address
0 with source address duplicate to mine
29929250 which were not for me
0 packets discarded waiting for resolution
6 packets sent after waiting for resolution
17812 ARP requests sent
2 ARP replies sent
0 requests dropped on entry
0 requests dropped during retry
ip6:
0 with bad options
0 fragments that exceeded limit
0 packets forwarded
0 redirects sent
0 output packets dropped due to no bufs, etc.
0 fragments created
0 packets that violated scope rules
0 multicast packets which we don't join
Mbuf statistics:
0 packets whose headers are not continuous
0 tunneling packets that can't find gif
0 packets discarded due to too may headers
0 failures of source address selection
0 forward cache hit
0 forward cache miss
0 packets dropped due to bad protocol
icmp6:
0 errors not generated because old message was icmp error or so
0 errors not generated because rate limitation

0 messages < minimum length

0 bad checksums
Histogram of error messages to be generated:
0 no route
0 administratively prohibited
0 beyond scope
0 address unreachable
0 port unreachable
0 packet too big
0 time exceed transit
0 time exceed reassembly
0 erroneous header field
0 unrecognized next header
0 unrecognized option
0 redirect
0 unknown
0 messages with too many ND options
ipsec6:
0 inbound packets processed successfully
0 inbound packets violated process security policy
0 inbound packets with no SA available
0 invalid inbound packets
0 inbound packets failed due to insufficient memory
0 inbound packets failed getting SPI
0 inbound packets failed on AH replay check
0 inbound packets failed on ESP replay check
0 inbound AH packets considered authentic
0 inbound AH packets failed on authentication
0 inbound ESP packets considered authentic
0 inbound ESP packets failed on authentication
0 outbound packets processed successfully
0 outbound packets violated process security policy
0 outbound packets with no SA available
0 invalid outbound packets
0 outbound packets failed due to insufficient memory
0 outbound packets with no route
clnl:
0 packets delivered
0 too small
0 bad header length
0 bad checksum
0 bad version
0 unknown or unsupported protocol
0 bogus sdl size
0 no free memory in socket buffer
0 send packets discarded
0 sbappend failure
0 mcopy failure
0 address fields were not reasonable
0 segment information forgotten
0 forwarded packets
0 total packets sent
0 output packets discarded
0 non-forwarded packets
0 packets fragmented
0 fragments sent
0 fragments discarded
0 fragments timed out
0 fragmentation prohibited

0 packets reconstructed
0 packets destined to dead nexthop
0 packets discarded due to no route
0 Error pdu rate drops
0 ER pdu generation failure
esis:
0 total pkts received
0 total packets consumed by protocol
0 pdus received with bad checksum
0 pdus received with bad version number
0 pdus received with bad type field
0 short pdus received
0 bogus sdl size
0 bad header length
0 sbappend failure
0 mcopy failure
0 ISO family not configured
tnp:
146776365 unicast packets received
0 broadcast packets received
0 fragmented packets received
0 hello packets dropped
0 fragments dropped
0 fragment reassembly queue flushes
0 hello packets received
0 control packets received
49681642 rdp packets received
337175 udp packets received
96757548 tunnel packets received
0 input packets discarded with no protocol
98397591 unicast packets sent

0 broadcast packets sent
0 fragmented packets sent
0 fragments dropped
0 hello packets sent
0 control packets sent
49681642 rdp packets sent
337175 udp packets sent
48378774 tunnel packets sent
0 packets sent with unknown protocol
rdp:
49681642 input packets
0 discards for bad checksum
0 discards bad sequence number
0 refused connections
2031964 acks received
49692 retransmits
49681642 output packets
24815968 acks sent
28 connects
0 closes
22783990 keepalives received
22783990 keepalives sent
tudp:

0 with bad checksum

337175 delivered
ttp:
398749 packets sent
0 packets sent while unconnected
0 packets sent while interface down
0 packets sent couldn't get buffer
0 packets sent couldn’t find neighbor
44696687 L2 packets received
0 unknown L3 packets received
3682087 IPv4 L3 packets received
0 MPLS L3 packets received
0 MPLS->IPv4 L3 packets received
0 IPv4->MPLS L3 packets received
0 IPv6 L3 packets received
0 ARP L3 packets received
0 CLNP L3 packets received
0 TNP L3 packets received
0 NULL L3 packets received
0 cyclotron cycle L3 packets received
0 cyclotron send L3 packets received
0 packets received while unconnected
0 packets received from unknown ifl
0 input packets couldn't get buffer
0 input packets with bad type
0 input packets with discard type
0 input packets for which rt lookup is bypassed
mpls:
0 total mpls packets received
0 packets forwarded
0 packets dropped
0 with header too small
0 after tagging, can't fit link MTU
0 with IPv4 explicit NULL tag
0 with IPv4 explicit NULL cksum errors
0 with router alert tag
0 lsp ping packets (ttl-expired/router alert)
0 with ttl expired
0 with tag encoding error
0 packets discarded, no route
vpls:
0 packets with no logical interface

0 packets with no family
0 packets with no route table
0 packets with no auxiliary table
0 packets with no corefacing entry
0 packets with no CE-facing entry
0 mac route learning requests

0 mac routes learnt
0 requests to learn an existing route
0 learning requests while learning disabled on interface
0 learning requests over capacity
0 mac routes moved

0 requests to move static route
0 mac route aging requests

0 mac routes aged
0 bogus address in aging requests
0 requests to age static route
0 requests to re-ageout aged route
0 requests involving multiple peer FEs
0 aging acks from PFE
0 aging non-acks from PFE
0 aging requests timed out waiting on FEs
0 aging requests over max-rate
0 errors finding peer FEs

show system statistics arp
Syntax show system statistics arp
Syntax show system statistics arp

Description Display system-wide Address Resolution Protocol (ARP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system-wide ARP statistics for all
lcc number—(Routing matrix only) (Optional) Display system statistics for ARP for a
scc—(Routing matrix only) (Optional) Display system statistics for ARP for the TX
Matrix platform (or switch-card chassis).
Additional Information By default, when you issue the show system statistics arp command on a TX Matrix
List of Sample Output show system statistics arp on page 452
show system user@host> show system statistics arp

statistics arp arp:
2 ARP requests received
2026 ARP replies received
3152 resolution requests received
0 unrestricted proxy requests
0 received proxy requests
0 proxy requests not proxied
0 with bogus interface
787 with incorrect length
712 for non-IP protocol
0 with unsupported op code
0 with bad protocol address length
0 with bad hardware address length
0 with multicast source address
7603 with multicast target address
0 with my own hardware address
14218490 for an address not on the interface
0 with a broadcast source address
0 with source address duplicate to mine
29905774 which were not for me
0 packets discarded waiting for resolution
6 packets sent after waiting for resolution
17790 ARP requests sent
452 ! show system statistics arp

2 ARP replies sent

0 requests dropped on entry
0 requests dropped during retry
show system statistics arp ! 453

show system statistics clnl
Syntax show system statistics clnl
Syntax show system statistics clnl

Description Display system-wide Connectionless Network Layer (CLNL) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for CLNL for all
lcc number—(Routing matrix only) (Optional) Display system statistics for CLNL for
a specified T640 routing node (or line-card chassis) connected to a TX Matrix
scc—(Routing matrix only) (Optional) Display system statistics for CLNL for the TX
Additional Information By default, when you issue the show system statistics clnl command on a TX Matrix
List of Sample Output show system statistics clnl on page 454
show system user@host> show system statistics clnl

statistics clnl clnl:
0 packets delivered
0 too small
0 bad header length
0 bad checksum
0 bad version
0 bogus sdl size
0 sbappend failure
0 mcopy failure
0 address fields were not reasonable
0 segment information forgotten
0 forwarded packets
0 total packets sent
0 output packets discarded
0 non-forwarded packets
0 packets fragmented
0 fragments sent
0 fragments discarded
0 fragments timed out
0 fragmentation prohibited
454 ! show system statistics clnl

0 packets reconstructed
0 packets destined to dead nexthop
0 packets discarded due to no route
0 Error pdu rate drops
0 ER pdu generation failure
show system statistics clnl ! 455

show system statistics esis
Syntax show system statistics esis
Syntax show system statistics esis

Description Display system-wide End System-to-Intermediate System (ES-IS) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for ES-IS for all
lcc number—(Routing matrix only) (Optional) Display system statistics for ES-IS for a
scc—(Routing matrix only) (Optional) Display system statistics for ES-IS for the TX
Additional Information By default, when you issue the show system statistics esis command on a TX
List of Sample Output show system statistics esis on page 456
show system user@host> show system statistics esis

statistics esis esis:
0 total pkts received
0 total packets consumed by protocol
0 pdus received with bad checksum
0 pdus received with bad version number
0 pdus received with bad type field
0 short pdus received
0 bogus sdl size
0 bad header length
0 sbappend failure
0 mcopy failure
0 ISO family not configured
456 ! show system statistics esis

show system statistics icmp
Syntax show system statistics icmp
Syntax show system statistics icmp

Description Display system-wide Internet Control Message Protocol (ICMP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for ICMP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for ICMP for
scc—(Routing matrix only) (Optional) Display system statistics for ICMP for the TX
Additional Information By default, when you issue the show system statistics icmp command on a TX
List of Sample Output show system statistics icmp on page 457
show system user@host> show system statistics icmp

statistics icmp icmp:
0 drops due to rate limit
0 errors not generated because old message was icmp
Output histogram:
echo reply: 75
0 messages less than the minimum length
0 messages with bad checksum
0 messages with bad source address
0 echo drops with broadcast or multicast dest in at on address
0 timestamp drops with broadcast or multicast destination address
Input histogram:
echo: 75
router advertisement: 130
show system statistics icmp ! 457

show system statistics icmp6
Syntax show system statistics icmp6
Syntax show system statistics icmp6

Description Display system-wide Internet Control Message Protocol for IPv6 (ICMP6) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for ICMPv6 for all
lcc number—(Routing matrix only) (Optional) Display system statistics for ICMPv6
for a specified T640 routing node (or line-card chassis) connected to a TX
Matrix platform. Replace number with a value from 0 through 3.
scc—(Routing matrix only) (Optional) Display system statistics for ICMPv6 for the
Additional Information By default, when you issue the show system statistics icmpv6 command on a TX
List of Sample Output show system statistics icmp6 on page 458
show system user@host> show system statistics icmp6

statistics icmp6 icmp6:
0 errors not generated because old message was icmp error or so
0 errors not generated because rate limitation
0 messages < minimum length
0 bad checksums
Histogram of error messages to be generated:
0 no route
0 administratively prohibited
0 beyond scope
0 address unreachable
0 port unreachable
0 packet too big
0 time exceed transit
0 time exceed reassembly
0 erroneous header field
0 unrecognized next header
0 unrecognized option
0 redirect
0 unknown
0 messages with too many ND options
458 ! show system statistics icmp6

show system statistics igmp
Syntax show system statistics igmp
Syntax show system statistics igmp

Description Display system-wide Internet Group Management Protocol (IGMP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for IGMP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for IGMP for
scc—(Routing matrix only) (Optional) Display system statistics for IGMP for the TX
Additional Information By default, when you issue the show system statistics igmp command on a TX
List of Sample Output show system statistics igmp on page 459
show system user@host> show system statistics igmp

statistics igmp igmp:
17178 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent
show system statistics igmp ! 459

show system statistics ip
Syntax show system statistics ip
Syntax show system statistics ip

Description Display system-wide IPv4 statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for IPv4 for all
lcc number—(Routing matrix only) (Optional) Display system statistics for IPv4 for a
scc—(Routing matrix only) (Optional) Display system statistics for IPv4 for the TX
Additional Information By default, when you issue the show system statistics ip command on a TX Matrix
List of Sample Output show system statistics ip on page 460
show system user@host> show system statistics ip

statistics ip ip:
0 bad header checksums
0 with header length < data size
0 with data length < header length
0 fragments dropped (queue overflow)
0 fragments dropped due to over limit
17309 packets for unknown/unsupported protocol
0 packets forwarded
0 redirects sent
0 output packets dropped due to no bufs
460 ! show system statistics ip


0 fragments created
0 packets with bad options
1123 packets with options handled without error
0 strict source and record route options
0 loose source and record route options
0 record route options
0 timestamp options
0 timestamp and address options
0 timestamp and prespecified address options
1123 router alert options
0 multicast packets dropped (no iflist)
show system statistics ip ! 461

show system statistics ip6
Syntax show system statistics ip6
Syntax show system statistics ip6

Description Display system-wide IPv6 statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for IPv6 for all
lcc number—(Routing matrix only) (Optional) Display system statistics for IPv6 for a
scc—(Routing matrix only) (Optional) Display system statistics for IPv6 for the TX
Additional Information By default, when you issue the show system statistics ip6 command on a TX Matrix
List of Sample Output show system statistics ip6 on page 462
show system user@host> show system statistics ip6

statistics ip6 ip6:
0 with bad options
0 fragments that exceeded limit
0 packets forwarded
0 redirects sent
0 output packets dropped due to no bufs, etc.
0 fragments created
0 packets that violated scope rules
0 multicast packets which we don't join
462 ! show system statistics ip6

Mbuf statistics:
0 packets whose headers are not continuous
0 tunneling packets that can't find gif
0 packets discarded due to too may headers
0 failures of source address selection
0 forward cache hit
0 forward cache miss
0 packets dropped due to bad protocol
show system statistics ip6 ! 463

show system statistics mpls
Syntax show system statistics mpls
Syntax show system statistics mpls

Description Display system-wide Multiprotocol Label Switching (MPLS) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for MPLS for all
lcc number—(Routing matrix only) (Optional) Display system statistics for MPLS for
scc—(Routing matrix only) (Optional) Display system statistics for MPLS for the TX
Additional Information By default, when you issue the show system statistics mpls command on a TX
List of Sample Output show system statistics mpls on page 464
show system user@host> show system statistics mpls

statistics mpls mpls:
0 total mpls packets received
0 packets forwarded
0 packets dropped
0 with header too small
0 after tagging, can't fit link MTU
0 with IPv4 explicit NULL tag
0 with IPv4 explicit NULL cksum errors
0 with router alert tag
0 lsp ping packets (ttl-expired/router alert)
0 with ttl expired
0 with tag encoding error
0 packets discarded, no route
464 ! show system statistics mpls

show system statistics rdp
Syntax show system statistics rdp
Syntax show system statistics rdp

Description Display system-wide Reliable Datagram Protocol (RDP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for RDP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for RDP for a
scc—(Routing matrix only) (Optional) Display system statistics for RDP for the TX
Additional Information By default, when you issue the show system statistics rdp command on a TX Matrix
List of Sample Output show system statistics rdp on page 465
show system user@host> show system statistics rdp

statistics rdp rdp:
49668864 input packets
0 discards for bad checksum
0 discards bad sequence number
0 refused connections
2031513 acks received
49692 retransmits
49668864 output packets
24809579 acks sent
28 connects
0 closes
22778052 keepalives received
22778052 keepalives sent
show system statistics rdp ! 465

show system statistics tcp
Syntax show system statistics tcp
Syntax show system statistics tcp

Description Display system-wide Transmission Control Protocol (TCP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for TCP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for TCP for a
scc—(Routing matrix only) (Optional) Display system statistics for TCP for the TX
Additional Information By default, when you issue the show system statistics tcp command on a TX Matrix
List of Sample Output show system statistics tcp on page 466

show system statistics tcp lcc on page 467
show system user@host> show system statistics tcp

statistics tcp tcp:
3844 packets sent
0 URG only packets
1079 control packets
24 duplicate acks
1 completely duplicate packet (0 bytes)
0 window probes
466 ! show system statistics tcp


1 connection request
0 persist timeouts
32 syncache entries added
0 retransmitted
0 dupsyn
0 dropped
32 completed
0 bucket overflow
0 cache overflow
0 reset
0 stale
0 aborted
0 badack
0 unreach
0 zone failures
0 cookies sent
0 cookies received
0 rcv packets dropped by TCP due to bad address
1058 RST packets
0 send packets dropped by TCP due to auth errors
0 rcv packets dropped by TCP due to auth errors
show system statistics user@host> show system statistics tcp lcc 2

tcp lcc lcc2-re0:
--------------------------------------------------------------------------
tcp:
21271 packets sent
0 URG only packets
4 control packets
0 duplicate acks
show system statistics tcp ! 467


0 completely duplicate packets (0 bytes)
0 window probes
4 connection requests
0 persist timeouts
0 RST packets
468 ! show system statistics tcp

show system statistics tnp
Syntax show system statistics tnp
Syntax show system statistics tnp

Description Display system-wide Trivial Network Protocol (TNP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for TNP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for TNP for a
scc—(Routing matrix only) (Optional) Display system statistics for TNP for the TX
Additional Information By default, when you issue the show system statistics tnp command on a TX Matrix
List of Sample Output show system statistics tnp on page 469
show system user@host> show system statistics tnp

statistics tnp tnp:
146742559 unicast packets received
0 broadcast packets received
0 fragmented packets received
0 fragments dropped
0 fragment reassembly queue flushes
0 hello packets received
0 control packets received
49670972 rdp packets received
337101 udp packets received
96734486 tunnel packets received
0 input packets discarded with no protocol
98375316 unicast packets sent

0 broadcast packets sent
0 fragmented packets sent
0 fragments dropped
0 hello packets sent
0 control packets sent
49670972 rdp packets sent
show system statistics tnp ! 469

337101 udp packets sent

48367243 tunnel packets sent
0 packets sent with unknown protocol
470 ! show system statistics tnp

show system statistics tudp
Syntax show system statistics tudp
Syntax show system statistics tudp

Description Display system-wide Trivial User Datagram Protocol (TUDP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for TUDP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for TUDP for
scc—(Routing matrix only) (Optional) Display system statistics for TUDP for the TX
Additional Information By default, when you issue the show system statistics tudp command on a TX
List of Sample Output show system statistics tudp on page 471
show system user@host> show system statistics tudp

statistics tudp tudp:
0 with bad checksum
337109 delivered
show system statistics tudp ! 471

show system statistics udp
Syntax show system statistics udp
Syntax show system statistics udp

Description Display system-wide User Datagram Protocol (UDP) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for UDP for all
lcc number—(Routing matrix only) (Optional) Display system statistics for UDP for a
scc—(Routing matrix only) (Optional) Display system statistics for UDP for the TX
Additional Information By default, when you issue the show system statistics udp command on a TX Matrix
List of Sample Output show system statistics udp on page 472
show system user@host> show system statistics udp

statistics udp udp:
0 with bad checksum
0 not for hashed pcb
4291311953 delivered
472 ! show system statistics udp

show system statistics vpls
Syntax show system statistics vpls
Syntax show system statistics vpls

Description Display system-wide Virtual Private LAN Service (VPLS) statistics.
Options all-lcc—(Routing matrix only) (Optional) Display system statistics for VPLS for all
lcc number—(Routing matrix only) (Optional) Display system statistics for VPLS for a
scc—(Routing matrix only) (Optional) Display system statistics for VPLS for the TX
Additional Information By default, when you issue the show system statistics vpls command on a TX Matrix
List of Sample Output show system statistics vpls on page 473
show system user@host> show system statistics vpls

statistics vpls vpls:
0 packets with no logical interface

0 packets with no family
0 packets with no route table
0 packets with no auxiliary table
0 packets with no corefacing entry
0 packets with no CE-facing entry
0 mac route learning requests

0 mac routes learnt
0 requests to learn an existing route
0 learning requests while learning disabled on interface
0 learning requests over capacity
0 mac routes moved
0 requests to move static route
0 mac route aging requests

0 mac routes aged
0 bogus address in aging requests
show system statistics vpls ! 473

0 requests to age static route

0 requests to re-ageout aged route
0 requests involving multiple peer FEs
0 aging acks from PFE
0 aging non-acks from PFE
0 aging requests timed out waiting on FEs
0 aging requests over max-rate
0 errors finding peer FEs
474 ! show system statistics vpls

show system storage
Syntax show system storage

<detail>
Syntax show system storage

(Routing Matrix) <detail>
Description Display statistics about the amount of free disk space in the router’s file systems.
Options none—Display standard information about the amount of free disk space in the
router’s file systems.
detail—Display detailed output.
all-lcc—(Routing matrix only) (Optional) Display system storage statistics for all
lcc number—(Routing matrix only) (Optional) Display storage statistics for a specific
scc—(Routing matrix only) (Optional) Display storage statistics for the TX Matrix
Additional Information By default, when you issue the show system storage command on a TX Matrix
List of Sample Output show system storage on page 476
Output Fields Table 101 describes the output fields for the show system storage command. Output
Table 101: show system storage Output Fields

Filesystem Name of the file system.
Size Size of the file system.
Used Amount of space used in the file system.
Avail Amount of space available in the file system.
Capacity Percentage of the file system’s space that is being used.
Mounted on Directory in which the file system is mounted.
show system storage ! 475

show system storage user@host> show system storage

Filesystem Size Used Avail Capacity Mounted on
/dev/ad0s1a 77M 37M 34M 52% /
devfs 16K 16K 0B 100% /dev/
/dev/vn0 12M 12M 0B 100%
/packages/mnt/jbase
/dev/vn1 39M 39M 0B 100%
/packages/mnt/jkernel-7.2R1.7
/dev/vn2 12M 12M 0B 100%
/packages/mnt/jpfe-M40-7.2R1.7
/dev/vn3 2.3M 2.3M 0B 100%
/packages/mnt/jdocs-7.2R1.7
/dev/vn4 14M 14M 0B 100%
/packages/mnt/jroute-7.2R1.7
/dev/vn5 4.5M 4.5M 0B 100%
/packages/mnt/jcrypto-7.2R1.7
mfs:172 1.5G 4.0K 1.3G 0% /tmp
/dev/ad0s1e 12M 20K 11M 0% /config
procfs 4.0K 4.0K 0B 100% /proc
/dev/ad1s1f 9.4G 4.9G 3.7G 57% /var
476 ! show system storage

show system switchover
Syntax show system switchover
Syntax show system switchover

Description Display whether graceful switchover is configured, the state of the kernel replication
(ready or synchronizing), any replication errors, and whether the primary and
standby Routing Engines are using compatible versions of the kernel database.
Options all-lcc—(Routing matrix only) (Optional) Display Routing Engine graceful switchover
TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display Routing Engine graceful

switchover information for a specific T640 routing node (or line-card chassis)
0 through 3.
scc—(Routing matrix only) (Optional) Display Routing Engine graceful switchover

Additional information By default, when you issue the show system switchover command on a TX Matrix
List of Sample Output show system switchover on page 478

show system switchover all-lcc (Routing Matrix) on page 478
Output Fields Table 102 describes the output fields for the show system switchover command.
Table 102: show system switchover Output Fields

Graceful switchover Display graceful switchover status:
! On—Indicates graceful-switchover is specified for the routing-options
configuration command.
! Off—Indicates graceful-switchover is not specified for the routing-options
configuration command.
Configuration State of the configuration database:
database
! Ready—Configuration database has synchronized.
! Synchronizing—Configuration database is synchronizing. Displayed
when there are updates within the last 5 seconds.
! Synchronize failed—Configuration database synchronize process failed.
show system switchover ! 477

Table 102: show system switchover Output Fields

Kernel database State of the kernel database:
! Ready—Kernel database has synchronized.
! Synchronizing—Kernel database is synchronizing. Displayed when there
are updates within the last 5 seconds.
! Version incompatible—The primary and standby Routing Engines are
running incompatible kernel database versions.
Replication error—An error occurred when the state was replicated from
the primary Routing Engine. Inspect /var/log/ksyncd for possible causes,
or notify Juniper Networks customer support.
show system user@host> show system switchover

switchover Graceful switchover: On
Configuration database: Ready
Kernel database: Ready
show system user@host> show system switchover all-lcc

switchover all-lcc
--------------------------------------------------------------------------
Multichassis replication: On
lcc2-re0:
--------------------------------------------------------------------------
Multichassis replication: On
478 ! show system switchover

show system uptime
Syntax show system uptime
Syntax show system uptime

Description Display the current time and information about how long the router, router
software, and routing protocols have been running.
Options all-lcc—(Routing matrix only) (Optional) Show the time since the system booted and
processes started on all T640 routing nodes (or line-card chassis) connected to
a TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Show the time since the system
booted and processes started on a specific T640 routing node (or line-card
chassis) that is connected to a TX Matrix platform. Replace number with a value
from 0 through 3.
scc—(Routing matrix only) (Optional) Show the time since the system booted and
processes started on the TX Matrix platform (or switch-card chassis).
Additional information By default, when you issue the show system uptime command on a TX Matrix
List of Sample Output show system uptime on page 480

show system uptime all-lcc (Routing Matrix) on page 480
Output Fields Table 103 describes the output fields for the show system uptime command. Output
Table 103: show system uptime Output Fields

Current time Current system time in UTC.
System booted Date and time when the router was last booted and how long it has been
running.
Protocols started Date and time when the routing protocols were last started and how long
they have been running.
Last configured Date and time when a configuration was last committed. Also shows name
of user who issued the last commit command.
time and up Current time, in the local time zone, and how long the router has been
operational.
users Number of users logged in to the router.
load averages Load averages for the last 1 minute, 5 minutes, and 15 minutes.
show system uptime ! 479

show system uptime user@host> show system uptime

Current time: 1998-10-13 19:45:47 UTC
System booted: 1998-10-12 20:51:41 UTC (22:54:06 ago)
Protocols started: 1998-10-13 19:33:45 UTC (00:12:02 ago)
Last configured: 1998-10-13 19:33:45 UTC (00:12:02 ago) by abc
12:45PM up 22:54, 2 users, load averages: 0.07, 0.02, 0.01
show system uptime user@host> show system uptime all-lcc

all-lcc (Routing Matrix) lcc0-re0:
--------------------------------------------------------------------------
Current time: 2004-09-13 09:55:35 PDT
9:55AM PDT up 6:42, 1 user, load averages: 0.02, 0.03, 0.00
lcc2-re0:
--------------------------------------------------------------------------
Current time: 2004-09-13 09:55:35 PDT
System booted: 2004-09-12 03:23:43 PDT (1d 06:31 ago)
9:55AM PDT up 1 day, 6:32, 1 user, load averages: 0.02, 0.01, 0.00
480 ! show system uptime

show system users
Syntax show system users

<no-resolve>
Syntax show system users

<no-resolve>
Description List information about the users who are currently logged in to the router.
Options none—List information about the users who are currently logged in to the router.
all-lcc—(Routing matrix only) (Optional) Show users who are currently logged on all
lcc number—(Routing matrix only) (Optional) Show users who are currently logged
onto a specific T640 routing node (or line-card chassis) that is connected to a
no-resolve—(Optional) Do not attempt to resolve IP addresses to hostnames.
scc—(Optional) (Routing matrix only) Show users currently logged on to the TX

Additional Information By default, when you issue the show system users command on a TX Matrix master
connected to it. Likewise, if you issue the same command on the TX Matrix backup
Routing Engine, the command is broadcast to all the T640 backup Routing Engines
that are connected to it.
List of Sample Output show system users on page 482

show system users lcc no-resolve (Routing Matrix) on page 482
Output Fields Table 104 describes the output fields for the show system users command. Output
Table 104: show system users Output Fields

time and up Current time, in the local time zone, and how long the router has been
operational.
users Number of users logged in to the router.
load averages Load averages for the last 1 minute, 5 minutes, and 15 minutes.
USER Username
TTY Terminal through which the user is logged in
FROM System from which the user has logged in. A hyphen indicates that the
user is logged in through the console.
LOGIN@ Time when the user logged in.
show system users ! 481

Table 104: show system users Output Fields

IDLE How long the user has been idle.
WHAT Processes that the user is running.
show system users user@host> show system users

7:30PM up 4 days, 2:26, 2 users, load averages: 0.07, 0.02, 0.01
USER TTY FROM LOGIN@ IDLE WHAT
root d0 - Fri05PM 4days -csh (csh)
blue p0 level5.company.net 7:30PM - cli
show system users lcc user@host> show system users lcc 2 no-resolve
no-resolve
--------------------------------------------------------------------------
10:34AM PDT up 1 day, 7:11, 5 users, load averages: 0.03, 0.01, 0.00
USER TTY FROM LOGIN@ IDLE WHAT
root d0 - 3:21AM 7:12 /bin/csh
regress p0 scc-re0 10:15AM - telnet hostA
482 ! show system users

show system virtual-memory
Syntax show system virtual-memory
Syntax show system virtual-memory

Description Display the usage of JUNOS kernel memory listed first by size of allocation and then
by type of usage. Use show system virtual-memory for troubleshooting with Juniper
Networks Customer Support.
Options all-lcc—(Routing matrix only) (Optional) Display kernel dynamic memory usage
TX Matrix platform.
lcc number—(Routing matrix only) (Optional) Display kernel dynamic memory

usage information for a specific T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Routing matrix only) (Optional) Display kernel dynamic memory usage

Additional Information By default, when you issue the show system virtual-memory command on a TX
List of Sample Output show system virtual-memory on page 484

show system virtual-memory scc (Routing Matrix) on page 488
Output Fields Table 105 lists the output fields for the show system virtual-memory command.
Table 105: show system virtual-memory Output Fields (1 of 2)

Memory statistics by bucket size
Size Memory block size (bytes). The kernel memory allocator appropriates blocks
of memory whose size is exactly a power of 2.
In Use Number of memory blocks of this size that are in use (bytes).
Free Number of memory blocks of this size that are free (bytes).
Requests Number of memory allocation requests made.
HighWater Maximum value the free list can have. Once the system starts reclaiming
physical memory, it continues until the free list is increased to this value.
Couldfree Total number of times that the free elements for a bucket size exceed the
high-water mark for that bucket size.
show system virtual-memory ! 483

Table 105: show system virtual-memory Output Fields (2 of 2)

Memory usage type by bucket size
Size Memory block size (bytes).
Type(s) Kernel modules that are using these memory blocks. For a definition of each
type, refer to a FreeBSD book.
Memory statistics by type
Type Kernel module that is using dynamic memory.
InUse Number of memory blocks used by this type. The number is rounded up.
MemUse Amount of memory in use, in kilobytes (KB).
HighUse Maximum memory ever used by this type.
Limit Maximum memory that can be allocated to this type.
Requests Total number of dynamic memory allocation requests this type has made.
Type Limit Number of times requests were blocked for reaching the maximum limit.
Kern Limit Number of times requests were blocked for kernel map.
Size(s) Memory block sizes this type is using.
Memory Totals
In Use Total kernel dynamic memory in use (bytes, rounded up).
Free Total kernel dynamic memory free (bytes, rounded up).
Requests Total number of memory allocation requests.
ITEM Kernel module that is using memory.
Size Memory block size (bytes).
LImit Maximum memory that can be allocated to this type.
Used Number of memory blocks used by this type. The number is rounded up.
Free Number of memory blocks available to this type.
Requests Total number of memory allocation requests this type has made.
interrupt Timer events and scheduling interruptions.
total Total number of interruptions for each type.
rate Interruption rate.
Total Total for all interruptions.
show system user@host> show system virtual-memory

virtual-memory Memory statistics by bucket size
Size In Use Free Requests HighWater Couldfree
16 906 118 154876 1280 0
32 455 313 209956 640 0
64 4412 260 75380 320 20
128 3200 32 19361 160 81
256 1510 10 8844 80 4
512 446 2 5085 40 0
1K 18 2 5901 20 0
2K 1128 2 4445 10 1368
4K 185 1 456 5 0
8K 5 1 2653 5 0
16K 181 0 233 5 0
32K 2 0 1848 5 0
484 ! show system virtual-memory

64K 20 0 22 5 0
128K 5 0 5 5 0
256K 2 0 2 5 0
512K 1 0 1 5 0

Size Type(s)
16 uc_devlist, nexusdev, iftable, temp, devbuf, atexit, COS, BPF,
DEVFS mount, DEVFS node, vnodes, mount, pcb, soname, proc-args, kld,
MD disk, rman, ATA generic, bus, sysctl, ippool, pfestat, ifstate,
pfe_ipc, mkey, rtable, ifmaddr, ipfw, rnode
32 atkbddev, dirrem, mkdir, diradd, freefile, freefrag, indirdep,
bmsafemap, newblk, temp, devbuf, COS, vnodes, cluster_save buffer,
pcb, soname, proc-args, sigio, kld, Gzip trees, taskqueue, SWAP,
eventhandler, bus, sysctl, uidinfo, subproc, pgrp, pfestat, itable32,
ifstate, pfe_ipc, mkey, rtable, ifmaddr, ipfw, rnode, rtnexthop
64 isadev, iftable, MFS node, allocindir, allocdirect, pagedep, temp,
devbuf, lockf, COS, NULLFS hash, DEVFS name, vnodes,
cluster_save buffer, vfscache, pcb, soname, proc-args, file,
AR driver, AD driver, Gzip trees, rman, eventhandler, bus, sysctl,
subproc, pfestat, pic, ifstate, pfe_ipc, mkey, ifaddr, rtable, ipfw
128 ZONE, freeblks, inodedep, temp, devbuf, zombie, COS, DEVFS node,
vnodes, mount, vfscache, pcb, soname, proc-args, ttys, dev_t,
timecounter, kld, Gzip trees, ISOFS node, bus, uidinfo, cred,
session, pic, itable16, ifstate, pfe_ipc, rtable, ifstat, metrics,
rtnexthop, iffamily
256 iflogical, iftable, MFS node, FFS node, newblk, temp, devbuf,
NFS daemon, vnodes, proc-args, kqueue, file desc, Gzip trees, bus,
subproc, itable16, ifstate, pfe_ipc, sysctl, rtnexthop
512 UFS mount, temp, devbuf, mount, BIO buffer, ptys, ttys, AR driver,
Gzip trees, ISOFS mount, msg, ioctlops, ATA generic, bus, proc,
pfestat, lr, ifstate, pfe_ipc, rtable, ipfw, ifstat, rtnexthop
1K iftable, temp, devbuf, NQNFS Lease, kqueue, kld, AD driver,
Gzip trees, sem, MD disk, bus, ifstate, pfe_ipc, ipfw
2K uc_devlist, UFS mount, temp, devbuf, BIO buffer, pcb, AR driver,
Gzip trees, ioctlops, bus, ipfw, ifstat, rcache
4K memdesc, iftable, UFS mount, temp, devbuf, kld, Gzip trees, sem, msg
8K temp, devbuf, syncache, Gzip trees
16K indirdep, temp, devbuf, shm, msg
32K pagedep, kld, Gzip trees
64K VM pgdata, devbuf, MSDOSFS mount
128K UFS ihash, inodedep, NFS hash, kld, ISOFS mount
256K mbuf, vfscache
512K SWAP
Memory statistics by type Type Kern

Type InUse MemUse HighUse Limit Requests Limit Limit Size(s)
isadev 13 1K 1K127753K 13 0 0 64
atkbddev 2 1K 1K127753K 2 0 0 32
uc_devlist 24 3K 3K127753K 24 0 0 16,2K
nexusdev 3 1K 1K127753K 3 0 0 16
memdesc 1 4K 4K127753K 1 0 0 4K
mbuf 1 152K 152K127753K 1 0 0 256K
iflogical 6 2K 2K127753K 6 0 0 256
iftable 17 9K 9K127753K 18 0 0 16,64,256,1K,4K
ZONE 15 2K 2K127753K 15 0 0 128
VM pgdata 1 64K 64K127753K 1 0 0 64K
UFS mount 12 26K 26K127753K 12 0 0 512,2K,4K
UFS ihash 1 128K 128K127753K 1 0 0 128K
MFS node 6 2K 3K127753K 35 0 0 64,256
FFS node 906 227K 227K127753K 1352 0 0 256
dirrem 0 0K 4K127753K 500 0 0 32
mkdir 0 0K 1K127753K 38 0 0 32

diradd 0 0K 6K127753K 521 0 0 32

freefile 0 0K 4K127753K 374 0 0 32
freeblks 0 0K 8K127753K 219 0 0 128
freefrag 0 0K 1K127753K 193 0 0 32
allocindir 0 0K 25K127753K 1518 0 0 64
indirdep 0 0K 17K127753K 76 0 0 32,16K
allocdirect 0 0K 10K127753K 760 0 0 64
bmsafemap 0 0K 1K127753K 72 0 0 32
newblk 1 1K 1K127753K 2279 0 0 32,256
inodedep 1 128K 175K127753K 2367 0 0 128,128K
pagedep 1 32K 33K127753K 47 0 0 64,32K
temp 1239 92K 96K127753K 8364 0 0 16,32,64K
devbuf 1413 5527K 5527K127753K 1535 0 0 16,32,64,128,256
lockf 38 3K 3K127753K 2906 0 0 64
atexit 1 1K 1K127753K 1 0 0 16
zombie 0 0K 2K127753K 3850 0 0 128
NFS hash 1 128K 128K127753K 1 0 0 128K
NQNFS Lease 1 1K 1K127753K 1 0 0 1K
NFS daemon 1 1K 1K127753K 1 0 0 256
syncache 1 8K 8K127753K 1 0 0 8K
COS 353 44K 44K127753K 353 0 0 16,32,64,128
BPF 189 3K 3K127753K 189 0 0 16
MSDOSFS mount 1 64K 64K127753K 1 0 0 64K
NULLFS hash 1 1K 1K127753K 1 0 0 64
DEVFS mount 2 1K 1K127753K 2 0 0 16
DEVFS name 487 31K 31K127753K 487 0 0 64
DEVFS node 471 58K 58K127753K 479 0 0 16,128
vnodes 28 7K 7K127753K 429 0 0 16,32,64,128,256
mount 15 8K 8K127753K 18 0 0 16,128,512
cluster_save buffer 0 0K 1K127753K 55 0 0 32,64
vfscache 1898 376K 376K127753K 3228 0 0 64,128,256K
BIO buffer 49 98K 398K127753K 495 0 0 512,2K
pcb 159 16K 17K127753K 399 0 0 16,32,64,128,2K
soname 82 10K 10K127753K 42847 0 0 16,32,64,128
proc-args 57 2K 3K127753K 2105 0 0 16,32,64,128,256
ptys 32 16K 16K127753K 32 0 0 512
ttys 254 33K 33K127753K 522 0 0 128,512
kqueue 5 3K 4K127753K 23 0 0 256,1K
sigio 1 1K 1K127753K 27 0 0 32
file 383 24K 24K127753K 16060 0 0 64
file desc 76 19K 20K127753K 3968 0 0 256
shm 1 12K 12K127753K 1 0 0 16K
dev_t 286 36K 36K127753K 286 0 0 128
timecounter 10 2K 2K127753K 10 0 0 128
kld 11 117K 122K127753K 34 0 0 16,32,128,1K,4K
AR driver 1 1K 3K127753K 5 0 0 64,512,2K
AD driver 2 2K 3K127753K 2755 0 0 64,1K
Gzip trees 0 0K 46K127753K 133848 0 0 32,64,128,256
ISOFS node 1136 142K 142K127753K 1189 0 0 128
ISOFS mount 9 132K 132K127753K 10 0 0 512,128K
sem 3 6K 6K127753K 3 0 0 1K,4K
MD disk 2 2K 2K127753K 2 0 0 16,1K
msg 4 25K 25K127753K 4 0 0 512,4K,16K
rman 59 4K 4K127753K 461 0 0 16,64
ioctlops 0 0K 2K127753K 992 0 0 512,2K
taskqueue 2 1K 1K127753K 2 0 0 32
SWAP 2 413K 413K127753K 2 0 0 32,512K
ATA generic 6 3K 3K127753K 6 0 0 16,512
eventhandler 17 1K 1K127753K 17 0 0 32,64
bus 340 30K 31K127753K 794 0 0 16,32,64,128,256
sysctl 0 0K 1K127753K 130262 0 0 16,32,64
uidinfo 4 1K 1K127753K 10 0 0 32,128
cred 22 3K 3K127753K 3450 0 0 128

subproc 156 10K 10K127753K 7882 0 0 32,64,256

proc 2 1K 1K127753K 2 0 0 512
session 12 2K 2K127753K 34 0 0 128
pgrp 16 1K 1K127753K 45 0 0 32
ippool 1 1K 1K127753K 1 0 0 16
pfestat 0 0K 1K127753K 47349 0 0 16,32,64,512
pic 5 1K 1K127753K 5 0 0 64,128
lr 1 1K 1K127753K 1 0 0 512
itable32 110 4K 4K127753K 110 0 0 32
itable16 161 26K 26K127753K 161 0 0 128,256
ifstate 694 159K 160K127753K 1735 0 0 16,32,64,128,1K
pfe_ipc 0 0K 1K127753K 56218 0 0 16,32,64,128,1K
mkey 250 4K 4K127753K 824 0 0 16,32,64
ifaddr 9 1K 1K127753K 9 0 0 64
sysctl 0 0K 1K127753K 30 0 0 256
rtable 49 6K 6K127753K 307 0 0 16,32,64,128,512
ifmaddr 22 1K 1K127753K 22 0 0 16,32
ipfw 23 10K 10K127753K 48 0 0 16,32,64,512,2K
ifstat 698 805K 805K127753K 698 0 0 128,512,2K
rcache 4 8K 8K127753K 4 0 0 2K
rnode 27 1K 1K127753K 285 0 0 16,32
metrics 1 1K 1K127753K 3 0 0 128
rtnexthop 57 9K 9K127753K 312 0 0 32,128,256,512
iffamily 12 2K 2K127753K 12 0 0 128
Memory Totals: In Use Free Requests

9311K 54K 489068
ITEM SIZE LIMIT USED FREE REQUESTS
PIPE: 192, 0, 4, 81, 4422

SWAPMETA: 160, 95814, 0, 0, 0
unpcb: 160, 0, 114, 36, 279
ripcb: 192, 25330, 5, 37, 5
syncache: 128, 15359, 0, 64, 5
tcpcb: 576, 25330, 23, 12, 32
udpcb: 192, 25330, 14, 28, 255
socket: 256, 25330, 246, 26, 819
KNOTE: 96, 0, 27, 57, 71
NFSNODE: 352, 0, 0, 0, 0
NFSMOUNT: 544, 0, 0, 0, 0
VNODE: 224, 0, 2778, 43, 2778
NAMEI: 1024, 0, 0, 8, 40725
VMSPACE: 192, 0, 57, 71, 3906
PROC: 448, 0, 73, 17, 3923
DP fakepg: 64, 0, 0, 0, 0
PV ENTRY: 28, 499566, 44530, 152053, 1525141
MAP ENTRY: 48, 0, 1439, 134, 351075
KMAP ENTRY: 48, 35645, 179, 119, 10904
MAP: 108, 0, 7, 3, 7
VM OBJECT: 92, 0, 2575, 109, 66912
792644 cpu context switches

9863474 device interrupts
286510 software interrupts
390851 traps
3596829 system calls
16 kernel threads created
3880 fork() calls
27 vfork() calls
0 rfork() calls
0 swap pager pageins
0 swap pager pages paged in

0 swap pager pageouts

0 swap pager pages paged out
380 vnode pager pageins
395 vnode pager pages paged in
122 vnode pager pageouts
1476 vnode pager pages paged out
0 page daemon wakeups
0 pages examined by the page daemon
101 pages reactivated
161722 copy-on-write faults
0 copy-on-write optimized faults
84623 zero fill pages zeroed
83063 zero fill pages prezeroed
7 intransit blocking page faults
535606 total VM faults taken
0 pages affected by kernel thread creation
238254 pages affected by fork()
2535 pages affected by vfork()
0 pages affected by rfork()
283379 pages freed
0 pages freed by daemon
190091 pages freed by exiting processes
17458 pages active
29166 pages inactive
0 pages in VM cache
10395 pages wired down
134610 pages free
4096 bytes per page
183419 total name lookups
cache hits (90% pos + 7% neg) system 0% per-directory
deletions 0%, falsehits 0%, toolong 0%
interrupt total rate

ata0 irq14 113338 3
mux irq7 727643 21
fxp1 irq10 1178671 34
sio0 irq4 833 0
clk irq0 3439769 99
rtc irq8 4403221 127
Total 9863475 286
show system user@host> show system virtual-memory scc

virtual-memory scc
(Routing Matrix) Memory statistics by bucket size
Size In Use Free Requests HighWater Couldfree
16 898 126 749493 1280 0
32 2018 1310 980643 640 632
64 3490 13342 935420 320 5365
...

Size Type(s)
16 uc_devlist, COS, BPF, DEVFS mount, DEVFS node, vnodes, mount, pcb,
soname, rman, bus, sysctl, ifstate, pfe_ipc, mkey, socket, rtable,
ifmaddr, ipfw, rnode, iftable, temp, devbuf, atexit, proc-args, kld,
MD disk
32 atkbddev, Gzip trees, dirrem, mkdir, diradd, freefile, freefrag,
indirdep, bmsafemap, newblk, tseg_qent, COS, vnodes,
...

Memory statistics by type Type Kern

Type InUse MemUse HighUse Limit Requests Limit Limit Size(s)
isadev 12 1K 1K166400K 12 0 0 64
atkbddev 2 1K 1K166400K 2 0 0 32
uc_devlist 24 3K 3K166400K 24 0 0 16,2K
....
Memory Totals: In Use Free Requests

6091K 1554K 2897122

show task
Syntax show task

<summary>
<task-name>
Description Display routing protocol tasks on the Routing Engine.
Options none—Display all routing protocol tasks on the Routing Engine on all logical routers.

summary—(Optional) Display summary information about running tasks.
task-name—(Optional) Display summary information about running tasks whose

name matches this substring.
See Also show task io on page 492

show task memory on page 494
List of Sample Output show task on page 491
Output Fields Table 106 describes the output fields for the show task command. Output fields are
Table 106: show task Output Fields

Pri Current priority of the process. A lower number indicates a higher priority.
Task Name Name of the task.
Pro IP protocol number associated with the process.
Port TCP or UDP port number associated with the task.
So Socket number of the task.
Flags Flags for the task:
! Accept—Task is waiting for incoming connections.
! Connect—Task is waiting for a connection to be completed.
! Delete—Task has been deleted and is being cleaned up.
! LowPrio—Task will be dispatched to read its socket after other
higher-priority tasks.
490 ! show task

show task user@host> show task

Pri Task Name Pro Port So Flags
10 IF
15 LABEL
15 ISO
15 INET 7
20 Aggregate
20 RT
30 ICMP 1 9
39 ISIS I/O 12
40 IS-IS 10
40 BGP RT Background <LowPrio>
40 BGP.0.0.0.0+179 179 15 <Accept LowPrio>
50 BGP_69.192.168.201.234+179 179 17 <LowPrio>
50 BGP_70.192.168.201.233+179 179 16 <LowPrio>
50 BGP_Group_69_153 <LowPrio>
50 BGP_Group_70_153 <LowPrio>
50 ASPaths
60 KRT 255 1
60 Redirect
70 MGMT.local 14 <LowPrio>
70 MGMT_Listen./var/run/rpd_mgmt 13 <Accept LowPrio>
70 SNMP Subagent./var/run/sub_rpd.sock 8 <LowPrio>
show task ! 491

show task io
Syntax show task io

Description Display I/O statistics for routing protocol tasks on the Routing Engine.
Options none—Display I/O statistics for routing protocol tasks on the Routing Engine on all
logical routers.

List of Sample Output show task io on page 492
Output Fields Table 107 describes the output fields for the show task io command. Output fields
Table 107: show task io Output Fields

Task Name Name of the task.
Reads Number of input ready notifications.
Writes Number of output ready notifications.
Rcvd Number of requests to the kernel for input.
Sent Number of requests to the kernel for output.
Dropped Number of sent requests that failed.
show task io user@host> show task io

Task Name Reads Writes Rcvd Sent Dropped
LMP Client 1 1 0 0 0
IF 0 0 0 0 0
INET6 0 0 0 0 0
INET 0 0 0 0 0
ISO 0 0 0 0 0
Memory 0 0 0 0 0
RPD Unix Domain Server./var/ru 0 0 0 0 0
RPD Server.0.0.0.0+666 0 0 0 0 0
Aggregate 0 0 0 0 0
RT 0 0 0 0 0
ICMP 0 0 0 0 0
Router-Advertisement 0 0 0 0 0
ICMPv6 0 0 0 0 0
IS-IS I/O./var/run/ppmd_contro 1307 1 0 0 0
l2vpn global task 0 0 0 0 0
IS-IS 0 0 0 0 0
BFD I/O./var/run/bfdd_control 1307 1 0 0 0
TED 0 0 0 0 0
ASPaths 0 0 0 0 0
Resolve tree 1 0 0 0 0 0
KStat 0 0 0 0 0
KRT Request 0 0 63 0 0
KRT Ifstate 106 0 295 0 0
492 ! show task io

KRT 0 0 0 0 0
Redirect 0 0 0 0 0
...
show task io ! 493

show task memory
Syntax show task memory

<brief | detail | history | summary>
Description Display memory utilization for routing protocol tasks on the Routing Engine.
Options none—Display standard information about memory utilization for routing protocol
tasks on the Routing Engine on all logical routers.
brief | detail | history | summary—(Optional) Display the specified level of output. Use
the history option to display a history of memory utilization information.

List of Sample Output show task memory on page 495

show task memory detail on page 495
Output Fields Table 108 describes the output fields for the show task memory command. Output
Table 108: show task memory Output Fields

Memory Currently In Use Memory currently in use. none specified
Memory Maximum Ever Used Maximum memory ever used. none specified
Memory Available Memory currently available. none specified
Size (kB) Memory capacity in 1000-byte kilobytes. none specified
%Available Percentage of memory currently available. none specified
When Timestamp. none specified
Overall Memory Report Memory utilization by memory size: detail
! Size—Block size, in bytes.
! TP—T indicates transient memory, and P indicates full page.
! Allocs—Number of blocks allocated for named objects.
! Mallocs—Number of blocks allocated for anonymous objects.
! Alloc Bytes—Number of blocks allocated times block size.
! MaxAllocs—Maximum value of Allocs.
! MaxBytes—Maximum value of Alloc Bytes.
! FreeBytes—Total number of bytes unused on memory pages for
this block size.
494 ! show task memory

Table 108: show task memory Output Fields

Allocator Memory Report Memory utilization by named objects: detail
! Size—Size of the named object in bytes.
! Alloc Size—Actual memory used by that object in bytes.
! DTP—D indicates debug, T indicates transient, and P indicates
full page.
! Alloc Blocks—Number of named objects allocated.
! AllocBytes—Number of blocks allocated times block size.
! MaxAlloc Blocks—Maximum value of Alloc Blocks.
! Max Alloc Bytes—Maximum value of AllocBytes.
Malloc Usage Report Memory utilization for miscellaneous use: detail

! Allocs—Number of allocations.
! Bytes—Total bytes consumed.
! MaxAllocs—Maximum value of Allocs.
! MaxBytes—Maximum value of Bytes.
! FuncCalls—Cumulative number of Allocs.
Dynamically allocated memory Memory allocated dynamically by the system. detail

Program data+BSS memory Program and base station subsystem (BSS) memory. detail
Page data overhead Internal memory overhead. detail
Page directory size Internal memory overhead. detail
Total bytes in use Total memory, in bytes, that is currently in use and percentage of detail
available memory (in parentheses).
show task memory user@host> show task memory

Memory Size (kB) %Available When
Currently In Use: 29417 3% now
Maximum Ever Used: 33882 4% 00/02/11 22:07:03
Available: 756281 100% now
show task memory user@host> show task memory detail

detail ------------------------- Overall Memory Report -------------------------
Size TP Allocs Mallocs AllocBytes MaxAllocs MaxBytes FreeBytes
8 - 111 888 112 896 3208
12 92 149 2892 247 2964 1204
12 T - - - 5 60 -
16 7 11 288 23 368 3808
20 100 33 2660 164 3280 1436
20 T - - - 40 800 -
24 162 15 4248 177 4248 3944
24 T - - - 4 96 -
28 371 - 10388 372 10416 1900
32 6 23 928 30 960 3168
...
-------------------------------------------------------------------------
606182 715302 118810
------------------------ Allocator Memory Report ------------------------

Name Size Alloc DTP Alloc Alloc MaxAlloc MaxAlloc
Size Blocks Bytes Blocks Bytes
patroot 8 12 84 1008 87 1044
sockaddr_un.i802 8 12 2 24 2 24
show task memory ! 495

cos_nhm_nh 8 12 1 12 1 12
sockaddr_un.tag 8 12 3 36 4 48
gw_entry_list 8 12 1 12 1 12
bgp_riblist_01 8 12 1 12 2 24
ospf_intf_ev 8 12 - - 6 72
krt_remnant_rt 8 12 T - - 5 60
...
-------------------------------------------------------------------------
164108 221552
-------------------------- Malloc Usage Report --------------------------

Name Allocs Bytes MaxAllocs MaxBytes FuncCalls
MGMT.local 1 8 1 8 1
BGP.0.0.0.0+179 - - 1 8 2
BGP RT Background 4 74748 4 74748 4
SNMP Subagent./var/run/ - 52 1 9172 56
OSPFv2 I/O./var/run/ppm 1 66536 2 66552 4551
OSPF 6 67655 7 67703 68
KRT - - 1 3784 18
ASPaths 3 80 3 80 3
-- sockaddr -- 183 2100 184 2108 1645
BFD I/O./var/run/bfdd_c 1 65535 2 65551 4555
RT 48 872 48 872 48
Scheduler 42 628 43 628 88
--Anonymous-- 56 1100 58 1140 112
--System-- 82 58364 114 60044 4654
-------------------------------------------------------------------------
337678 352398
Dynamically allocated memory: 765952 Maximum: 765952

Program data+BSS memory: 1568768 Maximum: 1568768
Page data overhead: 53248 Maximum: 53248
Page directory size: 4096 Maximum: 4096
----------
Total bytes in use: 2392064 (0% of available memory)
496 ! show task memory

show version
Syntax show version

<brief | detail>
Syntax show version

(Routing Matrix) <brief | detail>
Description Display the hostname and version information about the software running on the
router.
Options none—Display standard information about the hostname and version of the
software running on the router.
all-lcc—(Optional) Display the hostnames and version information about the

software running on all T640 routing nodes (or line-card chassis) that are
connected to a TX Matrix platform.
lcc number—(Optional) Display the hostname and version information about the
software running on a T640 routing node (or line-card chassis) that is
0 through 3.
scc—(Optional) Display the hostname and version information about the software
running on the TX Matrix platform (or switch-card chassis).
Additional Information By default, when you issue the show version command on a TX Matrix master
connected to it. Likewise, if you issue the same command on the TX Matrix backup
Routing Engine, the command is broadcast to all the T640 backup Routing Engines
that are connected to it.
List of Sample Output show version on page 497
show version user@customerA> show version

Hostname: router1
Model: m20
JUNOS Base OS boot [7.2-20050312.0]
JUNOS Base OS Software Suite [7.2-20050312.0]
JUNOS Packet Forwarding Engine Support (M20/M40) [7.2R1.7]
JUNOS Routing Software Suite [7.2R1.7]
show version ! 497

show version invoke-on
Syntax show version invoke-on (all-routing-engines | other-routing-engine)
Description Display the hostname and version information about the software running on a
routing platform with two Routing Engines.
Options all-routing-engines—Display the hostnames and version information about the

software running on all master and backup Routing Engines on a routing matrix
or on a routing platform that has dual Routing Engines.
other-routing-engine—Display the hostnames and version information about the

software running on the other Routing Engine. For example, if you issue this
command on the master Routing Engine on an M320 router, the JUNOS
software displays the hostname and version information on the backup Routing
Engine. On a routing matrix, if you issue this command on the TX Matrix
platform master Routing Engine, the JUNOS software displays all the
hostnames and version information on all the backup Routing Engines.
List of Sample Output show version invoke-on all-routing-engines (Routing Matrix) on page 498
show version invoke-on other-routing-engine (Routing Matrix) on page 500
show version invoke-on user@host> show version invoke-on all-routing-engines

all-routing-engines scc-re0:
(Routing Matrix) --------------------------------------------------------------------------
Hostname: bob
Model: TX Matrix
JUNOS Kernel Software Suite [7.1-20041024.0]
JUNOS Packet Forwarding Engine Support (T-Series) [7.1-20041024.0]
JUNOS Routing Software Suite [7.1-20041024.0]
JUNOS Online Documentation [7.1-20041024.0]
JUNOS Crypto Software Suite [7.1-20041024.0]
scc-re1:
--------------------------------------------------------------------------
Hostname: bob1
Model: TX Matrix
498 ! show version invoke-on

lcc0-re0:
--------------------------------------------------------------------------
Hostname: cas
Model: t640
lcc0-re1:
--------------------------------------------------------------------------
Hostname: cas1-lcc0
Model: t640
lcc1-re0:
--------------------------------------------------------------------------
Hostname: jas
Model: t640
lcc1-re1:
--------------------------------------------------------------------------
Hostname: jas1
Model: t640
lcc2-re0:
--------------------------------------------------------------------------
Hostname: dew
Model: t640
show version invoke-on ! 499

lcc2-re1:
--------------------------------------------------------------------------
Hostname: dew1
Model: t640
lcc3-re0:
--------------------------------------------------------------------------
Hostname: wa
Model: t640
lcc3-re1:
--------------------------------------------------------------------------
Hostname: wa1
Model: t640
show version invoke-on user@host> show version invoke-on other-routing-engine

other-routing-engine scc-re1:
(Routing Matrix) --------------------------------------------------------------------------
Hostname: bob1
Model: TX Matrix
lcc0-re1:
--------------------------------------------------------------------------
Hostname: cas1-lcc0
Model: t640
500 ! show version invoke-on

lcc1-re1:
--------------------------------------------------------------------------
Hostname: jas1
Model: t640
lcc2-re1:
--------------------------------------------------------------------------
Hostname: dew1
Model: t640
lcc3-re1:
--------------------------------------------------------------------------
Hostname: wa1
Model: t640
show version invoke-on ! 501

start shell
Syntax start shell (csh | sh)

<user username>
Description Exit from the CLI environment and create a UNIX-level shell.
To return to the CLI, type exit from the shell.
Options csh—Create a UNIX C shell.
sh—Create a UNIX Bourne shell.
user username—(Optional) Start the shell as another user.
Additional Information When you are in the shell, the shell prompt has the following format. Note that a
space appears after the percent sign (%).
username@hostname%
An example of the prompt is:
root@router%
Required Privilege Level shell and maintenance
List of Sample Output start shell csh on page 502
request.
start shell csh user@host> start shell csh

%
% exit
username@hostname% start shell sh
%
% exit
user@host>
502 ! start shell

test configuration
Syntax test configuration filename
Description Verify that the syntax of a configuration file is correct. If the configuration contains
any errors, a message is displayed to indicate the line number and column number
in which the error was found.
Options filename—Name of the configuration file.
List of Sample Output test configuration on page 503
request.
test configuration user@host> test configuration terminal

[Type ^D to end input]
system {
host-name bluesky;
paris-23;
login;
}
terminal:3:(8) syntax error: paris
[edit system]
'paris-23;'
syntax error
terminal:4:(11) statement must contain additional statements: ;
[edit system login]
'login ;'
statement must contain additional statements
configuration syntax failed
test configuration ! 503

504 ! test configuration

Part 3
Class of Service
! Class-of-Service Operational Mode Commands on page 507
Class of Service ! 505

506 ! Class of Service

Chapter 13
Class-of-Service Operational Mode
Commands
monitor and troubleshoot class of service (CoS). Commands are listed in
alphabetical order.
Table 109: Class-of-Service (CoS) Operational Mode Commands (1 of 2)
Task Command
Display the entire CoS configuration, including show class-of-service on page 509
system-chosen defaults.
(J-series routing platform only) Display trigger show class-of-service adaptive-shaper on page 511
points and associated rates for CoS adaptive
shapers.
For each CoS classifier, display the mapping of show class-of-service classifier on page 512
code point value to forwarding class and loss
priority.
Display the mapping of CoS code point aliases to show class-of-service code-point-aliases on page 514
corresponding bit patterns.
Display data points for each CoS random early show class-of-service drop-profile on page 515
detection (RED) drop profile.
(M320 routers and T-series routing platform only) show class-of-service fabric scheduler-map on page 516
Display the mapping of CoS schedulers to switch
fabric traffic priorities and a summary of
scheduler parameters for each priority.
(M320 routers and T-series routing platform only) show class-of-service fabric statistics on page 517
Display CoS switch fabric queue statistics.
Display the mapping of forwarding class names to show class-of-service forwarding-class on page 519
queue numbers.
Display entire CoS configuration as it exists in the show class-of-service forwarding-table on page 520
forwarding table.
Display the mapping of code point value to queue show class-of-service forwarding-table classifier on page 522
number and loss priority for each classifier as it
exists in the forwarding table.
For each logical interface, display either the table show class-of-service forwarding-table classifier mapping on page 523
index of the classifier for a given code point type
or the queue number (if it is a fixed classification)
in the forwarding table.
! 507
Table 109: Class-of-Service (CoS) Operational Mode Commands (2 of 2)
Task Command
Display the data points of all random early show class-of-service forwarding-table drop-profile on page 524
detection (RED) drop profiles as they exist in the
forwarding table.
(M320 routers and T-series routing platform only) show class-of-service forwarding-table fabric scheduler-map on page 526
Display the scheduler map information as it exists
in the forwarding table for switch fabric.
(J-series routing platform only) Display the show class-of-service forwarding-table loss-priority-map on page 527
mapping of code point value to loss priority as it
exists in the forwarding table.
(J-series routing platform only) For each logical show class-of-service forwarding-table loss-priority-map mapping on page 528
interface, display the loss priority table index.
Display mapping of queue number and loss show class-of-service forwarding-table rewrite-rule on page 529
priority to code point value for each rewrite rule as
it exists in the forwarding table.
For each logical interface, display the table show class-of-service forwarding-table rewrite-rule mapping on page 530
identifier of the rewrite rule map for each code
point type.
For each physical interface, display the scheduler show class-of-service forwarding-table scheduler-map on page 531
map information as it exists in the forwarding
table.
For Adaptive Services (AS) PIC link services IQ show class-of-service fragmentation-map on page 533
interfaces (lsq) only, display fragmentation
properties for specific forwarding classes.
Display the logical and physical interface show class-of-service interface on page 534
associations for the classifier, rewrite rules, and
scheduler map objects.
(J-series routing platform only) Display mapping of show class-of-service loss-priority-map on page 536
code point value to loss priority.
Display the mapping of forwarding classes and show class-of-service rewrite-rule on page 537
loss priority to code point values.
(M-series and T-series routing platforms only) show class-of-service routing-instance on page 539
Display mapping of CoS objects to routing
instances.
Display mapping of schedulers to forwarding show class-of-service scheduler-map on page 540
classes and a summary of scheduler parameters
for each entry.
For Gigabit Ethernet IQ and Channelized IQ PICs show class-of-service traffic-control-profile on page 542
only, display traffic shaping and scheduling
profiles.
(J-series routing platform only) Display virtual show class-of-service virtual-channel on page 543
channel information.
(J-series routing platform only) Display virtual show class-of-service virtual-channel-group on page 544
channel group information.
NOTE: For information about how to configure CoS, see the JUNOS Class of Service
Configuration Guide. For information about the related show interfaces queue
command, see the JUNOS Interfaces Command Reference.
508 !
Chapter 13: Class-of-Service Operational Mode Commands
show class-of-service
Syntax show class-of-service
Description Display the entire class-of-service (CoS) configuration, including system-chosen

defaults. Executing this command is equivalent to executing all show class-of-service
commands in succession.
List of Sample Output show class-of-service on page 509
Output Fields See the output field descriptions for the remaining commands in this chapter.
show class-of-service user@host> show class-of-service

Forwarding class Queue
best-effort 0
expedited-forwarding 1
assured-forwarding 2
network-control 3
Code point type: dscp
Alias Bit pattern
af11 001010
af12 001100
af13 001110
...
Code point type: dscp-ipv6
Alias Bit pattern
af11 001010
af12 001100
af13 001110
...
Code point type: exp
Alias Bit pattern
af11 100
af12 101
be 000
...
Code point type: ieee-802.1
Alias Bit pattern
af11 100
af12 101
be 000
...
Classifier: dscp-default, Code point type: dscp, Index: 6
Code point Forwarding class Loss priority
000000 best-effort low
....
Classifier: dscp-ipv6-default, Code point type: dscp-ipv6, Index: 7
...
show class-of-service ! 509

Loss-priority-map: frame-relay-de-default, Code point type: frame-relay-de,

Index: 12
Code point Loss priority
0 low
1 high
Rewrite rule: dscp-default, Code point type: dscp, Index: 23

Forwarding class Loss priority Code point
best-effort low 000000
best-effort high 000000
expedited-forwarding low 101110
...
Rewrite rule: dscp-ipv6-default, Code point type: dscp-ipv6, Index: 24
best-effort low 000000
best-effort high 000000
...
....
Drop profile: <default-drop-profile>, Type: discrete, Index: 1

Fill level Drop probability
100 100
Scheduler map: <default>, Index: 2
Scheduler: <default-be>, Forwarding class: best-effort, Index: 16

Transmit rate: 95 percent, Rate Limit: none, Buffer size: 95 percent,
Priority: low
Drop profiles:
Loss priority Protocol Index Name
Low any 1 <default-drop-profile>
Medium low any 1 <default-drop-profile>
Medium high any 1 <default-drop-profile>
High any 1 <default-drop-profile>
...
Physical interface: fe-0/0/0, Index: 137
Queues supported: 8, Queues in use: 4
Logical interface: fe-0/0/0.0, Index: 69

Object Name Type Index
Adaptive-shaper fr-shaper 35320
Classifier ipprec-compatibility ip 11
Physical interface: fe-0/0/1, Index: 138

...
510 ! show class-of-service

show class-of-service adaptive-shaper
Syntax show class-of-service adaptive-shaper

<adaptive-shaper-name>
Release Information Introduced before JUNOS Release 7.4.
Description (J-series routing platform only) Display trigger points and associated rates for
class-of-service (CoS) adaptive shapers.
Options none—Display all adaptive shaper information.
adaptive-shaper-name—(Optional) Display information for the named adaptive

shaper.
List of Sample Output show class-of-service adaptive-shaper on page 511
Output Fields Table 110 describes the output fields for the show class-of-service adaptive-shaper
Table 110: show class-of-service adaptive-shaper Output Fields

Adaptive shaper Name of the adaptive shaper.
Index Internal index of the adaptive shaper.
Trigger type Adaptive shaper trigger type. The trigger type can be the backward explicit
congestion notification (BECN) bit in Frame Relay packet headers.
Shaping rate CoS adaptive shaping rate.
show class-of-service user@host> show class-of-service adaptive-shaper

adaptive-shaper Adaptive shaper: as, Index: 3155
Trigger type Shaping rate
BECN 30 percent
show class-of-service adaptive-shaper ! 511

show class-of-service classifier
Syntax show class-of-service classifier

<name name>
<type dscp | type dscp-ipv6 | type exp | type ieee-802.1 | type inet-precedence>
Description For each class-of-service (CoS) classifier, display the mapping of code point value to
forwarding class and loss priority.
Options none—Display all classifiers.
name name—(Optional) Display named classifier.
type dscp—(Optional) Display all classifiers of the Differentiated Services code point
(DSCP) type.
type dscp-ipv6—(Optional) Display all classifiers of the DSCP for IPv6 type.
type exp—(Optional) Display all classifiers of the Multiprotocol Label Switching

(MPLS) experimental (EXP) type.
type ieee-802.1—(Optional) Display all classifiers of the ieee-802.1 type.
type inet-precedence—(Optional) Display all classifiers of the inet-precedence type.
List of Sample Output show class-of-service classifier type ieee-802.1 on page 513
Output Fields Table 111 describes the output fields for the show class-of-service classifier
Table 111: show class-of-service classifier Output Fields

Classifier Name of the classifier.
Code point type Type of the classifier: exp, dscp, dscp-ipv6, ieee-802.1, or inet-precedence.
Index Internal index of the classifier.
Code point Code point value used for classification
Forwarding class Classification of a packet affecting the forwarding, scheduling, and marking
policies applied as the packet transits the router.
Loss priority Loss priority value used for classification. For most platforms, the value is
high or low. For some platforms, the value is high, medium-high, medium-low,
or low.
512 ! show class-of-service classifier

show class-of-service user@host> show class-of-service classifier type ieee-802.1

classifier type Classifier: ieee802.1-default, Code point type: ieee-802.1, Index: 3
ieee-802.1 Code Point Forwarding Class Loss priority
000 best-effort low
001 best-effort high
010 expedited-forwarding low
011 expedited-forwarding high
100 assured-forwarding low
101 assured-forwarding medium-high
110 network-control low
111 network-control high
Classifier: users-ieee802.1, Code point type: ieee-802.1

100 expedited-forwarding low
show class-of-service classifier ! 513

show class-of-service code-point-aliases
Syntax show class-of-service code-point-aliases

<dscp | dscp-ipv6 | exp | ieee-802.1 | inet-precedence>
Description Display the mapping of class-of-service (CoS) code point aliases to corresponding
bit patterns.
Options none—Display code point aliases of all code point types.
dscp—(Optional) Display Differentiated Services code point (DSCP) aliases.
dscp-ipv6—(Optional) Display IPv6 DSCP aliases.
exp—(Optional) Display MPLS EXP code point aliases.
ieee-802.1—(Optional) Display IEEE-802.1 code point aliases.
inet-precedence—(Optional) Display IPv4 precedence code point aliases.
List of Sample Output show class-of-service code-point-aliases exp on page 514
Output Fields Table 112 describes the output fields for the show class-of-service code-point-aliases
Table 112: show class-of-service code-point-aliases Output Fields

Code point type Type of the code points displayed: dscp, dscp-ipv6, exp, ieee-802.1, or
inet-precedence.
Alias Alias for a bit pattern.
Bit pattern Bit pattern for which the alias is displayed.
show class-of-service user@host> show class-of-service code-point-aliases exp

code-point-aliases exp Code point type: exp
Alias Bit pattern
af11 100
af12 101
be 000
be1 001
cs6 110
cs7 111
ef 010
ef1 011
nc1 110
nc2 111
514 ! show class-of-service code-point-aliases

show class-of-service drop-profile
Syntax show class-of-service drop-profile

<profile-name profile-name>
Description Display data points for each class-of-service (CoS) random early detection (RED)
drop profile.
Options none—Display all drop profiles.
profile-name profile-name—(Optional) Display the specified profile only.
List of Sample Output show class-of-service drop-profile on page 515
Output Fields Table 113 describes the output fields for the show class-of-service drop-profile
Table 113: show class-of-service drop-profile Output Fields

Drop profile Name of a drop profile.
Type Type of this drop profile: discrete or interpolated.
Index Internal index of this drop profile.
Fill Level Percentage fullness of a queue.
Drop probability Drop probability at this fill level.
show class-of-service user@host> show class-of-service drop-profile

drop-profile Drop profile: <default-drop-profile>, Type: discrete, Index: 1
100 100
Drop profile: user-drop-profile, Type: interpolated, Index: 2989
0 0
1 1
2 2
4 4
5 5
6 6
8 8
10 10
12 15
14 20
15 23
... 64 entries total
90 96
92 96
94 97
95 98
96 98
98 99
99 99
100 100
show class-of-service drop-profile ! 515

show class-of-service fabric scheduler-map
Syntax show class-of-service fabric scheduler-map
Description (M320 routers and T-series routing platform only) Display the mapping of
class-of-service (CoS) schedulers to switch fabric traffic priorities and a summary of
scheduler parameters for each priority.
List of Sample Output show class-of-service fabric scheduler-map on page 516
Output Fields Table 114 describes the output fields for the show class-of-service fabric
scheduler-map command. Output fields are listed in the approximate order in which
they appear.
Table 114: show class-of-service fabric scheduler-map Output Fields

Fabric priority Indicates the fabric traffic priority. Currently, two priorities are supported:
low and high.
Scheduler Name of the scheduler
Index Index of the indicated object. Objects that have indexes in this output include
schedulers and drop profiles.
Drop profiles Display the assignment of drop profile by name and index to a given loss
priority and protocol pair:
! Loss priority—Packet loss priority for drop profile assignment.
! Protocol—Transport protocol for drop profile assignment.
! Name—Name of the drop profile.
show class-of-service user@host> show class-of-service fabric scheduler-map

fabric scheduler-map Fabric priority: low
Scheduler: fab-ef-scheduler, Index: 60211
Drop profiles:
Low non-TCP 44321 fab-ef-profile
Low TCP 44321 fab-ef-profile
High non-TCP 44321 fab-ef-profile
High TCP 44321 fab-ef-profile
Fabric priority: high

Scheduler: fab-ef-scheduler, Index: 60211
Drop profiles:
Low non-TCP 44321 fab-ef-profile
Low TCP 44321 fab-ef-profile
High non-TCP 44321 fab-ef-profile
High TCP 44321 fab-ef-profile
516 ! show class-of-service fabric scheduler-map

show class-of-service fabric statistics
Syntax show class-of-service fabric statistics

<destination fpc-number>
<source fpc-number>
<summary>
Description (M320 routers and T-series routing platform only) Display class-of-service (CoS)
switch fabric queue statistics.
Options none—Same as summary.
destination fpc-number—(Optional) Display details for the specified destination

Flexible PIC Concentrator (FPC). The FPC number is a value from 0 through 7.
source fpc-number—(Optional) Display details for the specified source FPC. The FPC
number is a value from 0 through 7.
summary—(Optional) Display all switch fabric statistics.
List of Sample Output show class-of-service fabric statistics on page 518
Output Fields Table 115 describes the output fields for the show class-of-service fabric statistics
Table 115: show class-of-service fabric statistics Output Fields

Destination FPC Index Index number associated with the destination FPC
Source PFC Index Index number associated with the source FPC.
Total statistics Fabric queue statistic totals:
! Packets—Total packet count for high-priority and low-priority queues.
! Bytes—Total byte count for high-priority and low-priority queues.
! pps—Total packets-per-second count for high-priority and low-priority
queues.
! bps—Total bytes-per-second count for high-priority and low-priority
queues.
Tx statistics Fabric queue statistics for transmitted traffic:
! Packets—Transmitted packet count for high-priority and low-priority
queues.
! Bytes—Transmitted byte count for high-priority and low-priority
queues.
! pps—Transmitted packets-per-second count for high-priority and
low-priority queues.
! bps—Transmitted bytes-per-second count for high-priority and
show class-of-service fabric statistics ! 517

Table 115: show class-of-service fabric statistics Output Fields

Drop statistics Fabric queue statistics for dropped traffic:
! Packets—Dropped packet count for high-priority and low-priority
queues.
! Bytes—Dropped byte count for high-priority and low-priority queues.
! pps—Dropped packets-per-second count for high-priority and
! bps—Dropped bytes-per-second count for high-priority and
show class-of-service user@host> show class-of-service fabric statistics

fabric statistics Destination FPC Index: 0, Source FPC Index: 0
Total statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
Tx statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
Drop statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
Destination FPC Index: 0, Source FPC Index: 1

Total statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
Tx statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
Drop statistics: High priority Low priority
Packets: 0 0
Bytes : 0 0
Pps : 0 0
Bps : 0 0
...
518 ! show class-of-service fabric statistics

show class-of-service forwarding-class
Syntax show class-of-service forwarding-class
Description Display the mapping of forwarding class names to queue numbers.
List of Sample Output show class-of-service forwarding-class on page 519
Output Fields Table 116 describes the output fields for the show class-of-service forwarding-class
Table 116: show class-of-service forwarding-class Output Fields

Forwarding class Classification of a packet affecting the forwarding, scheduling, and marking
policies applied as the packet transits the router.
ID Forwarding class identifier.
Queue Queue corresponding to the forwarding class name.
Restricted Queue (T-series platforms only) Forwarding class restricted queue number. The queue
number assigned if the PIC is restricted to four queues.
Fabric Priority (M320 and T-series platforms only) Forwarding class queue priority.
show class-of-service user@host> show class-of-service forwarding-class

forwarding-class Forwarding class ID Queue Restricted queue Fabric
Priority
fc0 0 0 0 low
fc2 1 1 1 low
fc4 2 2 2 low
fc6 3 3 3 low
fc1 4 0 0 low
fc3 5 1 1 low
fc5 6 2 2 low
fc7 7 3 3 low
fc8 8 4 0 low
fc9 9 4 0 low
fc10 10 5 1 low
fc11 11 5 1 low
fc12 12 6 2 low
fc13 13 6 2 low
fc14 14 7 3 low
fc15 15 7 3 low
show class-of-service forwarding-class ! 519

show class-of-service forwarding-table
Syntax show class-of-service forwarding-table
Syntax (Routing Matrix) show class-of-service forwarding-table

<lcc number>
Description Display the entire class-of-service (CoS) configuration as it exists in the forwarding
table. Executing this command is equivalent to executing all show class-of-service
forwarding-table commands in succession.
Options lcc number—(Routing matrix only) (Optional) Display the forwarding table
configuration for a specific T640 routing node (or line-card chassis) that is
0 through 3.
List of Sample Output show class-of-service forwarding-table on page 520
Output Fields See the output field descriptions for the remaining show class-of-service
forwarding-table commands in this chapter.
show class-of-service user@host> show class-of-service forwarding-table

forwarding-table Classifier table index: 9, # entries: 8, Table type: EXP
Entry # Code point Forwarding-class # PLP
0 000 0 0
1 001 0 1
2 010 1 0
3 011 1 1
4 100 2 0
5 101 2 1
6 110 3 0
7 111 3 1
Table Index/
Interface Index Q num Table type
sp-0/0/0.1001 66 11 IPv4 precedence
fe-0/0/0.0 69 11 IPv4 precedence
Interface: sp-0/0/0 (Index: 129, Map index: 2, Map type: FINAL,

Num of queues: 2):
Entry 0 (Scheduler index: 16, Forwarding-class #: 0):
Tx rate: 0 Kb (95%), Buffer size: 95 percent
Priority low
PLP high: 1, PLP low: 1, PLP medium-high: 1, PLP medium-low: 1
Priority low
Interface: fe-0/0/0 (Index: 137, Map index: 2, Map type: FINAL,

Num of queues: 2):
520 ! show class-of-service forwarding-table

Priority low
Priority low
Interface: fe-0/0/1 (Index: 138, Map index: 2, Map type: FINAL,

Num of queues: 2):
Priority low
Priority low
...
RED drop profile index: 1, # entries: 1

Drop
Entry Fullness(%) Probability(%)
0 100 100
show class-of-service forwarding-table ! 521

show class-of-service forwarding-table classifier
Syntax show class-of-service forwarding-table classifier
Description Display the mapping of code point value to queue number and loss priority for each
classifier as it exists in the forwarding table.
List of Sample Output show class-of-service forwarding-table classifier on page 522
Output Fields Table 117 describes the output fields for the show class-of-service forwarding-table
classifier command. Output fields are listed in the approximate order in which they
appear.
Table 117: show class-of-service forwarding-table classifier Output Fields

Classifier table index Index of the classifier table.
Entries Total number of entries.
Table type Type of code points in the table: DSCP, EXP, IEEE 802.1, IPv4 precedence,
or IPv6 DSCP.
Entry # Entry number.
Code point Code point value used for classification.
Forwarding-class # Forwarding class to which the code point is assigned.
PLP Packet loss priority value set by classification. For most platforms, the
value can be 0 or 1. For some platforms, the value is 0, 1, 2 or 3. The
value 0 represents low PLP. The value 1 represents high PLP. The value 2
represents medium-low PLP. The value 3 represents medium-high PLP.
show class-of-service user@host> show class-of-service forwarding-table classifier

forwarding-table Classifier table index: 62436, # entries: 64, Table type: DSCP
classifier
Entry # Code point Forwarding-class # PLP
0 000000 0 0
1 000001 0 0
2 000010 0 0
3 000011 0 0
4 000100 0 0
5 000101 0 0
6 000110 0 0
7 000111 0 0
8 001000 0 0
9 001001 0 0
10 001010 1 1
11 001011 0 0
...
60 111100 0 0
61 111101 0 0
62 111110 0 0
63 111111 0 0
522 ! show class-of-service forwarding-table classifier

show class-of-service forwarding-table classifier mapping
Syntax show class-of-service forwarding-table classifier mapping
Description For each logical interface, display either the table index of the classifier for a given
code point type or the queue number (if it is a fixed classification) in the forwarding
table.
List of Sample Output show class-of-service forwarding -table classifier mapping on page 523
classifier mapping command. Output fields are listed in the approximate order in
which they appear.
Table 118: show class-of-service forwarding-table classifier mapping Output Fields

Table index/ If the type is Fixed, the number of the queue to which the interface is
mapped. For all other types, this value is the classifier index number.
Interface Name of the logical interface.
Index Logical interface index.
Q num Queue number to which this entry is assigned.
Table type Type of code points in the table: DSCP, EXP, IEEE 802.1, IPv4 precedence, or
IPv6 DSCP.
show class-of-service user@host> show class-of-service forwarding-table classifier mapping

forwarding -table Table index/
classifier mapping Interface Index Q num Table type
so-5/0/0.0 10 62436 DSCP
so-0/1/0.0 11 62436 DSCP
so-0/2/0.0 12 1 Fixed
so-0/2/1.0 13 62436 DSCP
so-0/2/1.0 13 62437 IEEE 802.1
so-0/2/2.0 14 62436 DSCP
so-0/2/2.0 14 62438 IPv4 precedence
show class-of-service forwarding-table classifier mapping ! 523

show class-of-service forwarding-table drop-profile
Syntax show class-of-service forwarding-table drop-profile
Description Display the data points of all random early detection (RED) drop profiles as they
exist in the forwarding table.
List of Sample Output show class-of-service forwarding-table drop-profile on page 524
drop-profile command. Output fields are listed in the approximate order in which
they appear.
Table 119: show class-of-service forwarding-table drop-profile Output Fields

RED drop profile index Index of this drop profile.
# entries Number of entries in a particular RED drop profile index
Entry Drop profile entry number.
Fullness(%) Percentage fullness of a queue.
Drop probability(%) Drop probability at this fill level.
show class-of-service user@host> show class-of-service forwarding-table drop-profile

forwarding-table RED drop profile index: 4, # entries: 1
drop-profile Drop
0 100 100

Drop
0 10 10
1 20 20
2 30 30

Drop
0 0 0
1 1 1
2 2 2
3 4 4
...
61 98 99
62 99 99
63 100 100
524 ! show class-of-service forwarding-table drop-profile


Drop
0 0 0
1 1 1
2 2 2
3 4 4
...
61 98 98
62 99 99
63 100 100
show class-of-service forwarding-table drop-profile ! 525

show class-of-service forwarding-table fabric scheduler-map
Syntax show class-of-service forwarding-table fabric scheduler-map
Description (M320 routers and T-series routing platform only) Display the scheduler map
information as it exists in the forwarding table for switch fabric.
Additional Information For information about how PLP priority is assigned to packets, see the JUNOS Class
of Service Configuration Guide.
List of Sample Output show class-of-service forwarding-table fabric scheduler-map on page 526
fabric scheduler-map command. Output fields are listed in the approximate order in
which they appear.
Table 120: show class-of-service forwarding-table fabric scheduler-map Output Fields

Fabric priority Fabric traffic priority: low and high.
Scheduler index Index of the scheduler applied to a fabric traffic priority.
PLP high Drop profile index for high-packet-loss-priority (PLP) packets.
PLP low Drop profile index for low-PLP packets.
TCP PLP high Drop profile index for low-PLP and Transmission Control Protocol (TCP)
packets.
TCP PLP low Drop profile index for high-PLP and TCP packets.
show class-of-service user@host> show class-of-service forwarding-table fabric scheduler-map

forwarding-table fabric Fabric priority: low
scheduler-map Scheduler index: 60211
PLP high: 44321, PLP low: 44321, TCP PLP high: 44321, TCP PLP low: 44321
Fabric priority: high

Scheduler index: 60211
526 ! show class-of-service forwarding-table fabric scheduler-map

show class-of-service forwarding-table loss-priority-map
Syntax show class-of-service forwarding-table loss-priority-map
Description (J-series routing platform only) Display the mapping of code point value to loss
priority as it exists in the forwarding table.
List of Sample Output show class-of-service forwarding-table loss-priority-map on page 527
loss-priority-map command. Output fields are listed in the approximate order in
which they appear.
Table 121: show class-of-service forwarding-table loss-priority-map Output Fields

Loss priority map table index Loss priority map table index.
Entries Number of table entries.
Table type Table type: Frame-Relay DE.
Entry # Table entry number.
Code point Code point value.
PLP Packet loss priority value. For most platforms, the value is 0 or 1.
For some platforms, the value is 0, 1, 2 or 3. The value 0
represents low PLP. The value 1 represents high PLP. The value 2
represents medium-low PLP. The value 3 represents
medium-high PLP.
show class-of-service user@host> show class-of-service forwarding-table loss-priority-map

forwarding-table loss-priority-map table index: 2212, # entries: 2, Table type: Frame-Relay DE
loss-priority-map Entry # Code point PLP
0 0 2
1 1 3
loss-priority-map table index: 11038, # entries: 2, Table type: Frame-Relay DE

Entry # Code point PLP
0 0 3
1 1 1
show class-of-service forwarding-table loss-priority-map ! 527

show class-of-service forwarding-table loss-priority-map mapping
Syntax show class-of-service forwarding-table loss-priority-map mapping
Description (J-series routing platform only) For each logical interface, display the loss priority
table index.
List of Sample Output show class-of-service forwarding-table loss-priority-map mapping on page 528
loss-priority-map mapping command. Output fields are listed in the approximate
order in which they appear.
Table 122: show class-of-service forwarding-table loss-priority-map mapping

Output Fields

Index Logical interface index.
Table index Loss priority table index.
Table type Table type: Frame-Relay DE.
show class-of-service user@host> show class-of-service forwarding-table loss-priority-map mapping

forwarding-table Interface Index Table index Table type
loss-priority-map fe-0/0/0.0 67 11038 Frame-Relay DE
mapping t1-0/0/2.0 69 2212 Frame-Relay DE
528 ! show class-of-service forwarding-table loss-priority-map mapping

show class-of-service forwarding-table rewrite-rule
Syntax show class-of-service forwarding-table rewrite-rule
Description Display mapping of queue number and loss priority to code point value for each
rewrite rule as it exists in the forwarding table.
List of Sample Output show class-of-service forwarding-table rewrite-rule on page 529
rewrite-rule command. Output fields are listed in the approximate order in which
they appear.
Table 123: show class-of-service forwarding-table rewrite-rule Output Fields

Rewrite table index Index for this rewrite rule.
# entries Number of entries in this rewrite rule.
Table type Type of table: DSCP, EXP, EXP-PUSH-3, EXP-SWAP-PUSH-2, Frame-Relay DE
(J-series routing platform only), IEEE 802.1, IPv4 precedence, IPv6 DSCP, or
Fixed.
Q# Queue number to which this entry is assigned.
Low bits Code point value for low-priority loss profile.
State State of this code point: enabled (rewritten) or disabled
High bits Code point value for high-priority loss profile.
show class-of-service user@host> show class-of-service forwarding-table rewrite-rule

forwarding-table Rewrite table index: 3753, # entries: 4, Table type: DSCP
rewrite-rule Q# Low bits State High bits State
0 000111 Enabled 001010 Enabled
2 000000 Disabled 001100 Enabled
show class-of-service forwarding-table rewrite-rule ! 529

show class-of-service forwarding-table rewrite-rule mapping
Syntax show class-of-service forwarding-table rewrite-rule mapping
Description For each logical interface, display the table identifier of the rewrite rule map for
each code point type.
List of Sample Output show class-of-service forwarding-table rewrite-rule mapping on page 530
rewrite-rule mapping command. Output fields are listed in the approximate order in
which they appear.
Table 124: show class-of-service forwarding-table rewrite-rule mapping Output Fields

Index Logical interface index
Table index Rewrite table index.
Type Type of classifier: DSCP, EXP, EXP-PUSH-3, EXP-SWAP-PUSH-2, Frame-Relay
DE (J-series routing platform only), IEEE 802.1, IPv4 precedence, IPv6 DSCP,
or Fixed.
show class-of-service user@host> show class-of-service forwarding-table rewrite-rule mapping

forwarding-table Interface Index Table index Type
rewrite-rule mapping so-5/0/0.0 10 3753 DSCP
so-0/1/0.0 11 3753 DSCP
so-0/2/0.0 12 3753 DSCP
so-0/2/1.0 13 3753 DSCP
so-0/2/2.0 14 3753 DSCP
so-0/2/3.0 15 3753 DSCP
530 ! show class-of-service forwarding-table rewrite-rule mapping

show class-of-service forwarding-table scheduler-map
Syntax show class-of-service forwarding-table scheduler-map
Description For each physical interface, display the scheduler map information as it exists in the
forwarding table.
List of Sample Output show class-of-service forwarding-table scheduler-map on page 532
scheduler-map command. Output fields are listed in the approximate order in which
they appear.
Table 125: show class-of-service forwarding-table scheduler-map Output Fields

Interface Name of the physical interface.
Index Physical interface index.
Map index Scheduler map index.
Num of queues Number of queues defined in this scheduler map.
Entry Number of this entry in the scheduler map.
Scheduler index Scheduler policy index.
Forwarding-class # Forwarding class number to which this entry is applied.
Tx rate Configured transmit rate of the scheduler (in bps). The rate is a percentage
of the total interface bandwidth, or the keyword remainder, which
indicates that the scheduler receives the remaining bandwidth of the
interface.
Max buffer delay Amount of transmit delay (in milliseconds) or buffer size of the queue.
This amount is a percentage of the total interface buffer allocation or the
keyword remainder, which indicates that the buffer is sized according to
what remains after other scheduler buffer allocations.
High priority is set If this line appears in the output, the queue priority is high. Otherwise, it is
low.
PLP high Drop profile index for a high packet loss priority profile.
PLP low Drop profile index for a low packet loss priority profile.
PLP medium-high Drop profile index for a medium-high packet loss priority profile.
PLP medium-low Drop profile index for a medium-low packet loss priority profile.
TCP PLP high Drop profile index for a high TCP packet loss priority profile.
TCP PLP low Drop profile index for a low TCP packet loss priority profile.
Policy is exact If this line appears in the output, exact rate limiting is enabled. Otherwise,
no rate limiting is enabled.
show class-of-service forwarding-table scheduler-map ! 531

show class-of-service user@host> show class-of-service forwarding-table scheduler-map

forwarding-table Interface: so-5/0/0 (Index: 9, Map index: 17638, Num of queues: 2):
scheduler-map Entry 0 (Scheduler index: 6090, Forwarding-class #: 0):
Tx rate: 0 Kb (30%), Max buffer delay: 39 bytes (0%)
Priority low
PLP high: 25393, PLP low: 24627, TCP PLP high: 25393, TCP PLP low:8742
Policy is exact
Traffic chunk: Max = 0 bytes, Min = 0 bytes
Priority high
Interface: at-6/1/0 (Index: 10, Map index: 17638, Num of queues: 2):
Priority high
Priority low
532 ! show class-of-service forwarding-table scheduler-map

show class-of-service fragmentation-map
Syntax show class-of-service fragmentation-map
Description For Adaptive Services (AS) PIC link services IQ interfaces (lsq) only, display
fragmentation properties for specific forwarding classes.
List of Sample Output show class-of-service fragmentation-map on page 533
Output Fields Table 126 describes the output fields for the show class-of-service fragmentation-map
Table 126: show class-of-service fragmentation-map Output Fields

Fragmentation map Name of the CoS fragmentation map.
Index Index number of the CoS fragmentation map.
Forwarding class Name of the associated forwarding class.
Fragmentation threshold Maximum size of each multilink fragment.
No Fragmentation Packets of this class are not fragmented.
Multilink Class For multilink multiclass PPP only, the multilink class number
corresponding to the forwarding class.
show class-of-service user@host> show class-of-service fragmentation-map

fragmentation-map Fragmentation map: fragmap2, Index: 19801
Forwarding class: fcDefault
No Fragmentation
Forwarding class: fcCopper

Fragmentation threshold: 64, Multilink Class: 1
Forwarding class: fcSilver

Forwarding class: fcCritical

Fragmentation map: fragmap, Index: 23147

Forwarding class: fcDefault
No Fragmentation
Forwarding class: fcSilver

Fragmentation threshold: 100
Forwarding class: fcCritical

Fragmentation threshold: 100
show class-of-service fragmentation-map ! 533

show class-of-service interface
Syntax show class-of-service interface

<interface-name>
Description Display the logical and physical interface associations for the classifier, rewrite rules,
and scheduler map objects.
Options none—Display CoS associations for all physical and logical interfaces.
interface-name—(Optional) Display CoS associations for the specified interface.
List of Sample Output show class-of-service interface (physical) on page 535

show class-of-service interface (logical) on page 535
show class-of-service interface (Gigabit Ethernet IQ) on page 535
Output Fields Table 127 describes the output fields for the show class-of-service interface
Table 127: show class-of-service interface Output Fields (1 of 2)

Physical interface Name of a physical interface.
Index Index of this interface or the internal index of this object.
Queues supported Number of queues you can configure on the interface.
Queues in use Number of queues currently configured.
Shaping rate Maximum transmission rate on the physical interface. You can
configure the shaping rate on the physical interface, or on the
logical interface, but not both. Therefore, the Shaping rate field is
displayed for the physical interface or the logical interface, but not
both.
Scheduler map Name of the output scheduler map associated with this interface.
Input shaping rate For Gigabit Ethernet IQ2 PICs, maximum transmission rate on the
input interface.
Input scheduler map For Gigabit Ethernet IQ2 PICs, name of the input scheduler map
associated with this interface.
Chassis scheduler map Name of the scheduler map associated with the packet forwarding
component queues.
Rewrite Name and type of the rewrite rules associated with this interface.
Classifier Name and type of classifiers associated with this interface.
Logical interface Name of a logical interface.
Shaping rate Maximum transmission rate on the logical interface. You can
configure the shaping rate on the physical interface, or on the
logical interface, but not both. Therefore, the Shaping rate field is
displayed for the physical interface or the logical interface, but
not both.
Object Category of an object: Classifier, Fragmentation-map (for LSQ
interfaces only), Scheduler-map, or Rewrite.
534 ! show class-of-service interface

Table 127: show class-of-service interface Output Fields (2 of 2)

Name Name of an object.
Type Type of an object: dscp, dscp-ipv6, exp, ieee-802.1, ip, or
inet-precedence.
show class-of-service user@host> show class-of-service interface so-0/2/3

interface (physical) Physical interface: so-0/2/3, Index: 135
Logical interface: fe-0/0/1.0, Index: 68

Shaping rate: 32000
Scheduler-map <default> 27
Rewrite exp-default exp 21
Classifier exp-default exp 5
show class-of-service user@host> show class-of-service interface so-0/2/3.0

interface (logical) Logical interface: so-0/2/3.0, Index: 68
Shaping rate: 32000
Scheduler-map <default> 27
Rewrite exp-default exp 21
show class-of-service user@host> show class-of-service interface ge-6/2/0

interface Physical interface: ge-6/2/0, Index: 175
(Gigabit Ethernet IQ) Queues supported: 4, Queues in use: 4
Input scheduler map: <default>, Index: 3
Chassis scheduler map: <default-chassis>, Index: 4
show class-of-service interface ! 535

show class-of-service loss-priority-map
Syntax show class-of-service loss-priority-map

<name name>
<type frame-relay-de>
Description (J-series routing platform only) Display mapping of code point value to loss priority.
Options none—Display all loss priority maps.
name name—(Optional) Display the specified loss priority map.
type frame-relay-de—(Optional) Display Frame Relay discard eligible code point.
List of Sample Output show class-of-service loss-priority-map on page 536
Output Fields Table 128 describes the output fields for the show class-of-service loss-priority-map
Table 128: show class-of-service loss-priority-map Output Fields

Loss-priority-map Name of the loss priority map.
Code point type Type: frame-relay-de.
Index Internal index.
Code point Code point value.
Loss priority Loss priority of low, medium-low, medium-high, or high.
show class-of-service user@host> show class-of-service loss-priority-map

loss-priority-map Loss-priority-map: frame-relay-de-default, Code point type: frame-relay-de,
Index: 9
0 low
1 high
Loss-priority-map: bar, Code point type: frame-relay-de, Index: 2212

0 medium-low
1 medium-high
Loss-priority-map: abc, Code point type: frame-relay-de, Index: 11038

0 medium-high
1 high
536 ! show class-of-service loss-priority-map

show class-of-service rewrite-rule
Syntax show class-of-service rewrite-rule

<name name>
<type type>
Description Display the mapping of forwarding classes and loss priority to code point values.
Options none—Display all rewrite rules.
name name—(Optional) Display the specified rewrite rule.
type type—(Optional) Display the rewrite rule of specified type. The rewrite rule type
can be one of the following:
! dscp—For IPv4 traffic.
! dscp-ipv6—For IPv6 traffic.
! exp—For MPLS traffic.
! frame-relay-de— (J-series routing platform only) For Frame Relay traffic.
! ieee-802.1—For Layer 2 traffic.
! inet-precedence—For IPv4 traffic.
List of Sample Output show class-of-service rewrite-rule type dscp on page 538
Output Fields Table 129 describes the output fields for the show class-of-service rewrite-rule
Table 129: show class-of-service rewrite-rule Output Fields

Rewrite rule Name of the rewrite rule.
Code point type Type of rewrite rule: dscp, dscp-ipv6, exp, frame-relay-de, or inet-precedence.
Forwarding class Classification of a packet affecting the forwarding, scheduling, and
marking policies applied as the packet transits the router.
Index Internal index for this particular rewrite rule.
Loss priority Loss priority for rewriting.
Code point Code point value to rewrite.
show class-of-service rewrite-rule ! 537

show class-of-service user@host> show class-of-service rewrite-rule type dscp

rewrite-rule type dscp Rewrite rule: dscp-default, Code point type: dscp
gold high 000000
silver low 110000
silver high 111000
bronze low 001010
bronze high 001100
lead high 101110
Rewrite rule: abc-dscp-rewrite, Code point type: dscp, Index: 3245

gold low 000111
gold high 001010
silver low 110000
silver high 111000
bronze high 001100
lead low 101110
lead high 110111
538 ! show class-of-service rewrite-rule

show class-of-service routing-instance
Syntax show class-of-service routing-instance

<routing-instance-name>
Description (M-series and T-series routing platforms only) Display mapping of CoS objects to
routing instances.
Options routing-instance-name—(Optional) Name of a routing instance.
List of Sample Output show class-of-service routing-instance on page 539
Output Fields Table 130 describes the output fields for the show class-of-service routing-instance
Table 130: show class-of-service routing-instance Output Fields

Name Name of an object.
Object Category of an object: Classifier.
Routing instance Name of a routing instance.
Type Type: exp.
show class-of-service user@host> show class-of-service routing-instance

routing-instance Routing Instance : vpn1
Routing Instance : vpn2

Classifier test2 exp 57507
show class-of-service routing-instance ! 539

show class-of-service scheduler-map
Syntax show class-of-service scheduler-map

<name>
Description Display the mapping of schedulers to forwarding classes and a summary of

scheduler parameters for each entry.
Options none—Display all scheduler maps.
name—(Optional) Display a summary of scheduler parameters for each forwarding

class to which the named scheduler is assigned.
List of Sample Output show class-of-service scheduler-map on page 541
Output Fields Table 131 describes the output fields for the show class-of-service scheduler-map
Table 131: show class-of-service scheduler-map Output Fields

Scheduler map Name of the scheduler map.
Index Index of the indicated object. Objects having indexes in this output
include scheduler maps, schedulers, and drop profiles.
Scheduler Name of the scheduler.
Forwarding class Classification of a packet affecting the forwarding, scheduling, and
marking policies applied as the packet transits the router.
Transmit rate Configured transmit rate of the scheduler (in bps). The rate is a percentage
of the total interface bandwidth, or the keyword remainder, which indicates
that the scheduler receives the remaining bandwidth of the interface.
Rate Limit Rate limiting configuration of the queue. Possible values are none,
meaning no rate limiting, and exact, meaning the queue only transmits at
the configured rate.
Maximum buffer Amount of transmit delay (in milliseconds) or the buffer size of the queue.
delay The buffer size is shown as a percentage of the total interface buffer
allocation, or by the keyword remainder to indicate that the buffer is
sized according to what remains after other scheduler buffer allocations.
Priority Scheduling priority: low or high.
Drop profiles Table displaying the assignment of drop profile by name and index to a
given loss priority and protocol pair.
Loss priority Packet loss priority for drop profile assignment.
Protocol Transport protocol for drop profile assignment.
Name Name of the drop profile.
540 ! show class-of-service scheduler-map

show class-of-service user@host> show class-of-service scheduler-map

scheduler-map Scheduler map: dd-scheduler-map, Index: 84
Scheduler: aa-scheduler, Index: 8721, Forwarding class: aa-forwarding-class

Transmit rate: 30 percent, Rate Limit: none, Maximum buffer delay: 39 ms,
Priority: high
Drop profiles:
Low non-TCP 8724 aa-drop-profile
Low TCP 9874 bb-drop-profile
High non-TCP 8833 cc-drop-profile
High TCP 8484 dd-drop-profile
Scheduler: bb-scheduler, Forwarding class: aa-forwarding-class

Transmit rate: 40 percent, Rate limit: none, Maximum buffer delay: 68 ms,
Priority: high
Drop profiles:
Low non-TCP 8724 aa-drop-profile
Low TCP 9874 bb-drop-profile
High non-TCP 8833 cc-drop-profile
High TCP 8484 dd-drop-profile
show class-of-service scheduler-map ! 541

show class-of-service traffic-control-profile
Syntax show class-of-service traffic-control-profile

<profile-name>
Description For Gigabit Ethernet IQ and Channelized IQ PICs only, display traffic shaping and
scheduling profiles.
Options none—Display all profiles.
profile-name—(Optional) Display information about a single profile.
List of Sample Output show class-of-service traffic-control-profile on page 542
Output Fields Table 132 describes the output fields for the show class-of-service
traffic-control-profile command. Output fields are listed in the approximate order in
which they appear.
Table 132: show class-of-service traffic-control-profile Output Fields

Traffic control profile Name of the traffic-control profile.
Index Index number of the traffic-control profile.
Scheduler map Name of the associated scheduler map.
Delay Buffer rate Configured delay-buffer rate, in bps.
Guaranteed rate Configured guaranteed rate, in bps.
show class-of-service user@host> show class-of-service traffic-control-profile

traffic-control-profile Traffic control profile: Profile1, Index: 57625
Scheduler map: m1
Delay Buffer rate: 500000
Guaranteed rate: 1000000
Traffic control profile: Profile2, Index: 57624

Scheduler map: m2

Scheduler map: m3

Scheduler map: m4
542 ! show class-of-service traffic-control-profile

show class-of-service virtual-channel
Syntax show class-of-service virtual channel

<virtual-channel-name>
Description (J-series routing platform only) Display virtual channel information.
Options none—Display all virtual channels.
virtual-channel-name—(Optional) Display the specified virtual channel only.
List of Sample Output show class-of-service virtual-channel on page 543
Output Fields Table 133 describes the output fields for the show class-of-service virtual-channel
Table 133: show class-of-service virtual-channel Output Fields

Virtual channel Name of a virtual channel.
show class-of-service user@host> show class-of-service virtual-channel

virtual-channel Virtual channel: vc-1, Index: 1
Virtual channel: vc-2, Index: 2
show class-of-service virtual-channel ! 543

show class-of-service virtual-channel-group
Syntax show class-of-service virtual channel group

<virtual-channel-group-name>
Description (J-series routing platform only) Display virtual channel group information.
Options none—Display all virtual channel groups.
virtual-channel-group-name—(Optional) Display the specified virtual channel group

only.
List of Sample Output show class-of-service virtual-channel-group on page 544
Output Fields Table 134 describes the output fields for the show class-of-service
virtual-channel-group command. Output fields are listed in the approximate order in
which they appear.
Table 134: show class-of-service virtual-channel-group Output Fields

Virtual channel group Name of a virtual channel group.
show class-of-service user@host> show class-of-service virtual-channel-group

virtual-channel-group Virtual channel group: vc-gp, Index: 16321
Virtual channel: vc-1
Scheduler map: sc-map
Shaping rate : 100 percent
544 ! show class-of-service virtual-channel-group

Part 4
Services
! Compressed Real-Time Transport Protocol Operational Mode Commands on

page 547
! CoS Services Operational Mode Commands on page 553
! Data Link Switching Operational Mode Commands on page 559
! Flow Collection and Monitoring Operational Mode Commands on page 573
! Intrusion Detection Service Operational Mode Commands on page 615
! IP Security Operational Mode Commands on page 627
! Layer 2 Tunneling Protocol Operational Mode Commands on page 689
! Network Address Translation Operational Mode Commands on page 707
! Service Sets Operational Mode Commands on page 711
! Stateful Firewall Operational Mode Commands on page 717
Services ! 545
546 ! Services
Chapter 14
Compressed Real-Time Transport
Protocol Operational Mode Commands
monitor and troubleshoot Compressed Real-Time Transport Protocol (CRTP)
services. Commands are listed in alphabetical order.
Table 135: CRTP Operational Mode Commands
Task Command
Clear CRTP flows statistics. clear services crtp statistics on page 548
Display CRTP output. show services crtp on page 549
Display CRTP flows. show services crtp flows on page 551
NOTE: CRTP is supported on the following interfaces:
! M-series and T-series routing platforms—Link services intelligent queuing (IQ)

(lsq-fpc/pic/port)
! J-series routing platform—Link services (ls-pim/0/port)
NOTE: For information about how to configure CRTP services, see the JUNOS
Services Interfaces Configuration Guide.
! 547
clear services crtp statistics
Syntax clear services crtp statistics

Description Clear Compressed Real-Time Transport Protocol (CRTP) flow statistics.
Options none—Clear CRTP flow statistics on all interfaces.
interface interface-name—(Optional) Clear CRTP flow statistics for the specified

interface:
! On M-series and T-series routing platforms, a link services IQ

(lsq-fpc/pic/port) or redundant link services IQ (rlsq-fpc/pic/port) interface
! On the J-series routing platform, a link services (ls-pim/0/port) interface
List of Sample Output clear services crtp statistics on page 548
request.
clear services crtp user@host> clear services crtp statistics

statistics
548 ! clear services crtp statistics

Chapter 14: Compressed Real-Time Transport Protocol Operational Mode Commands
show services crtp
Syntax show services crtp

<extensive>
Description Display Compressed Real-Time Transport Protocol (CRTP) extensive output.
Options none—Display CRTP extensive output for all interfaces.
extensive—(Optional) Display extensive CRTP information.
interface interface-name—(Optional) Display CRTP flow statistics for the specified

interface:

List of Sample Output show services crtp extensive on page 550
Output Fields Table 136 lists the output fields for the show services crtp command. Output fields
Table 136: show services crtp Output Fields (1 of 2)

Interface Name of the physical interface. to be provided
Port minimum Compression is applied to UDP packets with even ports in the specified range. to be provided
Port maximum
Maximum UDP Maximum value of a context identifier in the space of context identifiers to be provided
compressed sessions allocated for UDP.
CRTP maximum period Maximum interval between full headers. Suggested value is 256. to be provided
CRTP maximum time Maximum time interval between full headers. Suggested value is 5 seconds. to be provided
Compression ratio Ratio of received packet size to compressed packet size, in percentage. For to be provided
example, if the packet size is 100 bytes when it is received, and is 40 bytes
after compression, the compression ratio is 100 – 40/100 * 100 = 60%.
Decompression ratio Ratio of received packet size to decompressed packet size, in percentage. For to be provided
example, if the packet size is 40 bytes when it is received, and is 100 bytes
after compression, the decompression ratio is 100 – 40/100 * 100 = 60%.
Discards Number of frames that the incoming packet match code discarded because to be provided
they were not recognized.
Sessions Total number of active CRTP sessions. to be provided
IP bytes Number of IP bytes sent and received. to be provided
Compressed bytes Number of compressed IP header bytes sent and received. to be provided
CRTP packets Number of CRTP packets sent and received. to be provided
show services crtp ! 549

Table 136: show services crtp Output Fields (2 of 2)

CUDP/CNTCP packets Number of compressed UDP packets and compressed non-TCP packets sent to be provided
and received.
Full header packets Number of full header packets sent and received. Full header packets to be provided
communicate the uncompressed IP header plus any following headers and
data to establish the uncompressed header state in the decompressor for a
particular context.
Context state packet Number of context state packets sent and received. Context state packets are to be provided
sent from the decompressor to the compressor to communicate a list of
context IDs for which synchronization is lost or might be lost.
IP packets Number of IP packets sent and received. to be provided
Compressed packets Number of compressed packets sent and received. to be provided
show services crtp user@host> show services crtp extensive

extensive Interface: lsq-1/1/0.1
Port minimum: 2000, Port maximum: 64009
Maximum UDP compressed sessions: 256
CRTP maximum period: 256, CRTP maximum time: 5
Compression ratio: 0, Decompression ratio: 0, Discards: 0
CRTP stats Receive Transmit
Sessions 1 1
IP bytes 60 60
Compressed bytes 61 60
CRTP packets 0 0
CUDP/CNTCP packets 0 0
Full header packets 1 1
Context state packets 0 0
IP packets 1 1
Compressed packets 1 1
550 ! show services crtp

Chapter 14: Compressed Real-Time Transport Protocol Operational Mode Commands
show services crtp flows
Syntax show services crtp flows

Description Display Compressed Real-Time Transport Protocol (CRTP) flows.
Options none—Display CRTP flows for all interfaces.
interface interface-name—(Optional) Display CRTP flows for the specified interface:

List of Sample Output show services crtp flows on page 551
Output Fields Table 137 lists the output fields for the show services crtp flows command. Output
Table 137: show services crtp flows Output Fields

Interface Name of the physical interface.
Flow Received or transmitted flow.
Source IP source address.
Destination IP destination address.
SSRC ID Synchronization source (SSRC) identifier. One of the fields in the RTP header
used to select the context. The SSRC identifier is a randomly chosen value unique
within a particular CRTP session.
Ctx ID Session context ID. Indicates the session context in which to interpret the packet.
The decompressor can use the context ID to index its table of stored session
contexts directly.
show services crtp user@host> show services crtp flows

flows Interface: lsq-1/1/0.1
Flow Source Destination SSRC ID Ctx ID
Receive 60.1.1.3:28004 80.1.1.3:26000 123 0
Transmit 80.1.1.3:26000 60.1.1.3:28004 123 2
show services crtp flows ! 551

552 ! show services crtp flows

Chapter 15
CoS Services Operational Mode
Commands
monitor and troubleshoot class-of-service (CoS ) services on the
Adaptive Services PIC. Commands are listed in alphabetical order.
Table 138: CoS Services Operational Mode Commands
Task Command
Clear CoS statistics. clear services cos statistics on page 554
Display CoS statistics. show services cos statistics on page 555
NOTE: CoS services are supported on the adaptive services interface on the
following routing platforms:
! J-series routing platform—sp-pim/0/slot
! M-series and T-series routing platforms—sp-fpc/pic/port
CoS services are also supported on the redundant adaptive services interface
(rspnumber) on M-series and T-series routing platforms.
NOTE: For information about how to configure CoS services, see the JUNOS
! 553
clear services cos statistics
Syntax clear services cos statistics

<service-set service-set-name>
Description Clear statistics for class-of-service (CoS) code point bit patterns and forwarding
classes as configured in CoS services for the AS PIC.
Options none—Clear all services CoS statistics.
interface interface-name—(Optional) Clear statistics for the specified interface only.
service-set service-set-name—(Optional) Clear statistics for the specified service set

only.
List of Sample Output clear services cos statistics on page 554
request.
clear services cos user@host> clear services cos statistics

statistics
554 ! clear services cos statistics

Chapter 15: CoS Services Operational Mode Commands
show services cos statistics
Syntax show services cos statistics

<diffserv | forwarding-class>
<summary>
Description Display the mapping of class-of-service (CoS) code point aliases to corresponding
bit patterns and the mapping of forwarding class names to queue numbers as
configured in CoS services for the AS PIC.
Options none—Display all services CoS statistics.
diffserv | forwarding-class—(Optional) Display only the selected information, either

DiffServ codepoints or forwarding classes.
interface interface-name—(Optional) Display statistics for the specified interface

only.
service-set service-set-name—(Optional) Display statistics for the specified service

set only.
summary—(Optional) Display summary of statistics on a per-interface basis.
List of Sample Output show services cos statistics on page 556
Output Fields Table 139 describes the output fields for the show services cos statistics command.
Table 139: show services cos statistics Output Fields

Interface Name of interface. All levels
Service set Name of service set. All levels
DSCP DiffServ code point bit pattern. All levels
Packets in Number of packets received. All levels
Packets out Number of packets transmitted. All levels
Forwarding class Forwarding class queue number. All levels
show services cos statistics ! 555

show services cos user@host> show services cos statistics

statistics Interface: sp-1/0/0, Service set: scos
DSCP Packets in Packets out
000000 0 0
000001 0 0
000010 0 0
000011 0 0
000100 0 0
000101 0 0
000110 0 0
000111 0 0
001000 0 0
001001 0 0
001010 0 0
001011 0 0
001100 0 0
001101 0 0
001110 0 0
001111 0 0
010000 0 0
010001 0 0
010010 0 0
010011 0 0
010100 0 0
010101 0 0
010110 0 0
010111 0 0
011000 0 0
011001 0 0
011010 0 0
011011 0 0
011100 0 0
011101 0 0
011110 0 0
011111 0 0
100000 0 0
100001 0 0
100010 0 0
100011 0 0
100100 0 0
100101 0 0
100110 0 0
100111 0 0
101000 0 0
101001 0 0
101010 0 0
101011 0 0
101100 0 0
101101 0 0
101110 0 0
101111 0 0
110000 0 0
110001 0 0
110010 0 0
110011 0 0
110100 0 0
110101 0 0
110110 0 0
110111 0 0
111000 0 0
111001 0 0
111010 0 0
111011 0 0
556 ! show services cos statistics

Chapter 15: CoS Services Operational Mode Commands
111100 0 0
111101 0 0
111110 0 0
111111 0 0
Forwarding class Packets in Packets out
0 0 0
1 0 0
2 0 0
3 0 0
4 0 0
5 0 0
6 0 0
7 0 0
8 0 0
9 0 0
10 0 0
11 0 0
12 0 0
13 0 0
14 0 0
15 0 0
show services cos The output for the show services cos statistics brief command is identical to that for
statistics brief the show services cos statistics command. For sample output, see show services
cos statistics on page 556.
show services cos The output for the show services cos statistics detail command is identical to that
statistics detail for the show services cos statistics command. For sample output, see show services
cos statistics on page 556.
show services cos The output for the show services cos statistics extensive command is identical to
statistics extensive that for the show services cos statistics command. For sample output, see show
services cos statistics on page 556.
show services cos statistics ! 557

558 ! show services cos statistics

Chapter 16
Data Link Switching Operational Mode
Commands
monitor and troubleshoot data link switching (DLSw) on J-series routing platforms.
Commands are listed in alphabetical order.
Table 140: DLSw Operational Mode Commands
Task Command
Clear DLSw reachability. clear dlsw reachability on page 560
Display DLSw peer capability. show dlsw capabilities on page 561

Display information about configured DLSw circuits. show dlsw circuits on page 562
Display DLSw peer information. show dlsw peers on page 564
Display information about the cached media access control show dlsw reachability on page 566
(MAC) entries.
Display logical link control type 2 (LLC2) redundancy information show llc2 redundancy on page 567
for DLSw.
Display LLC2 redundancy statistics. show llc2 redundancy interface statistics on page 568
Display LLC2 redundancy MAC translation information. show llc2 redundancy mac-translation on page 569
Display LLC2 redundancy tracking information. show llc2 redundancy track on page 570
NOTE: DLSw is supported only on the J-series routing platform.
NOTE: For information about how to configure DLSw, see the JUNOS Services
Interfaces Configuration Guide or the J-series Services Router Advanced WAN Access
! 559
clear dlsw reachability
Syntax clear dlsw reachability
Description Clear the data-link switching (DLSw) reachability cache.
See Also show dlsw reachability on page 566
List of Sample Output clear dlsw reachability on page 560
request.
clear dlsw reachability user@host> clear dlsw reachability
560 ! clear dlsw reachability

Chapter 16: Data Link Switching Operational Mode Commands
show dlsw capabilities
Syntax show dlsw capabilities
Description (J-series routing platform only) Display information about data link switching
(DLSw) capabilities of a specific remote peer or all peers.
List of Sample Output show dlsw capabilities on page 561
Output Fields Table 141 describes the output fields for the show dlsw capabilities command.
Table 141: show dlsw capabilities Output Fields

Peer IP address of the peer DLSw router.
Vendor ID Numerical value assigned to Juniper Networks.
Version number DLSw version.
Initial pacing window size Receive window size for incoming transport connections with the
DLSw peer.
Version string Juniper Networks software version information.
show dlsw capabilities user@host> show dlsw capabilities

Peer: 217.110.111.134
Vendor ID : 000585
Version number : 0200
Initial pacing window size : 32
Version string :
Juniper Networks, Inc. j2300 internet router
JUNOS Software Release 7.4I0 [builder]
Build date: 2005-07-15 07:13:17 UTC
Copyright (c) 1996-2005 Juniper Networks, Inc.
show dlsw capabilities ! 561

show dlsw circuits
Syntax show dlsw circuits

<brief | detail>
Description (J-series routing platform only) Display information about configured data link
switching (DLSw) circuits.
Options none—Display information about all DLSw circuits.
List of Sample Output show dlsw circuits on page 563

show dlsw circuits detail on page 563
Output Fields Table 142 describes the output fields for the show dlsw circuits command. Output
Table 142: show dlsw circuits Output Fields

Circuit id Circuit ID. detail
Local address MAC address of the local DLSw peer. All levels
LSAP Number of the local service access point. All levels
Remote address MAC address of the remote DLSw peer. All levels
DSAP Number of the destination service access point. All levels
Peer or remote peer IP address of the remote DLSw peer. All levels
address
Circuit state State of the circuit. detail
Uptime How long the circuit has been established. All levels
Max BTU size Maximum packet size. detail
Circuit priority Traffic priority on the circuit. detail
562 ! show dlsw circuits

Table 142: show dlsw circuits Output Fields

Statistics Statistics: detail
! I-frames received—Number of I-frames received.
! I-frames sent—Number of I-frames sent.
! Bytes in I-frames received—Number of bytes in
I-frames received.
! Bytes in I-frames sent—Number of bytes in I-frames
sent.
! I-frames rejected—Number of I-frames rejected.
! Bytes in I-frames rejected—Number of bytes in
I-frames rejected.
! I-frames retransmitted—Number of I-frames
retransmitted.
! Bytes in retransmitted I-frames—Number of bytes in
I-frames retransmitted.
! Reject frames received—Number of reject frames
received.
! Reject frames sent—Number of reject frames sent.
! XID frames received—Number of XID frames
received.
! XID frames sent—Number of XID frames sent.
show dlsw circuits user@host> show dlsw circuits

Local address LSAP Remote address DSAP Peer Uptime
22:22:00:00:00:06 04 44:44:00:00:00:06 04 10.255.18.2 00:06:42
show dlsw circuits user@host> show dlsw circuits detail

detail Circuit ID: 9ad20498aa04
Local address: 22:22:00:00:00:06, LSAP: 04
Remote address: 44:44:00:00:00:06, DSAP: 04
Remote peer address: 18.255.18.2
Circuit state: Connected
Uptime: 00:09:02
Max BTU size: 1466
Circuit priority: 3
Statistics:
I-frames received : 0
I-frames sent : 0
Bytes in I-frames received : 0
Bytes in I-frames sent : 0
I-frames rejected : 0
Bytes in I-frames rejected : 0
I-frames retransmitted : 0
Bytes in retransmitted I-frames : 0
Reject frames received : 0
Reject frames sent : 0
XID frames received : 2
XID frames sent : 2
show dlsw circuits ! 563

show dlsw peers
Syntax show dlsw peers

<brief | detail>
<peer-ip ip-address>
Description (J-series routing platform only) Display data link switching (DLSw) peer status.
Options none—Display information about all DLSw peers.
peer-ip ip-address—(Optional) Display information about only the specified DLSw

peer.
List of Sample Output show dlsw peers brief on page 565

show dlsw peers detail on page 565
Output Fields Table 143 describes the output fields for the show dlsw peers command. Output
Table 143: show dlsw peers Output Fields

Peer IP address of the remote DLSw peer. All levels
State Status of the connection. All levels
Circuits Number of circuits on the DLSw network. All levels
Uptime How long the circuit has been established. All levels
Local address IP address of the local DLSw peer. detail
Connected time Length of time the connection is established. detail
Receive initial pacing Size of the initial pacing frame. detail
No circuits timeout Length of time before a circuit times out. detail
Type-of-service value CoS type-of-service (ToS) number. detail
Peer cost Preference for establishing a circuit with this peer. detail
Load balancing Whether load balancing is enabled and what detail
algorithm is used.
Circuit weight Extent to which this peer should participate in detail
establishing circuits.
564 ! show dlsw peers

Table 143: show dlsw peers Output Fields

Statistics Statistics: detail
! Data packets received—Number of packets
received.
! Data packets sent—Number of packets sent.
! Data bytes received—Number of bytes received.
! Data bytes sent—Number of bytes sent.
! Control packets received—Number of control
packets received.
! Control packets sent—Number of control packets
sent.
! CANUREACH_ex received—Number of CANUREACH
messages received.
! CANUREACH_ex sent—Number of CANUREACH
messages sent.
! ICANREACH_ex received—Number of ICANREACH
messages received.
! ICANREACH_ex sent—Number of ICANREACH
messages sent.
show dlsw peers brief user@host> show dlsw peers brief

Peer State Circuits Uptime
17.255.17.2 Connected 0 00:00:00
18.255.18.2 Connected 1 00:12:03
show dlsw peers detail user@host> show dlsw peers detail

Peer: 10.255.18.2
State: Connected, Circuits: 1, Local address: 10.255.4.50
Uptime: 00:15:05
Receive initial pacing: 20, No circuits timeout: 0
Type-of-service value: 0
Peer cost: 100, Load balancing: Circuit Weight
Circuit weight: 2
Statistics:
Data packets received : 0
Data packets sent : 0
Data bytes received : 0
Data bytes sent : 0
Control packets received : 7
Control packets sent : 8
CANUREACH_ex received : 0
CANUREACH_ex sent : 1
ICANREACH_ex received : 1
ICANREACH_ex sent : 0
show dlsw peers ! 565

show dlsw reachability
Syntax show dlsw reachability
Description (J-series routing platform only) Display media access control (MAC) and IP
addresses of remote data link switching (DLSw) peers.
List of Sample Output show dlsw reachability on page 566
Output Fields Table 144 describes the output fields for the show dlsw reachability command.
Table 144: show dlsw reachability Output Fields

MAC index Number assigned to the DLSw peer.
MAC address MAC address of the DLSw peer.
Location Peer location: local or remote.
Peer/interface Peer interface name or IP address.
show dlsw reachability user@host> show dlsw reachability

MAC index MAC address Location Peer/Interface
0 44:44:00:00:00:06 remote 17.255.17.2
18.255.18.2
1 22:22:00:00:00:06 local fe-0/0/1.0
566 ! show dlsw reachability

show llc2 redundancy
Syntax show llc2 redundancy

<brief | detail>
<interface statistics | mac-translation | track (dlsw-remote-destination |
dlsw-remote-peer | interfaces)>
Description (J-series routing platform only) Display logical link control type 2 (LLC2) redundancy
information for data link switching (DLSw).
Options none—Display basic LLC2 redundancy information. Same as brief.
Sample Output show llc2 redundancy on page 567

show llc2 redundancy detail on page 567
Table 145 describes the output fields for the show llc2 redundancy command.
Table 145: show llc2 redundancy Output Fields

Interface Interface name. All levels
Unit Logical interface unit number. brief
Group Group number. All levels
Int state or Interface state: up or down. All levels
Interface state
ER state or state Indicates master or backup router. All levels
Index Number assigned to the router. detail
Priority Order to take over as master. detail
Advertisement Interval Length of time between sending hello packets. detail
Preempt Master took over because of a failure. detail
Advertisement timer Times the advertisement intervals. detail
Master router uptime Length of time the master router has been available. detail
Tracking Whether tracking options are enabled or disabled. detail
show llc2 redundancy user@host> show llc2 redundancy

Interface Unit Group Int state ER state
fe-0/0/1.0 0 5 up master
show llc2 redundancy user@host> show llc2 redundancy detail

detail Interface:fe-0/0/1.0 Index 69
Interface state: up, Group 5, State master,
Priority:255, Advertisement interval 5,
Preempt:yes, Advertisement timer 0.0,
Master router uptime:361476.770, Tracking: enabled
show llc2 redundancy ! 567

show llc2 redundancy interface statistics
Syntax show llc2 redundancy interface statistics
Description (J-series routing platform only) Display logical link control type 2 (LLC2) redundancy
interface statistics for data link switching (DLSw).
Sample Output show llc2 redundancy interface statistics on page 568
Output Fields Table 146 lists the output fields for the show llc2 redundancy interface statistics
Table 146: show llc2 redundancy interface statistics Output Fields

Interface Name of the configured physical interface.
Index Number assigned to the interface.
Group Number of the redundancy group.
Interface ERED PDU statistics
Advertisement sent Number of packets sent to advertise the router on the network.
Advertisement received Number of packets received as advertisements on the network.
Interface ERED PDU error statistics
Invalid ERED TTL value Number of invalid ethernet redundancy time-to-live (TTL) values.
received
show llc2 redundancy user@host> show llc2 redundancy interface statistics

interface statistics Interface : fe-0/0/1.0, Index : 69, Group : 5
Interface ERED PDU statistics
Advertisement sent : 2959
Advertisement received : 0
Interface ERED PDU error statistics
Invalid ERED TTL value received : 0
568 ! show llc2 redundancy interface statistics

show llc2 redundancy mac-translation
Syntax show llc2 redundancy mac-translation
Description (J-series routing platform only) Display Logical Link Control type 2 (LLC2)
redundancy MAC translation information for data link switching (DLSw).
Sample Output show llc2 redundancy mac-translation on page 569
Output Fields Table 147 lists the output fields for the show llc2 redundancy mac-translation
Table 147: show llc2 redundancy mac-translation Output Fields

Local mac MAC address of the local DLSw peer router.
Remote mac MAC address of the remote DLSw peer router.
Interface Physical interface configured for Ethernet redundancy.
Group Assigned redundancy group number.
show llc2 redundancy user@host> show llc2 redundancy mac-translation

mac-translation Local mac Remote mac Interface group
44:44:44:44:44:44 44:44:44:44:10:25 fe-0/0/1.0 5
44:44:44:44:44:33 44:44:44:44:10:16 fe-0/0/1.0 5
44:44:44:44:44:48 44:44:44:44:10:39 fe-0/0/1.0 5
09:00:2b:00:00:04 09:00:2b:00:00:05 fe-0/0/1.0 5
00:00:5e:00:01:01 00:0d:88:45:ce:5c fe-0/0/1.0 5
show llc2 redundancy mac-translation ! 569

show llc2 redundancy track
Syntax show llc2 redundancy

<brief | detail>
<interface statistics | mac-translation | track (dlsw-remote-destination |
dlsw-remote-peer | interfaces)>
Description (J-series routing platform only) Display Logical Link Control type 2 (LLC2)
redundancy tracking information for data link switching (DLSw).
Options brief | detail—Display the specified level of output.
dlsw-remote-destination—Display LLC2 remote destination tracking information.
dlsw-remote-peer—Display LLC2 remote peer tracking information.
interfaces—Display LLC2 interface tracking information.
Sample Output show llc2 redundancy track dlsw-remote-destination on page 571

show llc2 redundancy track dlsw-remote-peer on page 571
show llc2 redundancy track interfaces on page 571
Output Fields Table 148 lists the output fields for the show llc2 redundancy track command. Output
Table 148: show llc2 redundancy track Output Fields

Remote dest MAC address of the remote peer router. to be provided
Peer dest IP address of the remote peer. to be provided
Track if Physical interface configured for tracking. to be provided
Connectivity Status of the connection. to be provided
Cost Value assigned to place the router in a redundancy to be provided
hierarchy.
Interface Physical interfaces configured for DLSw redundancy. to be provided
Group Assigned redundancy group number. to be provided
Cfg Priority value configured on the router. to be provided
Run Value after all priority values are applied. to be provided
ER state Status of the router: master or backup. to be provided
570 ! show llc2 redundancy track

show llc2 redundancy user@host> show llc2 redundancy track dlsw-remote-destination

track Remote dest Reachability Cost Interface Group Cfg Run ER state
dlsw-remote-destination 44:44:44:44:44:45 reachable 15 fe-0/0/1.0 5 255 255 master
44:44:44:44:44:49 unknown 35 fe-0/0/1.0 5 255 255 master
show llc2 redundancy user@host> show llc2 redundancy track dlsw-remote-peer

track dlsw-remote-peer Remote peer Connectivity Cost Interface Group Cfg Run ER state
10.255.110.38 yes 10 fe-0/0/1.0 5 255 245 master
2.2.2.3 no 10 fe-0/0/1.0 5 255 245 master
10.255.110.39 yes 10 fe-0/0/1.0 5 255 245 master
show llc2 redundancy user@host> show llc2 redundancy track interfaces

track interfaces Track if State Cost Interface Group Cfg Run ER state
e1-0/0/2.0 yes 10 fe-0/0/1.0 5 255 255 master
show llc2 redundancy track ! 571

572 ! show llc2 redundancy track

Chapter 17
Flow Collection and Monitoring
monitor and troubleshoot flow collection and monitoring services. In the table, the
commands are grouped by functionality. In the remainder of this chapter, they are
listed strictly in alphabetical order.
Table 149: Flow Collection and Monitoring Operational Commands (1 of 2)
Category Task Command

Active Flow Display information about aggregated flows. show services accounting aggregation on page 588
Monitoring
Display error statistics. show services accounting errors on page 591
Display the number of active flow statistics. show services accounting flow on page 593
Display information about the flows being show services accounting flow-detail on page 594
processed by the accounting service.
Display memory and flow record statistics. show services accounting memory on page 597
Display packet size distribution histogram. show services accounting packet-size-distribution on page 598
Display available PICs for the service and show services accounting status on page 599
redundancy model.
Display the CPU usage of the PIC. show services accounting usage on page 600
Dynamic Flow Clear dynamic flow capture information. clear services dynamic-flow-capture on page 575
Capture
Display information for a content show services dynamic-flow-capture content-destination on
destination. page 601
Display information for a control source. show services dynamic-flow-capture control-source on
page 602
Display dynamic flow capture statistics. show services dynamic-flow-capture statistics on page 604
! 573
Table 149: Flow Collection and Monitoring Operational Commands (2 of 2)

Flow Collection Clear the flow collector statistics for one clear services flow-collector statistics on page 577
interface or all interfaces.
Switch to the primary server. request services flow-collector change-destination primary
interface on page 578
Switch to the secondary server. request services flow-collector change-destination secondary
interface on page 579
Transfer a test file to the primary or request services flow-collector test-file-transfer on page 580
secondary FTP server configured as a flow
collector.
Display information about the files present show services flow-collector file interface on page 606
on the collector service.
Display the number of packets received by show services flow-collector input interface on page 608
one or more flow collection interfaces from
one or all monitoring interfaces.
Display overall statistics for the flow show services flow-collector interface on page 609
collector application.
Passive Flow Clear passive monitoring statistics. clear passive-monitoring statistics on page 576
Monitoring
Display error statistics. show passive-monitoring error on page 581
Display the number of active flow statistics. show passive-monitoring flow on page 583
Display memory and flow record statistics. show passive-monitoring memory on page 585
Display available PICs for the service and show passive-monitoring status on page 586
redundancy model.
Display the CPU usage of the PIC. show passive-monitoring usage on page 587
NOTE: Active flow monitoring is supported on the adaptive services interface

(sp-fpc/pic/port) on J-series, M-series, and T-series routing platforms, and on the
flow monitoring (mo-fpc/pic/port) interface on the M-series and T-series routing
platforms.
Flow collection is supported on the flow collector interface (cp-fpc/pic/port) on

M40e, M160, and M320 routers and on the T-series routing platform.
Passive flow monitoring is supported on the flow monitoring interface

(mo-fpc/pic/port) on the M40e, M160, and M320 routers and on the T-series
routing platform.
NOTE: For information about how to configure flow collection and monitoring
services, see the JUNOS Services Interfaces Configuration Guide.
574 !
Chapter 17: Flow Collection and Monitoring Operational Mode Commands
clear services dynamic-flow-capture
Syntax clear services dynamic-flow-capture capture-group group-name

<criteria-identifier identifier>
<destination-identifier identifier>
<force>
<static>
Description (M320 routers and T-series routing platforms only) Clear dynamic flow capture
information for specified capture group.
Options capture-group group-name—Capture-group identifier.
criteria-identifier identifier—(Optional) Criteria identifier.
destination-identifier identifier—(Optional) Content destination identifier.
force—(Optional) Force clearing of criteria.
static—(Optional) Clear static criteria also.
List of Sample Output clear services dynamic-flow-capture on page 575
request.
clear services user@host> clear services dynamic-flow-capture capture-group flow-a

dynamic-flow-capture
clear services dynamic-flow-capture ! 575

clear passive-monitoring statistics
Syntax clear passive-monitoring statistics (all | interface interface-name)
Description (M40e, M160, and M320 routers and T-series routing platform only) Clear statistics
for one passive monitoring interface or for all passive monitoring interfaces.
Options all—Clear statistics for all configured passive monitoring interfaces.
interface interface-name—Clear statistics for the specified passive monitoring

interface (mo-fpc/pic/port).
List of Sample Output clear passive-monitoring statistics on page 576
request.
clear user@host> clear passive-monitoring statistics interface mo-5/0/0

passive-monitoring
statistics
576 ! clear passive-monitoring statistics

clear services flow-collector statistics
Syntax clear services flow-collector statistics (all | interface interface-name)
Description (M40e, M160, and M320 routers and T-series routing platform only) Clear statistics
for one flow collector interface or for all flow collector interfaces.
Options all—Clear statistics for all configured flow collector interfaces.
interface interface-name—Clear statistics for the specified flow collector interface

(cp-fpc/pic/port).
List of Sample Output clear services flow-collector statistics on page 577
request.
clear services user@host> clear services flow-collector statistics interface cp-5/0/0

flow-collector statistics Flow collector interface: cp-5/0/0
Interface state: Collecting flows
Statistics cleared successfully
clear services flow-collector statistics ! 577

request services flow-collector change-destination primary interface
Syntax request services flow-collector change-destination primary interface cp-fpc/pic/port

<clear-files>
<clear-logs>
<immediately | gracefully>
Description (M40e, M160, and M320 routers and T-series routing platform only) Switch to the
primary File Transfer Protocol (FTP) server that is configured as a flow collector.
Options none—Switch to the primary FTP server.
cp-fpc/pic/port—Specify the flow collector interface name for the primary

destination.
clear-files—(Optional) Request clearing of existing data files in the FTP wait queue
when the switch takes place.
clear-logs—(Optional) Request clearing of existing logs when the switch takes place.
immediately | gracefully—(Optional) Specify whether you want the switch to take

place immediately, or to affect only newly created files.
List of Sample Output request services flow-collector change-destination primary interface on page 578
request.
request services user@host> request services flow-collector change-destination primary interface

flow-collector cp-6/0/0
change-destination Flow collector interface: cp-6/0/0
primary interface Interface state: Collecting flows
Destination change successful
578 ! request services flow-collector change-destination primary interface

request services flow-collector change-destination secondary interface
Syntax request services flow-collector change-destination secondary interface cp-fpc/pic/port

<clear-files>
<clear-logs>
<immediately | gracefully>
Description (M40e, M160, and M320 routers and T-series routing platform only) Switch to the
secondary File Transfer Protocol (FTP) server that is configured as a flow collector.
Options none—Switch to the secondary FTP server.
cp-fpc/pic/port—Specify the flow collector interface name (cp-fpc/pic/port) for the

secondary destination.
clear-files—(Optional) Request clearing of existing data files in the FTP wait queue
when the switch takes place.
clear-logs—(Optional) Request clearing of existing logs when the switch takes place.
immediately | gracefully—(Optional) Specify whether you want the switch to take

place immediately, or to affect only newly created files.
List of Sample Output request services flow-collector change-destination secondary interface on page 579
request.
request services user@host> request services flow-collector change-destination secondary

flow-collector interface cp-6/0/0
change-destination Flow collector interface: cp-6/0/0
secondary interface Interface state: Collecting flows
Destination change successful
request services flow-collector change-destination secondary interface ! 579

request services flow-collector test-file-transfer
Syntax request services flow-collector test-file-transfer filename interface (all | cp-fpc/pic/port)

(channel-zero | channel-one) (primary | secondary)
Description (M40e, M160, and M320 routers and T-series routing platform only) Transfer a test
file to the primary or secondary File Transfer Protocol (FTP) server that is
configured as a flow collector. This command verifies that the output side of the
flow collector interface is operating properly.
Options filename—Name of the test file to transfer.
interface all | cp-fpc/pic/port)—Transfer a test file of flows from all configured flow
collector interfaces or from only the specified interface.
channel-zero | channel-one—Transfer a file from export channel 0 (unit 0) or

channel 1 (unit 1) of the PIC.
primary | secondary—Transfer a file to the primary or secondary server configured

as a flow collector.
List of Sample Output request services flow-collector test-file-transfer on page 580
request.
request services user@router> request services flow-collector test-file-transfer test_file

flow-collector interface cp-7/1/0 channel-one primary
test-file-transfer Flow collector interface: cp-7/1/0
Response: Test file transfer successfully scheduled
580 ! request services flow-collector test-file-transfer

show passive-monitoring error
Syntax show passive-monitoring error (* | all | mo-fpc/pic/port)
Description (M40e, M160, and M320 routers and T-series routing platform only) Display passive
monitoring error statistics.
Options * | all | mo-fpc/pic/port—Display error statistics for monitoring interfaces. Use a

wildcard character, specify all interfaces, or provide a specific interface name.
List of Sample Output show passive-monitoring error all on page 582
Output Fields Table 150 lists the output fields for the show passive-monitoring error command.
Table 150: show passive-monitoring error Output Fields (1 of 2)

Passive monitoring interface Name of the passive monitoring interface.
Local interface index Index counter of the local interface.
Interface state State of the passive monitoring interface:
! Monitoring—Specified interface is actively monitoring.
! Disabled—Specified interface has been disabled from the CLI.
! Not monitoring—The interface is operational, but not monitoring. This condition occurs when
an interface first comes online, or when the interface is operational, but no logical unit has
been configured under the physical interface.
! Unknown—Unknown state.
! Error—An error occurred during the process of determining the state of the interface.
Error information
Packets dropped (no Number of packets dropped because of memory shortage.
memory)
Packets dropped (not IP) Number of non-IP packets dropped.
Packets dropped (not IPv4) Number of packets dropped because they failed the IPv4 version check.
Packets dropped (header too Number of packets dropped because the packet length or IP header length was too small.
small)
Memory allocation failures Number of flow record memory allocation failures. A small number reflects failures to replenish
the free list. A large number indicates the monitoring station is almost out of memory space.
Memory free failures Number of flow record memory free failures.
Memory free list failures Number of flow records received from free list that failed. Memory is nearly exhausted or too
many new flows greater than 128 KB are being created per second.
Memory warning Whether the flows have exceeded 1 million packets per second (Mpps) on a Monitoring Services
PIC or 2 Mpps on a Monitoring Services II PIC. The response can be Yes or No.
Memory overload Whether the memory has been overloaded. The response can be Yes or No.
show passive-monitoring error ! 581

Table 150: show passive-monitoring error Output Fields (2 of 2)

PPS overload Whether the PIC is receiving more packets per second than the configured threshold. The
response can be Yes or No.
BPS overload Whether the PIC is receiving more bits per second than the configured threshold. The response
can be Yes or No.
show user@host> show passive-monitoring error all

passive-monitoring error Passive monitoring interface: mo-4/0/0, Local interface index: 44
all Interface state: Monitoring
Error information
Packets dropped (no memory): 0, Packets dropped (not IP): 0
Packets dropped (not IPv4): 0, Packets dropped (header too small): 0
Memory allocation failures: 0, Memory free failures: 0
Memory free list failures: 0
Memory warning: No, Memory overload: No, PPS overload: No, BPS overload: No
Passive monitoring interface: mo-4/1/0, Local interface index: 45

Interface state: Not monitoring
Error information
Memory warning: No, Memory overload: No, PPS overload: No, BPS overload: No
582 ! show passive-monitoring error

show passive-monitoring flow
Syntax show passive-monitoring flow (* | all | mo-fpc/pic/port)
flow statistics.
Options * | all | mo-fpc/pic/port—Display passive flow statistics for monitoring interfaces.

Use a wildcard character, specify all interfaces, or provide a specific interface
name.
List of Sample Output show passive-monitoring flow all on page 584
Output Fields Table 151 lists the output fields for the show passive-monitoring flow command.
Table 151: show passive-monitoring flow Output Fields

Interface state State of the passive monitoring interface:
! Monitoring—Specified interface is actively monitoring.
! Disabled—Specified interface has been disabled from the CLI.
! Not monitoring—The interface is operational, but not monitoring. This condition occurs when
an interface first comes online, or when the interface is operational, but no logical unit has
been configured under the physical interface.
! Unknown—Unknown state.
! Error—An error occurred during the process of determining the state of the interface.
Flow information
Flow packets Number of packets received by an operational PIC.
Flow bytes Number of bytes received by an operational PIC.
Flow packets 10-second rate Number of packets per second handled by the PIC and displayed as a 10-second average.
Flow bytes 10-second rate Number of bytes per second handled by the PIC and displayed as a 10-second average.
Active flows Number of currently active flows tracked by the PIC.
Total flows Total number of flows received by an operational PIC.
Flows exported Total number of flows exported by an operational PIC.
Flows packets exported Total number of cflowd packets exported by an operational PIC.
Flows inactive timed out Total number of flows that are exported because of inactivity.
Flows active timed out Total number of long-lived flows that are exported because of an active timeout.
show passive-monitoring flow ! 583

show user@host> show passive-monitoring flow all

passive-monitoring flow Passive monitoring interface: mo-4/0/0, Local interface index: 44
all Interface state: Monitoring
Flow information
Flow packets: 6533434, Flow bytes: 653343400
Flow packets 10-second rate: 0, Flow bytes 10-second rate: 0
Active flows: 0, Total flows: 1599
Flows exported: 1599, Flows packets exported: 55
Flows inactive timed out: 1599, Flows active timed out: 0

Interface state: Monitoring
Flow information
584 ! show passive-monitoring flow

show passive-monitoring memory
Syntax show passive-monitoring memory (* | all | mo-fpc/pic/port)
monitoring memory and flow record statistics
Options * | all | mo-fpc/pic/port—Display memory and flow record statistics for monitoring
interfaces. Use a wildcard character, specify all interfaces, or provide a specific
interface name.
List of Sample Output show passive-monitoring memory all on page 585
Output Fields Table 152 lists the output fields for the show passive-monitoring memory command.
Table 152: show passive-monitoring memory Output Fields

Memory utilization
Allocation count Number of flow records allocated.
Free count Number of flow records freed.
Maximum allocated Maximum number of flow records allocated since the monitoring station booted. This
number represents the peak number of flow records allocated at a time.
Allocations per second Flow records allocated per second during the last statistics interval on the PIC.
Frees per second Flow records freed per second during the last statistics interval on the PIC.
Total memory used, Total memory free Total memory currently used and total amount of memory currently free (in bytes).
show user@host> show passive-monitoring memory all

passive-monitoring Passive monitoring interface: mo-4/0/0, Local interface index: 44
memory all Memory utilization
Allocation count: 1600, Free count: 1599, Maximum allocated: 1600
Allocations per second: 3200, Frees per second: 1438
Total memory used (in bytes): 103579176, Total memory free (in bytes):
163914184
show passive-monitoring memory ! 585

show passive-monitoring status
Syntax show passive-monitoring status (*| all | mo-fpc/pic/port)
monitoring status.
Options * | all | mo-fpc/pic/port—Display status for monitoring interfaces. Use a wildcard

character, specify all interfaces, or provide a specific interface name.
List of Sample Output show passive-monitoring status all on page 586
Output Fields Table 153 lists the output fields for the show passive-monitoring status command.
Table 153: show passive-monitoring status Output Fields
Output Field Output Field Description

Interface state Monitoring state of the passive monitoring interface.
! Monitoring—PIC is actively monitoring.
! Disabled—PIC has been disabled using the CLI.
! Not monitoring—PIC is operational, but not monitoring. This condition can happen while the
PIC is coming online, or when the PIC is operational but has no logical unit configured under
the physical interface.
! Unknown
Group index Integer that represents the monitoring group of which the PIC is a member. Group index is a
mapping from the group name to an index. It is not related to the number of monitoring groups.
Export interval Configured export interval for cflowd records, in seconds.
Export format Configured export format (only cflowd version 5 is supported).
Protocol Protocol the PIC is configured to monitor (only IPv4 is supported).
Engine type Configured engine type that is inserted in output cflowd packets.
Engine ID Configured engine ID that is inserted in output cflowd packets.
show user@host> show passive-monitoring status all

status all Interface state: Monitoring
Group index: 0
Export interval: 15 secs, Export format: cflowd v5
Protocol: IPv4, Engine type: 1, Engine ID: 1

Interface state: Disabled

Interface state: Not monitoring
586 ! show passive-monitoring status

show passive-monitoring usage
Syntax show passive-monitoring usage (* | all | mo-fpc/pic/port)
monitoring usage statistics.
Options * | all | mo-fpc/pic/port—Display usage statistics for monitoring interfaces. Use a

wildcard character, specify all interfaces, or provide a specific interface name.
List of Sample Output show passive-monitoring usage all on page 587
Output Fields Table 154 lists the output fields for the show passive-monitoring usage command.
Table 154: show passive-monitoring usage Output Fields

CPU utilization
Uptime Time, in milliseconds, that the PIC has been operational.
Interrupt time Total time that the PIC has spent processing packets since the last PIC reset.
Load (5 second) CPU load on the PIC, averaged more than 5 seconds. The number is a percentage obtained by
dividing the time spent on active tasks by the total elapsed time.
Load (1 minute) CPU load on the PIC, averaged more than 1 minute. The number is a percentage obtained by
show user@host> show passive-monitoring usage

usage all CPU utilization
Uptime: 653155 milliseconds, Interrupt time: 40213754 microseconds
Load (5 second): 20%, Load (1 minute): 17%

CPU utilization

CPU utilization
show passive-monitoring usage ! 587

show services accounting aggregation
Syntax show services accounting aggregation aggregation-type <aggregation-value>

<detail | extensive | terse>
<limit limit-value>
<name service-name>
<order (bytes | packets)>
Description Display information about the aggregated active flows being processed by the
accounting service.
Options aggregation-type <aggregation-value>—Display information for a particular

aggregation type and optional value:
! as <source-as-value | destination-as-value | input-snmp-interface-index-value |

output-snmp-interface-index-value>—Aggregate by autonomous system (AS).
! destination-prefix <destination-prefix-value | destination-as-value |

output-snmp-interface-index-value>—Aggregate by destination prefix.
! protocol-port <protocol-value | source-port-value |

destination-port-value>—Aggregate by protocol and port.
! source-destination-prefix <source-prefix-value | destination-prefix-value|

destination-as-value | source-as-value | input-snmp-interface-index-value |
output-snmp-interface-index-value>—Aggregate by source and destination
prefix.
! source-prefix <source-prefix-value | source-as-value |

input-snmp-interface-index-value>—Aggregate by source prefix.
detail | extensive | terse—(Optional) Display the specified level of output.
limit limit-value—(Optional) Limit the display output to this number of flows. The
default is no limit.
name service-name—(Optional) Display information about the aggregated flows for

a particular service name.
order (bytes | packets)—(Optional) Display the flow with the ordering of the highest
number, either by byte count or by packet count.
Additional Information For information about aggregation configuration options, see the JUNOS Services
List of Sample Output show services accounting aggregation protocol-port detail on page 589
show services accounting aggregation source-destination- prefix order packet detail on
page 590
show services accounting aggregation source-destination- prefix extensive limit on
page 590
588 ! show services accounting aggregation

Output Fields Table 155 lists the output fields for the show services accounting aggregation
Table 155: show services accounting aggregation Output Fields

Service Accounting interface Name of the service accounting interface. to be provided
Local interface index Index corresponding to the service accounting interface. to be provided
Service name Name of a service that was configured at the [edit forwarding-options to be provided
accounting] hierarchy level. The default display, (default sampling),
indicates the service was configured at the [edit forwarding-options
sampling-level] hierarchy level.
Protocol Protocol identifier and number. to be provided
Source Port Source port identifier and number. to be provided
Destination Port Destination port identifier and number. to be provided
Source-AS Source autonomous system (AS) number. to be provided
Destination-AS Destination AS number. to be provided
Source Prefix Source prefix. to be provided
Destination Prefix Destination prefix. to be provided
Source address Source address. to be provided
Source prefix length Source prefix length. to be provided
Destination address Destination address. to be provided
Destination prefix length Destination prefix length. to be provided
Input SNMP interface index SNMP index of the interface the packet came in on. to be provided
Output SNMP interface index SNMP index of the interface the packet went out on. to be provided
Start time Actual time when the packet in this aggregation was first seen. to be provided
End time Actual time when the packet in this aggregation was last seen. to be provided
Flow count Number of flows in the aggregation. to be provided
Packet count Number of packets in the aggregation. to be provided
Byte count Number of bytes in the aggregation. to be provided
show services user@host> show service accounting aggregation protocol-port detail

accounting aggregation Service Accounting interface: mo-2/0/0, Local interface index: 468
protocol-port detail Service name: (default sampling)
Protocol: 6, Source port: 20, Destination port: 20

Start time: 442349, End time: 6425714
Flow count: 194, Packet count: 4294964388, Byte count: 4294781184


show services accounting aggregation ! 589

show services user@host> show service accounting aggregation source-destination-prefix order

accounting aggregation packet detail name t2 input-snmp-interface-index 538
source-destination- Service Accounting interface: mo-2/0/0, Local interface index: 468
prefix order packet Service name: t2
Source Destination Input SNMP Output SNMP Flow Packet Byte
detail
Prefix Prefix Index Index Count Count Count
11.1.1.2/20 30.0.167.1/0 538 432 1 60 46483
11.1.1.2/20 30.0.168.1/0 538 432 1 60 5191
11.1.1.2/20 30.0.154.1/0 538 432 2 60 45504
11.1.1.2/20 30.0.76.1/0 538 432 1 60 42177
11.1.1.2/20 30.0.149.1/0 538 432 1 60 49184
11.1.1.2/20 30.0.113.1/0 538 432 2 60 48757
show services user@host> show service accounting aggregation source-destination-prefix name t2

accounting aggregation extensive limit 3
source-destination- Service Accounting interface: mo-2/0/0, Local interface index: 542
prefix extensive limit Service name: t2
Source address: 11.1.1.2, Source prefix length: 20

Destination address: 44.200.176.1, Destination prefix length: 0
Input SNMP interface index: 24, Output SNMP interface index: 26
Source-AS: 69, Destination-AS: 69
Start time: Fri Feb 21 14:16:57 2003, End time: Fri Feb 21 14:22:50 2003


590 ! show services accounting aggregation

show services accounting errors
Syntax show services accounting errors

<name (* | all | service-name)>
Description Display active flow error statistics.
Options none—Display error statistics for all services accounting instances.
name (* | all | service-name)—(Optional) Display active flow error statistics. Use a

wildcard character, specify all services, or provide a specific service name.
List of Sample Output show services accounting errors on page 592
Output Fields Table 156 lists the output fields for the show services accounting errors command.
Table 156: show services accounting errors Output Fields
Field Field Description

Service Accounting interface Name of the service accounting interface.
Service name Name of a service that was configured at the [edit forwarding-options accounting] hierarchy level.
The default display, (default sampling), indicates the service was configured at the
[edit forwarding-options sampling-level] hierarchy level.
Error Information
Packets dropped (no Number of packets dropped because of memory shortage.
memory)
Packets dropped (not IP) Number of non-IP packets dropped.
Packets dropped (not IPv4) Number of packets dropped because they failed the IPv4 version check.
Packets dropped Number of packets dropped because the packet length or IP header length was too small.
(header too small)
Memory allocation failures Number of flow record memory allocation failures. A small number reflects failures to replenish
the free list. A large number indicates the monitoring station is almost out of memory space.
Memory free failures Number of flow record memory free failures.
Memory free list failures Number of flow records received from the free list that failed. Memory is nearly exhausted, or
too many new flows greater than 128 KB are being created per second.
Memory overload Whether the memory has been overloaded. The response can be Yes or No.
PPS overload Whether the PIC is receiving more packets per second than the configured threshold. The
response can be Yes or No.
BPS overload Whether the PIC is receiving more bits per second than the configured threshold. The response
can be Yes or No.
show services accounting errors ! 591

show services user@host> show services accounting errors

accounting errors Service Accounting interface: mo-1/1/0, Local interface index: 15
Service name: (default sampling)
Error information
Memory overload: No, PPS overload: No, BPS overload: No
592 ! show services accounting errors

show services accounting flow
Syntax show services accounting flow

Description Display active flow statistics.
Options none—Display active flow statistics for all service instances.
name (* | all | service-name)—(Optional) Display services accounting active flow

statistics. Use a wildcard character, specify all services, or provide a specific
service name.
List of Sample Output show services accounting flow name on page 593
Output Fields Table 157 lists the output fields for the show services accounting flow command.
Table 157: show services accounting flow Output Fields

Service name Name of a service that was configured at the [edit forwarding-options accounting] hierarchy level.
[edit forwarding-options sampling-level] hierarchy level.
Flow Information
Flow packets Number of packets received by an operational PIC.
Flow bytes Number of bytes received by an operational PIC.
Flow packets 10-second rate Number of packets per second handled by the PIC and displayed as a 10-second average.
Flow bytes 10-second rate Number of bytes per second handled by the PIC and displayed as a 10-second average.
Active flows Number of currently active flows tracked by the PIC.
Total flows Total number of flows received by an operational PIC.
Flows exported Total number of flows exported by an operational PIC.
Flows packets exported Total number of cflowd packets exported by an operational PIC.
Flows inactive timed out Total number of flows that are exported because of inactivity.
Flows active timed out Total number of long-lived flows that are exported because of an active timeout.
show services user@host> show services accounting flow count2

accounting flow name Service Accounting interface: mo-1/1/0, Local interface index: 15
Service name: count2
Flow information
show services accounting flow ! 593

show services accounting flow-detail
Syntax show services accounting flow-detail

<filters>
<limit limit-value>
<order (bytes | packets)>
Description Display information about the flows being processed by the accounting service.
Options detail | extensive | terse—(Optional) Display the specified level of output.
filters—(Optional) Filter the display output of the currently active flow records. The
following filters query actively changing data structures and result in different
results for multiple invocations:
! destination-as—Display flow records filtered by destination autonomous

system information.
! destination-port—Display flow records filtered by destination port

information.
! destination-prefix—Display flow records filtered by destination prefix

information.
! input-snmp-interface-index—Display flow records filtered by SNMP input

interface index information.
! output-snmp-interface-index—Display flow records filtered by SNMP output

interface index information.
! proto—Display flow records filtered by protocol type.
! source-as—Display flow records filtered by source autonomous system

information.
! source-port—Display flow records filtered by source port information.
! source-prefix—Display flow records filtered by source prefix information.
! tos—Display flow records filtered by type of service classification.
limit limit-value—(Optional) Limit the display output to the specified number of

flows. The default is no limit.
name (* | all | service-name)—(Optional) Display information about the flows being

processed. Use a wildcard character, specify all services, or provide a specific
services name.
order (bytes | packets)—(Optional) Display the flow with the ordering of the highest
number, either by byte count or by packet count.
594 ! show services accounting flow-detail

Additional Information When no PIC is active, or when no route record has been downloaded from the
PIC, this command reports no flows, even though packets are being sampled. This
command displays information about two concurrent sessions only. If a third
session is attempted, the command pauses with no output until one of the previous
sessions is completed.
List of Sample Output show services accounting flow-detail name service-name extensive on page 596
show services accounting flow-detail limit order bytes on page 596
show services accounting flow-detail source-port on page 596
Output Fields Table 158 lists the output fields for the show services accounting flow-detail
Table 158: show services accounting flow-detail Output Fields
Field Name Field Description Output Level

Service Accounting interface Name of the service accounting interface. All levels
Service name Name of a service that was configured at the [edit forwarding-options All levels
accounting] hierarchy level. The default display, (default sampling), indicates
the service was configured at the [edit forwarding-options sampling]
hierarchy level.
Local interface index Index counter of the local interface. All levels
TOS Type-of-service value from the IP header. extensive
Input SNMP interface index SNMP index of the interface on which the packet came in. extensive
Output SNMP interface index SNMP index of the interface on which the packet went out. extensive
Source-AS Source AS number. extensive
Destination-AS Destination AS number. extensive
Protocol Name of the protocol used for the packet flow from the corresponding All levels
source address.
Input interface Interface on which the packets were received. All levels
Output interface Interface on which the packets were transmitted. All levels
TCP flags Number of TCP header flags detected in the flow. extensive
Source address Address where the flow originated. All levels
Source port Name of the source port. All levels
Source prefix length Source prefix length. extensive
Destination address Address where the flow is sent. All levels
Destination prefix length Destination prefix length. extensive
Destination port Name of the destination port. All levels
Start time Actual time when the packet in this aggregation was first seen. detail extensive
End time Actual time when the packet in this aggregation was last seen. detail extensive
Packet count Number of packets in the aggregation. All levels
Byte count Number of bytes in the aggregation. All levels
Time since last active timeout Amount of time elapsed since the last active timeout, in the format None specified
hh:mm:ss.
show services accounting flow-detail ! 595

Table 158: show services accounting flow-detail Output Fields

Packet count for last active Number of packets in the aggregation since the last active timeout. None specified
timeout
Byte count for last active timeout Number of bytes in the aggregation since the last active timeout. None specified
show services user@host> show services accounting flow-detail name cf-2 extensive
accounting flow-detail Service Accounting interface: mo-0/2/0, Local interface index: 145
name service-name Service name: cf-2
extensive TOS: 0, Protocol: udp(17), TCP flags: 0
Source address: 10.10.10.1, Source prefix length: 0, Destination address:
20.20.20.20,
Destination prefix length: 0, Source port: 1173, Destination port: 69
Input SNMP interface index: 65, Output SNMP interface index: 0, Source-AS: 0,
Destination-AS: 0
Start time: 62425, End time: 635265, Packet count: 165845, Byte count: 9453165
show services The output of the following command is displayed over 141 columns, not the
accounting flow-detail standard 80 columns. In this sample, the output is split into three sections, with
limit order bytes ellipses (...) indicating where the sections are continued.
user@host> show services accounting flow-detail limit 5 order bytes

Service Accounting interface: mo-2/0/0, Local interface index: 356
Input Source Source Output
Protocol interface address port interface...
icmp(1) ge-2/3/0.0 11.1.1.2 0 .local.
icmp(1) ge-2/3/0.0 11.1.1.2 0 .local.
icmp(1) ge-2/3/0.0 11.1.1.2 0 .local.
icmp(1) ge-2/3/0.0 11.1.1.2 0 .local.
icmp(1) ge-2/3/0.0 11.1.1.2 0 .local.
Destination Destination Packet Byte Time since last

address port count count active timeout...
51.88.128.2 0 16 12148 Not applicable
52.78.144.2 0 16 15229 Not applicable
51.147.192.2 0 16 13296 Not applicable
51.136.16.2 0 16 13924 Not applicable
50.214.48.2 0 16 13428 Not applicable
Packet count for Byte count for

last active timeout last active timeout
Not applicable Not applicable
show services user@host> show services accounting flow-detail name cf-2 detail source-port
accounting flow-detail 1173
source-port Service Accounting interface: mo-0/2/0, Local interface index: 145
Service name: cf-2
Protocol: udp(17), Source address: 10.10.10.1, Source port: 1173, Destination
address:
20.20.20.20, Destination port: 69
Start time: 62425, End time: 811115, Packet count: 142438, Byte count: 8118966
596 ! show services accounting flow-detail

show services accounting memory
Syntax show services accounting memory
Description Display memory and flow record statistics.
List of Sample Output show services accounting memory on page 597
Output Fields Table 159 lists the output fields for the show services accounting memory command.
Table 159: show services accounting memory Output Fields

Memory Utilization
Allocation count Number of flow records allocated.
Free count Number of flow records freed.
Maximum allocated Maximum number of flow records allocated since the monitoring station booted. This number
represents the peak number of flow records allocated at a time.
Allocations per second Flow records allocated per second during the last statistics interval on the PIC.
Frees per second Flow records freed per second during the last statistics interval on the PIC.
Total memory used Total amount of memory currently used (in bytes).
Total memory free Total amount of memory currently free (in bytes).
show services user@host> show services accounting memory

accounting memory Service Accounting interface: mo-2/0/0, Local interface index: 468
Memory utilization
Allocation count: 437340, Free count: 433699, Maximum allocated: 6782
Allocations per second: 3366, Frees per second: 6412
Total memory used (in bytes): 133460320,
Total memory free (in bytes): 133918352
show services accounting memory ! 597

show services accounting packet-size-distribution
Syntax show services accounting packet-size-distribution

Description Display a packet size distribution histogram.
Options none—Display a packet size distribution histogram of all accounting services.
name (* | all | service-name)—(Optional) Display a packet size distribution

histogram. Use a wildcard character, specify all services, or provide a specific
services name.
List of Sample Output show services accounting packet-size-distribution name service-name on page 598
Output Fields Table 160 lists the output fields for the show services accounting
packet-size-distribution command. Output fields are listed in the approximate order
in which they appear.
Table 160: show services accounting packet-size-distribution Output Fields

Service Accounting Name of the service accounting interface.
interface
Service name Name of a service that was configured at the [edit-forwarding-options accounting] hierarchy level. The default
display, (default sampling), indicates the service was configured at the [edit-forwarding-options sampling-level]
hierarchy level.
Local interface Index counter of the local interface.
index
Range start Smallest packet length (in bytes) to count.
Range end Largest packet length (in bytes) to count.
Number of packets Count of packets detected in the size between Range start and Range end.
Percentage Percentage of the total number of packets that are in this size range.
packets
show services user@host> show services accounting packet-size-distribution name test3

accounting Service Accounting interface: mo-0/2/0, Local interface index: 163
packet-size-distribution Service name: test3
name service-name Range start Range end Number of packets Percentage packets
32 64 2924 100
598 ! show services accounting packet-size-distribution

show services accounting status
Syntax show services accounting status

Description Display available Physical Interface Cards (PICs) for accounting services.
Options none—Display available PICs for all accounting services.
name (* | all | service-name)—(Optional) Display available PICs. Use a wildcard

character, specify all services, or provide a specific services name.
List of Sample Output show services accounting status name service-name on page 599
Output Fields Table 161 lists the output fields for the show services accounting status command.
Table 161: show services accounting status Output Fields
Field Field Description

Service name Name of a service that was configured at the [edit-forwarding-options accounting] hierarchy level.
[edit-forwarding-options sampling-level] hierarchy level.
Interface state Accounting state of the passive monitoring interface.
! Accounting—PIC is actively accounting.
! Disabled—PIC has been disabled from the CLI.
! Not accounting—PIC is up but not accounting. This can happen while the PIC is coming online,
or when the PIC is up but has no logical unit configured under the physical interface.
! Unknown
Group index Integer that represents the monitoring group of which the PIC is a member. Group index is a
mapping from the group name to an index. It is not related to the number of monitoring groups.
Export interval (in seconds) Configured export interval for cflowd records, in seconds.
Export format Configured export format (only cflowd version 5 is supported).
Protocol Protocol the PIC is configured to monitor (only IPv4 is supported).
Engine type Configured engine type that is inserted in output cflowd packets.
Engine ID Configured engine ID that is inserted in output cflowd packets.
show services user@host> show services accounting status name count1

accounting status name Service Accounting interface: mo-2/0/0, Local interface index: 468
service-name Service name: count1
Interface state: Accounting
Group index: 0
Export interval (in seconds): 60, Export format: cflowd v8
Protocol: IPv4, Engine type: 55, Engine ID: 5
show services accounting status ! 599

show services accounting usage
Syntax show services accounting usage

<name service-name>
Description Display the CPU usage of PIC used for active flow monitoring.
Options none—Display CPU usage for all service names.
name service-name—(Optional) Display CPU usage for the specified service name.
Additional Information When no route record has been downloaded from the PIC, this command reports
no flows, even though packets are being sampled.
List of Sample Output show services accounting usage on page 600
Output Fields Table 162 lists the output fields for the show services accounting usage command.
Table 162: show services accounting usage Output Fields

Service name Name of a service that was configured at the [edit-forwarding-options accounting] hierarchy level.
[edit-forwarding-options sampling-level] hierarchy level.
Uptime Time that the PIC has been operational (in milliseconds).
Interrupt time Total time that the PIC has spent processing packets since the last PIC reset (in microseconds).
Load (5 second) CPU load on the PIC, averaged more than 5 seconds. The number is a percentage obtained by
Load (1 minute) CPU load on the PIC, averaged more than 1 minute. The number is a percentage obtained by
show services user@host> show services accounting usage

accounting usage Service Accounting interface: mo-1/1/0, Local interface index: 15
CPU utilization
600 ! show services accounting usage

show services dynamic-flow-capture content-destination
Syntax show services dynamic-flow-capture content-destination capture-group group-name

destination-identifier identifier
<terse>
Description (M320 routers and T-series routing platforms only) Display information about the
content destination that receives packets from the dynamic flow capture (DFC)
interface.
Options capture-group group-name—Capture-group identifier.
destination-identifier identifier—Content destination identifier.
terse—(Optional) Display summary information.
List of Sample Output show services dynamic-flow-capture content-destination on page 601
Output Fields Table 163 lists the output fields for the show services dynamic-flow-capture
content-destination command. Output fields are listed in the approximate order in
which they appear.
Table 163: show services dynamic-flow-capture content-destination Output Fields
Output Field Output Field Description Level of Output

Capture group Name of the capture group. to be provided
Content destination Name of the content destination. to be provided
Criteria Number of criteria specified. to be provided
Bandwidth Bandwidth used by the matched traffic. to be provided
Matched packets Number of matched packets sent to the content to be provided
destination.
Matched bytes Number of matched bytes sent to the content to be provided
destination.
Congestion notifications Number of notification messages sent. to be provided
show services user@host> show services dynamic-flow-capture content-destination capture-group

dynamic-flow-capture g1 destination-identifier cd1 terse
content-destination Capture group: g1, Content destination: cd1, Criteria: 0, Bandwidth: 0,
Matched packets: 0, Matched bytes: 0, Congestion notifications: 0
show services dynamic-flow-capture content-destination ! 601

show services dynamic-flow-capture control-source
Syntax show services dynamic-flow-capture control-source capture-group group-name

control-source identifier
<detail | terse>
Description (M320 routers and T-series routing platform only) Display information about the
control source that makes dynamic flow capture requests to the dynamic flow
capture interface.
Options capture-group group-name—Capture group identifier.
control-source identifier—Control source identifier.
detail | terse—(Optional) Display the specified level of output.
List of Sample Output show services dynamic-flow-capture control-source on page 603
Output Fields Table 164 lists the output fields for the show services dynamic-flow-capture
control-source command. Output fields are listed in the approximate order in which
they appear.
Table 164: show services dynamic flow capture control-source Output Fields

Capture group Name of the capture group. to be provided
Control source Name of the control source. to be provided
Criteria added, Criteria add failed Number of criteria added or added and failed. to be provided
Active criteria Number of active criteria. to be provided
Static criteria, Dynamic criteria Number of static or dynamic criteria. to be provided
Control protocol requests Total number of control protocol requests. to be provided
Requests Number of Add, Delete, List, Refresh, and No-op control protocol to be provided
requests.
Failed Number of Add, Delete, List, Refresh, and No-op failed control protocol to be provided
requests.
Add request rate Rate of add requests. to be provided
Add request peak rate Peak rate of add requests. to be provided
Bandwidth across all criteria Bandwidth used by all the requests. to be provided
Total notifications Total number of notifications sent and the number of notifications by to be provided
category: Restart, Rollover, Timeout, Congestion, Congestion delete, and
Dups (duplicates) dropped.
Criteria deleted Total number of criteria deleted and the number of deleted criteria by to be provided
category: Timeout idle, Timeout total, Packets, and Bytes.
Sequence number Sequence number. to be provided
602 ! show services dynamic-flow-capture control-source

show services user@host> show services dynamic-flow-capture control-source capture-group g1

dynamic-flow-capture source-identifier cs2 detail
control-source Capture group: g1, Control source: cs2
Criteria added: 72, Criteria add failed: 60
Active criteria: 72
Static criteria: 0, Dynamic criteria: 72
Control protocol requests: 132
Add Delete List Refresh No-op
Requests 132 0 0 0 0
Failed 60 0 0 0 0
Add request rate: 0
Add request peak rate: 18
Bandwidth across all criteria: 0
Total notifications: 0
Restart: 0, Rollover: 0, No-op: 0, Timeout: 0, Congestion: 0,
Congestion delete: 0, Dups dropped: 0
Criteria deleted: 0
Timeout idle: 0, Timeout total: 0, Packets: 0, Bytes: 0
Sequence number: 0
show services dynamic-flow-capture control-source ! 603

show services dynamic-flow-capture statistics
Syntax show services dynamic-flow-capture statistics capture-group group-name
Description (M320 routers and T-series routing platform only) Display statistics information
about the capture group specified for dynamic flow capture.
Options capture-group group-name—Capture group identifier.
List of Sample Output show services dynamic-flow-capture statistics on page 605
Output Fields Table 165 lists the output fields for the show services dynamic-flow-capture statistics
Table 165: show services dynamic-flow-capture statistics Output Fields

Input Incoming dynamic flow capture packet statistics:
! Control protocol packets—Number of control protocol packets
received.
! Captured data packets—Number of data packets captured.
! Control IRI packets—Number of control IRI packets received.
Control protocol drops Control protocol packets dropped for the following reasons:
! Not IP packets—Dropped packets were not IP packets.
! Not UDP packets—Dropped packets were not User Datagram
Protocol (UDP) packets.
! Invalid destination address—Dropped packets had invalid destination
addresses.
! No memory—Packets dropped because of insufficient memory.
! Unauthorized control source—Packets dropped because the control
source was not authenticated.
! Bad request—Packets dropped because the request was invalid.
! Unknown control source—Packets dropped because the control
source was not known.
! Not DTCP—Dropped packets did not adhere to the control protocol
format.
! Bad cmdline—Packets dropped because of a version mismatch.
! Other—Packets dropped for other reasons or undetermined causes.
604 ! show services dynamic-flow-capture statistics

Table 165: show services dynamic-flow-capture statistics Output Fields

Input drops Incoming dynamic flow capture packets dropped for the following
reasons:
! Unknown packets—Packets dropped because the packet type was not
recognized.
! Captured data not IPv4—Packets dropped because they were not
IPv4 packets.
! Captured data too small—Packets dropped because they were
smaller than the size reported in their headers.
! Captured data drops—Data packets dropped because of
undetermined causes.
! Captured data not matched—Packets dropped because they did not
match filter criteria.
Output Outgoing dynamic flow capture packet statistics:
! Control protocol packets—Number of control protocol packets sent.
! Captured data packets—Number of captured data packets sent.
Output drops Outgoing packets dropped:

! Control protocol drops—Number of control protocol packets dropped.
! Captured data drops—Number of captured data packets dropped.
show services user@host> show services dynamic-flow-capture statistics capture-group g1

dynamic-flow-capture Input:
statistics Control protocol packets: 0, Captured data packets: 0,
Control IRI packets: 2844
Control protocol drops:
Not IP packets: 0, Not UDP packets: 0, Invalid destination address: 0,
No memory: 0, Unauthorized control source: 0, Bad request: 0,
Unknown control source: 0, Not DTCP: 0, Bad cmdline: 0, Other: 0
Input drops:
Unknown packets: 0, Captured data not IPv4: 0, Captured data too small: 0,
Captured data drops: 0, Captured data not matched: 0
Output:
Control protocol packets: 0, Captured data packets: 0
Output drops:
Control protocol drops: 0, Captured data drops: 0
show services dynamic-flow-capture statistics ! 605

show services flow-collector file interface
Syntax show services flow-collector file interface (all | cp-fpc/pic/port)

Description (M40e, M160, and M320 routers and T-series routing platform only) Display
information about flow collector files.
Options all | cp-fpc/pic/port—Display file information for all configured flow collector
interfaces or for the specified interface.
Additional Information No entries are displayed for files that have been successfully transferred.
List of Sample Output show services flow-collector file interface extensive on page 607
Output Fields Table 166 lists the output fields for the show services flow-collector file interface
Table 166: show services flow-collector file interface Output Fields

Filename Name of the file created on the flow collector interface. All levels
Flows Total number of collector flows for which records are present in the file. none specified
Throughput Throughput statistics: extensive
! Flow records—Number of flow records in the file.
! per second—Average number of flow records per second.
! peak per second—Peak number of flow records per second.
! Uncompressed bytes—Total file size before compression.
! per second—Average number of uncompressed bytes per second.
! peak per second—Peak number of uncompressed bytes per second.
! Compressed bytes—Total file size after compression.
! per second—Average number of compressed bytes per second.
! peak per second—Peak number of compressed bytes per second.
606 ! show services flow-collector file interface

Table 166: show services flow-collector file interface Output Fields

Status File statistics: All levels
! Compressed blocks—(extensive output only) Data blocks in the file that have
been compressed. The file is exported only when the compressed block
count and block count become the same.
! Block count—(extensive output only) Total number of data blocks in the file.
! State—Processing state of the file.
! Active—The flow collector interface is writing to the file.
! Export 1—File export is in progress to the primary server.
! Export 2—File export is in progress to the secondary server.
! Wait—File is pending export.
! Transfer attempts—Number of attempts made to transfer the file. If the file is
successfully transferred in the first attempt, this field is 0.
show services user@host> show services flow-collector file interface cp-3/2/0 extensive
flow-collector file Filename: cFlowd-py69Ni69-0-20031112_014301-so_3_0_0_0.bcp.bi.gz
interface extensive Throughput:
Flow records: 188365, per second: 238, peak per second: 287
Uncompressed bytes: 21267756, per second: 27007, peak per second: 32526
Compressed bytes: 2965643, per second: 0, peak per second: 22999
Status:
Compressed blocks: 156, Block count: 156
State: Active, Transfer attempts: 0
show services flow-collector file interface ! 607

show services flow-collector input interface
Syntax show services flow-collector input interface (all | cp-fpc/pic/port)

Description (M40e, M160, and M320 routers and T-series routing platform only) Display the
number of packets received by collector interfaces from monitoring interfaces.
Options all | cp-fpc/pic/port—Display packets received by all configured flow collector

interfaces or by the specified interface.
List of Sample Output show services flow-collector input interface on page 608
Output Fields Table 167 lists the output fields for the show services flow-collector input interface
Table 167: show services flow-collector input interface Output Fields

Interface Name of the monitoring interface. to be provided
Packets Number of packets traveling from the monitoring interface to be provided
to the flow collector interface.
Bytes Number of bytes traveling from the monitoring interface to to be provided
the flow collector interface.
show services user@host> show services flow-collector input interface cp-3/2/0

flow-collector input Interface Packets Bytes
interface mo-3/0/0.0 21706 32328568
mo-3/1/0.0 21706 32329096
608 ! show services flow-collector input interface

show services flow-collector interface
Syntax show services flow-collector interface (all | cp-fpc/pic/port)

Description (M40e, M160, and M320 routers and T-series routing platform only) Display overall
statistics for the flow collector application.
Options all | cp-fpc/pic/port—Display statistics for flow collector applications on all

interfaces or for the specified interface.
List of Sample Output show services flow-collector interface extensive on page 612
Output Fields Table 168 lists the output fields for the show services flow-collector interface
Table 168: show services flow-collector interface Output Fields

Flow collector interface Name of the flow collector interface. All levels
Interface state Collecting flow state for the interface. All levels
Packets Total number of packets received. none specified
Flows Uncompressed Bytes Total uncompressed data size for all files created on this PIC. none specified
Compressed Bytes Total compressed data size for all files created on this PIC. none specified
FTP bytes Total number of bytes transferred to the FTP server, including those dropped none specified
during transfer.
FTP files Total number of FTP transfers attempted by the server. none specified
Memory Bytes used on the PIC and bytes free. detail extensive
Input Incoming flow collector packet statistics: detail extensive
! Packets—Number of packets received on the unit.
! per second—Average number of packets per second.
! peak per second—Peak number of packets per second.
! Bytes—Number of bytes received on the unit.
! per second—Average number of bytes per second.
! peak per second—Peak number of bytes per second.
! Flow records processed—Number of records in the flow collector packets
that were processed by the flow-collector interface.
! per second—Average number of flow records processed per second.
! peak per second—Peak number of flow records per second.
show services flow-collector interface ! 609


Allocation Data block statistics: extensive
! Blocks allocated—Total number of data blocks (containing flow records)
allocated to the files created on this PIC.
! per second—Average number of blocks allocated per second.
! peak per second—Peak number of blocks allocated per second.
! Blocks freed—Total number of data blocks freed.
! per second—Average number of blocks freed per second.
! peak per second—Peak number of blocks freed per second.
! Blocks unavailable—Total number of data block requests denied, typically
because of a memory shortage.
! per second—Average number of blocks unavailable per second.
! peak per second—Peak number of blocks unavailable per second.
Files File statistics, incremented since the PIC last booted: detail extensive
! Files created—Total number of files created on this PIC.
! Files exported—Number of files successfully created and exported.
! Files destroyed—(extensive output only) Number of files successfully
exported and files dropped by the flow collection interface.
Throughput Throughput statistics: detail extensive
! Uncompressed bytes—Total uncompressed data size for all files created on
this PIC.
! Compressed bytes—Total compressed data size for all files created on this
PIC.
Packet drops Number of packets dropped for the following causes: extensive
! Not IP—Packets dropped because they are not IP packets.
! Not IPv4—Packets dropped because they are not IP version 4 packets.
! Too small—Packets dropped because each packet was smaller than the size
reported in its header.
! Fragments—Packets dropped because of fragmentation. Fragments are not
reassembled.
! ICMP—Packets dropped because they are not ICMP packets.
! TCP—Packets dropped because they are not TCP packets.
! Unknown—Packets dropped because of undetermined causes.
! Not JUNOS flow—Packets dropped because they are not interpreted by the
JUNOS software. The JUNOS software interprets only IPv4, UDP cflowd
version 5 packets.
File transfer File transfer statistics: detail extensive
! FTP bytes—Total number of bytes transferred to the FTP server, including
those dropped during transfer.
! FTP files—Total number of FTP transfers attempted by the server.
! FTP failure—Total number of FTP failures encountered by the server.
610 ! show services flow-collector interface


Allocation Data block statistics: extensive
! Blocks allocated—Total number of data blocks (containing flow records)
allocated to the files created on this PIC.
! per second—Average number of blocks allocated per second.
! peak per second—Peak number of blocks allocated per second.
! Blocks freed—Total number of data blocks freed.
! per second—Average number of blocks freed per second.
! peak per second—Peak number of blocks freed per second.
! Blocks unavailable—Total number of data block requests denied, typically
because of a memory shortage.
! per second—Average number of blocks unavailable per second.
! peak per second—Peak number of blocks unavailable per second.
Files File statistics, incremented since the PIC last booted: detail extensive
! Files created—Total number of files created on this PIC.
! Files exported—Number of files successfully created and exported.
! Files destroyed—(extensive output only) Number of files successfully
exported and files dropped by the flow collection interface.
Throughput Throughput statistics: detail extensive
! Uncompressed bytes—Total uncompressed data size for all files created on
this PIC.
! Compressed bytes—Total compressed data size for all files created on this
PIC.
Packet drops Number of packets dropped for the following causes: extensive
! Not IP—Packets dropped because they are not IP packets.
! Not IPv4—Packets dropped because they are not IP version 4 packets.
! Too small—Packets dropped because each packet was smaller than the size
reported in its header.
! Fragments—Packets dropped because of fragmentation. Fragments are not
reassembled.
! ICMP—Packets dropped because they are not ICMP packets.
! TCP—Packets dropped because they are not TCP packets.
! Unknown—Packets dropped because of undetermined causes.
! Not JUNOS flow—Packets dropped because they are not interpreted by the
JUNOS software. The JUNOS software interprets only IPv4, UDP cflowd
version 5 packets.
File transfer File transfer statistics: detail extensive
! FTP bytes—Total number of bytes transferred to the FTP server, including
those dropped during transfer.
! FTP files—Total number of FTP transfers attempted by the server.
! FTP failure—Total number of FTP failures encountered by the server.


Flow collector interface Physical interface acting as a flow collector. detail
Export channel Export channel 0 is unit 0. Export channel 1 is unit 1. Flow receive channel is detail extensive
unit 2. Server status statistics are the following:
! Current server—Current FTP server being used. Value is Primary or
Secondary.
! Primary server state—State of the server:
! OK—Server is operating without problems.
! FTP error—Server encountered an FTP protocol error while sending files.
! Network error—Flow-collector interface has errors when contacting the
primary FTP server.
! Unknown—First file transfer has not been sent to the primary server.
! Secondary server state—State of the server:
! OK—Server is operating without errors.
! FTP error—Server encountered an FTP protocol error while sending files.
! Network error—Flow-collector interface has errors when contacting the
secondary FTP server.
! Unknown—First file transfer has not been sent to the secondary server.
! Not configured—Secondary server is not configured.
show services user@host> show services flow-collector interface cp-5/2/0 extensive

flow-collector interface Flow collector interface: cp-5/2/0
extensive Interface state: Collecting flows
Memory:
Used: 458311860, Free: 40810008
Input:
Packets: 922629, per second: 2069, peak per second: 3266
Bytes: 1376559252, per second: 3096940, peak per second: 4880051
Flow records processed: 25764957, per second: 42564, peak per second: 98124
Allocation:
Blocks allocated: 20862, per second: 31, peak per second: 72
Blocks freed: 17161, per second: 40, peak per second: 202
Blocks unavailable: 58786, per second: 652, peak per second: 1120
Files:
Files created: 52, per second: 0, peak per second: 0
Files exported: 42, per second: 0, peak per second: 0
Files destroyed: 42, per second: 0, peak per second: 0
Throughput:
Uncompressed bytes: 2592070401, per second: 7297307,
peak per second: 8630023
Compressed bytes: 659600068, per second: 1858458, peak per second: 2198471
Packet drops:
No memory: 58786, Not IP: 0
Not IPv4: 0, Too small: 0
Fragments: 0, ICMP: 0
TCP: 0, Unknown: 0
Not JUNOS flow: 0
File Transfer:
FTP bytes: 585981447, per second: 1313320, peak per second: 4857798
FTP files: 48, per second: 0, peak per second: 0
FTP failure: 8
Export channel: 0
Current server: Primary
Primary server state: FTP error, Secondary server state: Not configured

Export channel: 1
Current server: Primary
Primary server state: OK, Secondary server state: Not configured


Chapter 18
Intrusion Detection Service Operational
Mode Commands
monitor and troubleshoot the intrusion detection service (IDS). Commands are
Table 169: IDS Operational Mode Commands
Task Command
Clear (set to zero) IDS events and event clear services ids on page 616
information.
Clear the IDS events for a particular address that clear services ids destination-table on page 617
might be under attack.
Clear the IDS attack source and destination clear services ids pair-table on page 618
address pair table.
Clear all IDS events for addresses that are clear services ids source-table on page 619
suspected attackers.
Display IDS event information. show services ids on page 620
NOTE: IDS is supported on the adaptive services interface on the following routing
platforms:
IDS is also supported on the redundant adaptive services interface (rspnumber) on

M-series and T-series routing platforms.
NOTE: For information about how to configure IDS, see the JUNOS Services
! 615
clear services ids
Syntax clear services ids

Description Clear intrusion detection service (IDS) events.
Options none—Clear all IDS events for all adaptive services interfaces for all service sets,
and clear and reset IDS.
interface interface-name—(Optional) On M-series and T-series routing platforms, the

interface-name can be sp-fpc/pic/port or rspnumber. On the J-series routing
platform, the interface-name is sp-pim/0/port.
service-set service-set-name—(Optional) Clear all IDS events for a particular service

set.
List of Sample Output clear services ids on page 616
request.
clear services ids user@host> clear services ids
616 ! clear services ids

Chapter 18: Intrusion Detection Service Operational Mode Commands
clear services ids destination-table
Syntax clear services ids destination-table

<destination-prefix destination-prefix-name>
Description Clear the intrusion detection service (IDS) events for a particular address that might
be under attack.
Options none—Clear the attack destination address table.
destination-prefix destination-prefix-name—(Optional) Clear the attack destination

table for a particular destination prefix.
interface interface-name—(Optional) Clear the attack destination table for a

particular interface. On M-series and T-series routing platforms, the
service-set service-set-name—(Optional) Clear the attack destination table for a

particular service set.
LIst of Sample Output clear services ids destination-table on page 617
request.
clear services ids user@host> clear services ids destination-table

destination-table
clear services ids destination-table ! 617

clear services ids pair-table
Syntax clear services ids pair-table

<source-prefix source-prefix-name>
Description Clear the intrusion detection service (IDS) attack source and destination address
pair table.
Options none—Clear the attack source and destination address pair table.
destination-prefix destination-prefix-name—(Optional) Clear the attack source and

destination address pair table for a particular destination prefix.
interface interface-name—(Optional) Clear the attack destination table for a

service-set service-set-name—Optional) Clear the attack source and destination

address pair table for a particular service set.
source-prefix source-prefix-name—(Optional) Clear the attack source and destination

address pair table for a particular source prefix.
List of Sample Output clear services ids pair-table on page 618
request.
clear services ids user@host> clear services ids pair-table

pair-table
618 ! clear services ids pair-table

clear services ids source-table
Syntax clear services ids source-table

Description Clear all intrusion detection service (IDS) events for addresses that are suspected
attackers.
Options none—Clear the attack source address table.

service-set service-set-name—(Optional) Clear the attack source address table for a

particular service set.
source-prefix source-prefix-name—(Optional) Clear the attack source address table for

a particular source prefix.
LIst of Sample Output clear services ids source-table on page 619
request.
clear services ids user@host> clear services ids source-table

source-table
clear services ids source-table ! 619

show services ids
Syntax show services ids (destination-table | pair-table | source-table)

<brief | extensive | terse>
<limit number>
<order (anomalies | bytes | flows | packets)>
<threshold number>
Description Display information about intrusion detection service (IDS) events. All events
gathered by IDS are reported as anomalies. For example, events such as create
forward or watch flow, FTP passive, and FTP active are genuinely allowed by the
stateful firewall but are logged as anomalies to track the rates and number for these
events.
Options destination-table—Display information for an address under possible attack.
pair-table—Display information for a particular suspected attack source and

destination address pair.
source-table—Display information for an address that is a suspected attacker.
brief | extensive | terse—(Optional) Display the specified level of output.
destination-prefix destination-prefix-name—(Optional) Display information for a

particular destination prefix.

limit number—(Optional) Maximum number of entries to display. By default, all

tables display the top 32 entries sorted by the number of events for the criteria
chosen. To display additional entries, configure the limit option to set up to
256 entries.
order—(Optional) Display events according to one of the following table-ordering

criteria. The default is anomalies.
! anomalies—Display information for particular anomalies.
! bytes—Order output by number of bytes received.
! flows—Order output by number of flows.
! packets—Order output by number of packets received.
service-set service-set-name—(Optional) Display information about a particular

service set.
620 ! show services ids

source-prefix source-prefix-name—(Optional) Display information about a particular

source prefix.
threshold number—(Optional) Limit the display to events with this number of

anomalies, bytes, flows, or packets, whichever criterion you specify for order.
For example, to display all events with more than 100 flows, specify order flows
and threshold 100.
List of Sample Output show services ids destination-table on page 623

show services ids destination-table extensive on page 623
show services ids destination-table extensive order anomalies on page 624
show services ids pair-table extensive limit on page 624
show services ids source-table extensive limit on page 625
Output Fields Table 170 lists the output fields for the show services ids command. Output fields
Table 170: show services ids Output Fields

Interface Name of an adaptive services interface. All levels
Service set Name of a service set. Individual empty service sets are not displayed, All levels
but if no service set has any flows, a flow table header is printed for
each service set.
Sorting order Primary mode to display information: Anomalies, Bytes, Flows, or All levels
Packets.
Source address Name of the source address. All levels
Dest address Name of the destination address. All levels
Time Total time the information has been in the table. All levels
Flags Flags can be Forced, F (terse output only), SYNcookie, S (terse output All levels
only), Forced+SYNcookie, and F+S (terse output only). The SYNcookie
flag is visible only in the destination table.
Application Configured application, such as FTP or Telnet. All levels
Bytes Total number of bytes sent from the source to the destination address, All levels
in thousands (k) or millions (m).
Packets Total number of packets sent from the source to the destination All levels
address, in thousands (k) or millions (m).
Flows Total number of flows of packets sent from the source to the destination All levels
address, in thousands (k) or millions (m).
Anomalies Total number of packets in the anomaly table, in thousands (k) or All levels
millions (m).
show services ids ! 621


Anomaly description One or more of the following types of anomalies. For more information, extensive
see the detailed descriptions in the stateful firewall section of the JUNOS
System Log Messages Reference.
! First packet of TCP session not SYN
! ICMP echo request dropped, because sequence number duplicated
! ICMP echo reply dropped. No matching sequence number
! ICMP echo request dropped. Too many echo requests without echo reply
! ICMP header length check failed
! ICMP packet length greater than 64K
! IP fragment assembly timeout
! IP fragment length error
! IP fragment overlap
! IP packet length greater than 64K
! IP packet too short
! IP packet with broadcast destination address
! IP packet with checksum error
! IP packet with incorrect length
! IP packet with TTL equal to 0
! IP packet with version other than 4
! Land attack (IP src address = dest address)
! No matching SFW rule; attempting to create discard flow
! Number of open sessions exceeds IDS limit; packet dropped
! Packet rate exceeds IDS limit; packet dropped
! Session creation rate exceeds IDS limit; packet dropped
! SFW application message too long
! SFW discard packet contains non-configured IP option types
! SFW drop packet because of discard flow
! SFW dropped TCP watch packet
! SFW rules request FTP active mode data packets to be accepted;
attempting to create forward flow
! SFW rules request FTP passive mode data packets to be accepted;
attempting to create forward flow
! SFW rules request packet to be accepted; attempting to create forward
or watch flow
! SFW rules request packet to be discarded; attempting to create discard
flow
! SFW rules request packet to be rejected; attempting to create reject flow
! SFW discard flow requires packet to be dropped
! SFW SYN defense
! Smurf attack (ping to IP broadcast address)
! TCP FIN/RST or SYN/(URG|FIN|RST) flags set
! TCP header length check failed
! TCP port scan (port not in LISTEN state)
! TCP seq number zero and FIN/PSH/RST flags set
! TCP seq number zero and no flags set
! TCP source or destination port zero
! TCP SYN flood attack
! UDP header length check failed
! UDP port scan (port not in LISTEN state)
! UDP source or destination port zero


Count Number of times that a particular anomaly occurred, in thousands (k) or extensive
millions (M).
Rate (eps) Anomaly events per second. The IDS subsystem attempts to maintain a extensive
weighted average of rates, which might not reflect the exact incoming
rate of attack at low rates. However, at high rates exceeding 160 events
per second, the rates generally match.
Elapsed Time since the same type of event last occurred. extensive
Total IDS table entries Number of entries in the IDS table. This number is not necessarily the All levels
sum of all entries displayed.
Total failed IDS table entry insertions Number of IDS entries not allowed into the table because the table was All levels
full
Total number of events (closed flows Total number of events since the system was started or since the show All levels
and anomalies detected) ids services command was executed.
show services ids user@host> show services ids destination-table

destination-table Interface: sp-1/3/0, Service set: null-sfw
Sorting order: Packets
Source address Dest address Time Flags Application
any -> 10.58.255.146 36m12s SYN cookie

Bytes: 35.0 m, Packets: 822.0 k, Flows: 274.0 k, Anomalies: 2251.0 k
Total IDS table entries: 87

Total failed IDS table entry insertions 0
Total number of events (closed flows and anomalies detected): 2606018
show services ids user@host> show services ids destination-table extensive

destination-table Interface: sp-1/3/0, Service set: null-sfw
extensive Sorting order: Packets
any -> 10.58.255.146 35m52s SYN cookie

Anomalies Count Rate(eps) Elapsed
First packet of TCP session not SYN 160.0 k 0 14s
TCP source or destination port zero 634.0 k 154.6 3m37s
UDP source or destination port zero 633.0 k 170.0 3m37s
ICMP header length check failed 2875 0.9 3m37s
IP fragment assembly timeout 820.0 k 12.8 3m18s
UDP header length check failed 385 0.5 3m53s
TCP header length check failed 383 0.5 3m53s
Total IDS table entries:

87
Total failed IDS table entry insertions
0
Total number of events (closed flows and anomalies detected):
2598063

show services ids user@host> show services ids destination-table extensive order anomalies
destination-table Interface: sp-0/2/0, Service set: ss1
extensive order IDS sorting order: Anomalies
anomalies Source address Dest address Time Flags Application
15.1.1.1 -> 15.99.1.1 1m28s junos-ftp
Bytes: 1065, Packets: 18, Flows: 1, Anomalies: 10
Anomaly description Count Rate(eps) Elapsed
creating forward or watch flow 1 15.6 1m28s
Number of open sessions exceeds IDS limit 9 0.8 18s
Total IDS table entries: 3

Total failed IDS table entry insertions 0
Total number of events (closed flows and anomalies): 11
show services ids user@host> show services ids pair-table extensive limit 3
pair-table extensive Interface: sp-1/3/0, Service set: null-sfw
limit Sorting order: Packets
10.58.255.18 -> 10.58.255.146 38m41s SYN cookie

First packet of TCP session not SYN 160.0 k 0.1 25s
10.58.255.23 -> 10.58.255.146 18m48s SYN cookie

Bytes: 104.0 m, Packets: 421.0 k, Flows: 230, Anomalies: 124.0 k
10.58.255.25 -> 10.58.255.146 18m48s SYN cookie


87
0
2659291

show services ids user@host> show services ids source-table extensive limit 3
source-table extensive Interface: sp-1/3/0, Service set: null-sfw
limit Sorting order: Packets
10.58.255.18 -> any 40m 0s SYN cookie
First packet of TCP session not SYN 160.0 k 0.0 40s
10.58.255.30 -> any 20m 7s SYN cookie

10.58.255.17 -> any 20m10s SYN cookie

TCP source or destination port zero 38.0 k 55. 7m45s
87
0
2691423
Interface: sp-1/3/0, Service set: blue
NAT pool Address Port Ports in use
d2-pool 10.59.16.100-10.59.16.100 4000-4002 1


Chapter 19
IP Security Operational Mode
Commands
Table 171 on page 628 summarizes the command-line interface (CLI) commands
you can use to monitor and troubleshoot IP Security (IPSec) services. In the table,
the commands are grouped by the interfaces on which they are supported:
! Adaptive Services Interfaces:
! J-series routing platform—sp-pim/0/slot.
! M-series and T-series routing platforms—sp-fpc/pic/port. IPSec is also

supported on the redundant adaptive services interface (rspnumber).
! Encryption Interfaces (M-series and T-series routing platforms

only)—es-fpc/pic/port.
In the remainder of this chapter, the commands are listed in alphabetical order.
! 627
Table 171: IPSec Services Operational Mode Commands (1 of 2)

Adaptive Delete certificate authority (CA) digital clear security pki ca-certificate on page 632
Services certificates from the routing platform.
Interface
Delete manually generated local digital clear security pki certificate-request on page 633
certificate requests from the routing platform.
Delete all CRLs from the routing platform clear security pki crl on page 634
Delete local digital certificates, certificate clear security pki local-certificate on page 635
requests, and the corresponding public/private
key pairs from the routing platform.
Delete local and remote certificates from the clear services ipsec-vpn certificates on page 636
IPSec configuration memory cache.
Clear IPSec statistics. clear services ipsec-vpn ipsec statistics on page 638
Clear either Internet Key Exchange (IKE) or clear services ipsec-vpn ipsec security-associations on page 639
IPSec VPN security associations.
Request a digital certificate from a CA online by request security pki ca-certificate enroll on page 643
using the Simple Certificate Enrollment Protocol
(SCEP).
Manually load a CA digital certificate from a request security pki ca-certificate load on page 644
specified location.
Manually install a CRL on the routing platform. request security pki crl load on page 645
Manually generate a local digital certificate request security pki generate-certificate-request on page 646
request in the Public-Key Cryptography
Standards #10 (PKCS-10) format.
Generate a Public Key Infrastructure (PKI) public request security pki generate-key-pair on page 648
and private key pair for a local digital certificate.
Request a CA to enroll and install a local digital request security pki local-certificate enroll on page 649
certificate online by using the SCEP.
Manually load a local digital certificate from a request security pki local-certificate load on page 651
specified location.
Switch between the primary and backup IPSec request services ipsec-vpn ipsec switch tunnel on page 653
VPN tunnels.
Display information about certificate authority show security pki ca-certificate on page 665
(CA) digital certificates installed in the routing
platform.
Display information about manually generated show security pki certificate-request on page 668
local digital certificate requests that are stored in
the routing platform.
Display information about the local digital show security pki local-certificate on page 672
certificates and the corresponding public keys
installed in the routing platform.
Display local and remote certificates installed in show services ipsec-vpn certificates on page 674
the IPSec configuration memory cache that are
used for the IKE negotiation.
Display IKE VPN security associations for service show services ipsec-vpn ike security-associations on page 677
sets.
Display IPSec VPN security associations for show services ipsec-vpn ipsec security-associations on page 680
service sets.
Display IPSec VPN statistics for service sets. show services ipsec-vpn ipsec statistics on page 683
628 !
Chapter 19: IP Security Operational Mode Commands
Table 171: IPSec Services Operational Mode Commands (2 of 2)

Encryption Clear Internet Key Exchange (IKE) security clear ike security-associations on page 630
Interface associations.
Clear IPSec security associations. clear ipsec security-associations on page 631
Switch between primary and backup interfaces request ipsec switch on page 652
and tunnels.
Obtain a public key certificate from a request security certificate (signed) on page 640
certification authority. request security certificate (unsigned) on page 641
Generate a public and private key pair. request security key-pair on page 642
Add a certificate provided by the Juniper request system certificate add on page 654
Networks certificate authority.
Display IKE security association information. show ike security-associations on page 655
Display the IPSec certificate database. show ipsec certificates on page 659
Display primary and backup interface and show ipsec redundancy on page 661
tunnel information.
Display IPSec security association information. show ipsec security-associations on page 662
Display installed certificates signed by the show system certificate on page 686
Juniper Networks certificate authority.
NOTE: For information about how to configure IPSec services, see the JUNOS
Services Interfaces Configuration Guide for adaptive services interfaces and the
JUNOS System Basics Configuration Guide for encryption interfaces.
! 629
clear ike security-associations
Syntax clear ike security-associations

<destination-ip-address>
Description (Encryption interface on M-series and T-series routing platforms only) Clear
information about the current Internet Key Exchange (IKE) security association.
This command is valid for dynamic security associations only.
Options none—Clear all IKE security associations.
destination-ip-address—(Optional) Clear the IKE security association at the specified

destination address.
See Also show ike security-associations on page 655
List of Sample Output clear ike security-associations on page 630
request.
clear ike user@host> clear ike security-associations

security-associations
630 ! clear ike security-associations

clear ipsec security-associations
Syntax clear ipsec security-associations

<sa-name>
Description (Encryption interface on M-series and T-series routing platforms only) Clear
information about the current IP Security (IPSec) security association. This
command is valid for dynamic security associations only. When this command is
issued, a new security association is created.
Options none—Clear all IPSec security associations.
sa-name—(Optional) Clear the specified security association.
See Also show ipsec security-associations on page 662
List of Sample Output clear ipsec security-associations on page 631
Output Fields See the show ipsec security-associations on page 662 for an explanation of output
fields.
clear ipsec Output from the show ipsec security-associations detail command is displayed
security-associations before and after the clear ipsec security-associations command is issued:
user@host> show ipsec security-associations detail

Security association: sa-dynamic, Interface family: Up
Direction: inbound, SPI: 242379418, State: Installed

Mode: tunnel, Type: dynamic
Protocol: ESP, Authentication: hmac-md5-96, Encryption: None
Soft lifetime: Expires in 22979 seconds
Hard lifetime: Expires in 28739 seconds
Direction: outbound, SPI: 368592771, State: Installed

user@host> clear ipsec security-associations
user@host> show ipsec security-associations detail

Security association: sa-dynamic, Interface family: Up
Direction: inbound, SPI: 1031597683, State: Installed

Direction: outbound, SPI: 1618419878, State: Installed

clear ipsec security-associations ! 631

clear security pki ca-certificate
Syntax clear security pki ca-certificate (all | ca-profile ca-profile-name)
Description (Adaptive services interfaces only) Delete certificate authority (CA) digital
certificates from the routing platform.
Options all—Delete all CA digital certificates from the routing platform.
ca-profile ca-profile-name—Delete the specified CA profile.
See Also request security pki ca-certificate enroll on page 643

request security pki ca-certificate load on page 644
show security pki ca-certificate on page 665
List of Sample Output clear security pki ca-certificate all on page 632
request.
clear security pki user@host> clear security pki ca-certificate all

ca-certificate all
632 ! clear security pki ca-certificate

clear security pki certificate-request
Syntax clear security pki certificate-request (all | certificate-id certificate-id-name)
Description (Adaptive services interfaces only) Delete manually generated local digital certificate
requests from the routing platform.
Options all—Delete all local digital certificate requests from the routing platform.
certificate-id certificate-id-name—Delete the specified local digital certificate and

corresponding public/private key pair.
See Also show security pki certificate-request on page 668
List of Sample Output clear security pki certificate-request all on page 633
request.
clear security pki user@host> clear security pki certificate-request all

certificate-request all
clear security pki certificate-request ! 633

clear security pki crl
Syntax clear security pki crl (all | ca-profile ca-profile-name)
Release Information Command introduced in JUNOS 8.1
Description (Adaptive services interfaces only) Delete certificate revocation lists (CRLs) from the
routing platform.
Options all—Delete all CRLs from the routing platform.
ca-profile ca-profile-name—Delete CRL associated with the specified CA profile.
List of Sample Output clear security pki crl ca-profile all on page 634
request.
clear security pki crl user@host> clear security pki crl ca-profile all
ca-profile all
634 ! clear security pki crl

clear security pki local-certificate
Syntax clear security pki local-certificate (all | certificate-id certificate-id-name)
Description (Adaptive services interfaces only) Delete local digital certificates, certificate
requests, and the corresponding public/private key pairs from the routing platform.
Options all—Delete all local digital certificates, certificate requests, and the corresponding
public/private key pairs from the routing platform.
certificate-id certificate-id-name—Delete the specified local digital certificate and

corresponding public/private key pair.
See Also request security pki local-certificate enroll on page 649

show security pki local-certificate on page 672
List of Sample Output clear security pki local-certificate all on page 635
request.
clear security pki user@host> clear security pki local-certificate all

local-certificate all
clear security pki local-certificate ! 635

clear services ipsec-vpn certificates
Syntax clear services ipsec-vpn certificates (all | service-set service-set)

<certificate-cache-entry number>
Description (Adaptive services interfaces only) Delete digital certificates from the IPSec
configuration memory cache.
Options all—Delete digital certificates for all service sets.
service-set service-set—Delete digital certificates for the specified service set.
certificate-cache-entry number—(Optional) Delete digital certificates matching a

specified cache entry number. To view the certificate cache entry numbers,
issue the show services ipsec-vpn certificates command.
See Also show services ipsec-vpn certificates on page 674
List of Sample Output clear services ipsec-vpn certificates all on page 636
request.
clear services ipsec-vpn user@host> clear services ipsec-vpn certificates all

certificates all
636 ! clear services ipsec-vpn certificates

clear services ipsec-vpn ike security-associations
Syntax clear services ipsec-vpn ike security-associations

<peer-address-name>
Description (Adaptive services interface only) Clear Internet Key Exchange (IKE) security
associations.
Options peer-address-name—(Optional) Clear only the security association specified by the

peer address.
See Also show services ipsec-vpn ike security-associations on page 677
List of Sample Output clear services ipsec-vpn ipsec security-associations on page 639
request.
clear services ipsec-vpn user@host> clear services ipsec-vpn ike security-associations

ike
clear services ipsec-vpn ike security-associations ! 637

clear services ipsec-vpn ipsec statistics
Syntax clear services ipsec-vpn ipsec statistics

<remote-gateway address>
Description (Adaptive services interface only) Clear IP Security (IPSec) statistics.
Options remote-gateway address—(Optional) Clear statistics for the specified remote system.
service-set service-set-name—(Optional) Clear statistics for the specified service set.
See Also show services ipsec-vpn ipsec statistics on page 683
List of Sample Output clear services ipsec-vpn ipsec statistics on page 638
request.
clear services ipsec-vpn user@host> clear services ipsec-vpn ipsec statistics

ipsec statistics
638 ! clear services ipsec-vpn ipsec statistics

clear services ipsec-vpn ipsec security-associations
Syntax clear services ipsec-vpn security-associations

<peer-address-name>
Description (Adaptive services interface only) Clear IP Security (IPSec) security associations.
Options peer-address-name—(Optional) Clear only the security association specified by the

peer address.
See Also show services ipsec-vpn ipsec security-associations on page 680
List of Sample Output clear services ipsec-vpn ipsec security-associations on page 639
request.
clear services ipsec-vpn user@host> clear services ipsec-vpn ipsec security-associations

ipsec
clear services ipsec-vpn ipsec security-associations ! 639

request security certificate (signed)
Syntax request security certificate enroll filename filename subject subject

alternative-subject alternative-subject certification-authority certification-authority
encoding (binary | pem) key-file key-file domain-name domain-name
Description (Encryption interface on M-series and T-series routing platforms only) Obtain a
signed certificate from a certificate authority (CA). The signed certificate validates
the CA and the owner of the certificate. The results are saved in a specified file to
the /var/etc/ikecert directory.
Options filename filename—File that stores the certificate.
subject subject—Distinguished name (dn), which consists of a set of

components—for example, an organization (o), an organization unit (ou), a
country (c), and a locality (l).
alternative-subject alternative-subject—Tunnel source address.
certification-authority certification-authority—Name of the certificate authority profile

in the configuration.
encoding (binary | pem)—File format used for the certificate. The format can be a
binary file or privacy-enhanced mail (PEM), an ASCII base64-encoded format.
The default format is binary.
key-file key-file—File containing a local private key.
domain-name domain-name—Fully qualified domain name.
List of Sample Output request security certificate (signed) on page 640
request.
request security user@host> request security certificate enroll filename host.crt subject
certificate (signed) c=uk,o=london alternative-subject 10.50.1.4 certification-authority verisign
key-file host-1.prv domain-name host.juniper.net
CA name: juniper.net CA file: ca_verisign
local pub/private key pair: host.prv
subject: c=uk,o=london domain name: host.juniper.net
alternative subject: 10.50.1.4
Encoding: binary
Certificate enrollment has started. To view the status of your enrollment, check
the key management process (kmd) log file at /var/log/kmd. <--------------
640 ! request security certificate (signed)

request security certificate (unsigned)
Syntax request security certificate enroll filename filename ca-file ca-file ca-name ca-name
encoding (binary | perm) url url
Description (Encryption interface on M-series and T-series routing platforms only) Obtain a
certificate from a certificate authority (CA). The results are saved in a specified file
to the /var/etc/ikecert directory.
Options filename filename—File that stores the public key certificate.
ca-file ca-file—Name of the certificate authority profile in the configuration.
ca-name ca-name—Name of the certificate authority.
encoding (binary | pem)—File format used for the certificate. The format can be a
binary file or privacy-enhanced mail (PEM), an ASCII base64-encoded format.
The default value is binary.
url url—Certificate authority URL.
List of Sample Output request security certificate (unsigned) on page 641
request.
request security user@host> request security certificate enroll filename ca_verisign ca-file
certificate (unsigned) verisign ca-name juniper.net url
http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe
URL: http://pilotonsiteipsec.verisign.com/cgi-bin/pkiclient.exe CA name:
juniper.net CA file: verisign Encoding: binary
the key management process (kmd) log file at /var/log/kmd. <--------------
request security certificate (unsigned) ! 641

request security key-pair
Syntax request security key-pair filename

<size key-size>
<type (rsa | dsa)>
Description (Encryption interface on M-series and T-series routing platforms only) Generate a
public and private key pair for a digital certificate.
Options filename—Name of a file in which to store the key pair.
size key-size—(Optional) Key size, in bits. The key size can be 512, 1024, or 2048.
The default value is 1024.
type—(Optional) Algorithm used to encrypt the key:
! rsa—RSA algorithm. This is the default.
! dsa—Digital signature algorithm with Secure Hash Algorithm (SHA).
List of Sample Output request security key-pair on page 642
request.
request security user@host> request security key-pair security-key-file

key-pair
642 ! request security key-pair

request security pki ca-certificate enroll
Syntax request security pki ca-certificate enroll ca-profile ca-profile-name
Description (Adaptive services interfaces only) Request a digital certificate from a certificate
authority (CA) online by using the Simple Certificate Enrollment Protocol (SCEP).
Options ca-profile ca-profile-name—CA profile name.
See Also clear security pki ca-certificate on page 632

List of Sample Output request security pki ca-certificate enroll on page 643
request.
request security pki user@host> request security pki ca-certificate enroll ca-profile entrust
ca-certificate enroll Received following certificates:
Certificate: C=us, O=juniper, CN=First Officer
Fingerprint: 46:71:15:34:f0:a6:41:76:65:81:33:4f:68:47:c4:df:78:b8:e3:3f
Certificate: C=us, O=juniper, CN=First Officer
Fingerprint: bc:78:87:9b:a7:91:13:20:71:db:ac:b5:56:71:42:ad:1a:b6:46:17
Certificate: C=us, O=juniper
Fingerprint: 00:8e:6f:58:dd:68:bf:25:0a:e3:f9:17:70:d6:61:f3:53:a7:79:10
Do you want to load the above CA certificate ? [yes,no] (no) yes
request security pki ca-certificate enroll ! 643

request security pki ca-certificate load
Syntax request security pki ca-certificate load ca-profile ca-profile-name

filename path/filename
Description (Adaptive services interfaces only) Manually load a certificate authority (CA) digital
certificate from a specified location.
Options ca-profile ca-profile-name—Load the specified CA profile.
filename path/filename—Directory location and filename of the

CA digital certificate.
See Also clear security pki ca-certificate on page 632

List of Sample Output request security pki ca-certificate load on page 644
request.
request security pki user@host> request security pki ca-certificate load ca-profile ca-private
ca-certificate load filename pki-file
644 ! request security pki ca-certificate load

request security pki crl load
Syntax request security pki crl load ca-profile ca-profile-name filename path/filename
Description (Adaptive services interfaces only) Manually install a certificate revocation list (CRL)
on the routing platform from a specified location.
Options ca-profile ca-profile-name—Load the specified certificate authority (CA) profile.
filename path/filename—Directory location and filename of the CRL.
List of Sample Output request security pki crl load on page 645
request.
request security pki crl user@host> request security pki crl load ca-profile ca-private filename pki-file
load
request security pki crl load ! 645

request security pki generate-certificate-request
Syntax request security pki generate-certificate-request certificate-id certificate-id-name

domain-name domain-name subject subject-distinguished-name
<filename path | terminal>
<ip-address ip-address>
<validity-end-time end-time>
<validity-start-time start-time>
Description (Adaptive services interfaces only) Manually generate a local digital certificate
request in the Public-Key Cryptography Standards #10 (PKCS-10) format.
Options certificate-id certificate-id-name—Name of the local digital certificate and the

public/private key pair.
domain-name domain-name—Fully qualified domain name (FQDN). The FQDN

provides the identity of the certificate owner for Internet Key Exchange (IKE)
negotiations and provides an alternative to the subject name.
subject subject-distinguished-name—Distinguished name format that contains the

common name, department, company name, state, and country in the
following format: CN, OU, O, ST, C
! CN—Common name
! OU—Organizational unit name
! O—Organization name
! ST—State
! C—Country
filename (path | terminal)—(Optional) Location where the local digital certificate

request should be placed or the login terminal.
ip-address ip-address—(Optional) IP address of the routing platform.
validity-end-time end-time—(Optional) End time that the digital certificate is valid in

the format: YYYY-MO-DD.HH:MN:SS. If you do not specify an end time value, the
end time is assigned by the default CA policy.
! YYYY—Year (for example, 2005)
! MO—Month (01 through 12)
! DD—Day (01 through 31)
! HH—Hours (00 through 23)
! MN—Minutes (00 through 59)
! SS—Seconds (00 through 59)
646 ! request security pki generate-certificate-request

validity-start-time start-time—(Optional) Start time that the digital certificate is valid,

in the format: YYYY-MO-DD.HH:MN:SS. If you do not specify the start time value,
the current time is used.
See Also clear security pki certificate-request on page 633

show security pki certificate-request on page 668
List of Sample Output request security pki generate-certificate-request on page 647
request.
request security pki user@host> request security pki generate-certificate-request

generate-certificate-req certificate-id local-entrust2 domain-name router2.juniper.net
uest filename entrust-req2 subject cn=router2.juniper.net
Generated certificate request

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Fingerprint:
0d:90:b8:d2:56:74:fc:84:59:62:b9:78:71:9c:e4:9c:54:ba:16:97 (sha1)
1b:08:d4:f7:90:f1:c4:39:08:c9:de:76:00:86:62:b8 (md5)
request security pki generate-certificate-request ! 647

request security pki generate-key-pair
Syntax request security pki generate-key-pair certificate-id certificate-id-name

<size (512 | 1024 | 2048)>
Description (Adaptive services interfaces only) Generate a Public Key Infrastructure (PKI) public
and private key pair for a local digital certificate.
Options certificate-id certificate-id-name—Name of the local digital certificate and the

size—(Optional) Key pair size. The key pair size can be 512, 1024, or 2048 bits.
List of Sample Output request security pki generate-key-pair on page 648
request.
request security pki user@host> request security pki generate-key-pair certificate-id billy size 2048
generate-key-pair Generated key pair billy, key size 2048 bits
648 ! request security pki generate-key-pair

request security pki local-certificate enroll
Syntax request security pki local-certificate enroll ca-profile ca-profile-name

certificate-id certificate-id-name challenge-password password
domain-name domain-name subject subject-distinguished-name
<ip-address ip-address>
<validity-end-time end-time>
<validity-start-time start-time>
Description (Adaptive services interfaces only) Request that a CA enroll and install a local digital
certificate online by using the Simple Certificate Enrollment Protocol (SCEP).
Options ca-profile ca-profile-name—CA profile name.
certificate-id certificate-id-name—Name of the local digital certificate and the

challenge-password password—Password set by the administrator and normally

obtained from the SCEP enrollment web page of the CA. The password is
16 characters in length.
domain-name domain-name—Fully qualified domain name (FQDN).

The FQDN provides the identity of the certificate owner for Internet Key
Exchange (IKE) negotiations and provides an alternative to the subject name.
subject subject-distinguished-name—Distinguished name format that contains the

common name, department, company name, state, and country in the
following format: CN, OU, O, ST, C.
! CN—Common name
! OU—Organizational unit name
! O—Organization name
! ST—State
! C—Country
ip-address ip-address—(Optional) IP address of the routing platform.
request security pki local-certificate enroll ! 649

validity-end-time end-time—(Optional) Endpoint in time when the digital certificate

becomes invalid. You must configure the time in the following format:
YYYY-MO-DD.HH:MN:SS. If you do not specify an end time value, the end time is
assigned by the default CA policy.
validity-start-time start-time—(Optional) Start time that the digital certificate is valid,

in the following format: YYYY-MO-DD.HH:MN:SS. If you do not specify the start
time value, the current time is used.
See Also show security pki local-certificate on page 672
List of Sample Output request security pki local-certificate enroll on page 650
request.
request security pki user@host> request security pki local-certificate enroll certificate-id
local-certificate enroll r3-entrust-scep ca-profile entrust domain-name router3.juniper.net subject
"CN=router3,OU=Engineering,O=juniper,C=US" challenge-password 123
the key management process (kmd) log file at /var/log/kmd. Please save the
challenge-password for revoking this certificate in future. Note that this
password is not stored on the router.
650 ! request security pki local-certificate enroll

request security pki local-certificate load
Syntax request security pki local-certificate load certificate-id certificate-id-name filename path
Description (Adaptive services interfaces only) Manually load a local digital certificate from a
specified location.
Options certificate-id certificate-id-name—Name of the public/private key pair mapped to the

local digital certificate.
filename path/filename—Directory location and filename of the

local digital certificate provided by the CA.
List of Sample Output request security pki local-certificate load on page 651
See Also show security pki local-certificate on page 672
request.
request security pki user@host> request security pki local-certificate load filename
local-certificate load /tmp/router2-cert certificate-id local-entrust2
Local certificate local-entrust2 loaded successfully
request security pki local-certificate load ! 651

request ipsec switch
Syntax request ipsec switch (interface <es-fpc/pic/port> | security-associations <sa-name>)
Description (Encryption interface on M-series and T-series routing platforms only) Manually
switch from the primary to the backup encryption services interface, or switch from
the primary to the backup IP Security (IPSec) tunnel.
Options interface <es-fpc/pic/port>—Switch to the backup encryption interface.
security-associations <sa-name>—Switch to the backup tunnel.
See Also show ipsec redundancy on page 661
List of Sample Output request ipsec switch on page 652
request.
request ipsec switch user@host> request ipsec switch security-associations sa-private
652 ! request ipsec switch

request services ipsec-vpn ipsec switch tunnel
Syntax request services ipsec-vpn ipsec switch tunnel local-gateway address remote-gateway
address
<routing-instance instance-name>

routing-instance option added in Release 8.1.
Description (Adaptive services interface only) Manually switch between primary and backup IP
Security (IPSec) tunnels.
Options local-gateway address—Gateway address of the local system.
remote-gateway address—Gateway address of the remote system.
routing-instance instance-name—(Optional) VRF instance associated with local

gateway address.
See Also show services ipsec-vpn ipsec security-associations on page 680
List of Sample Output request services ipsec-vpn ipsec switch tunnel on page 653
request.
request services user@host> request services ipsec-vpn ipsec switch tunnel local-gateway 10.1.1.1
ipsec-vpn ipsec switch remote gateway 10.100.10.1
tunnel
request services ipsec-vpn ipsec switch tunnel ! 653

request system certificate add
Syntax request system certificate add (filename | terminal)
Description (Encryption interface on M-series and T-series routing platforms only) Add a
certificate provided by the Juniper Networks certificate authority (CA).
Options filename—Filename (URL, local, or remote).
terminal—Use login terminal.
List of Sample Output request system certificate add on page 654
request.
request system user@host> request system certificate add terminal

certificate add
654 ! request system certificate add

show ike security-associations
Syntax show ike security-associations

<brief | detail>
<peer-address>
Description (Encryption interface on M-series and T-series routing platforms only) Display
information about Internet Key Exchange (IKE) security associations.
Options none—Display standard information about all IKE security associations.
peer-address—(Optional) Display IKE security associations for the specified peer

address.
See Also clear ike security-associations on page 630
List of Sample Output show ike security-associations on page 658

show ike security-associations detail on page 658
Output Fields Table 172 lists the output fields for the show ike security-associations command.
Table 172: show ike security-associations Output Fields (1 of 3)

IKE peer Remote end of the IKE negotiation. detail
Role Part played in the IKE session. The router triggering the IKE negotiation is detail
the initiator, and the router accepting the first IKE exchange packets is the
responder.
Remote Address Responder’s address. none specified
State State of the IKE security association: none specified
! Matured—The IKE security association is established.
! Not matured—The IKE security association is in the process of
negotiation.
Initiator cookie When the IKE negotiation is triggered, a random number is sent to the All levels
remote node.
Responder cookie The remote node generates its own random number and sends it back to All levels
the initiator as a verification that the packets were received.
Of the numerous security services available, protection against denial of
service (DoS) is one of the most difficult to address. A “cookie” or
anticlogging token (ACT) is aimed at protecting the computing resources
from attack without spending excessive CPU resources to determine the
cookie’s authenticity. An exchange prior to CPU-intensive public key
operations can thwart some DoS attempts (such as simple flooding with
invalid IP source addresses).
show ike security-associations ! 655


Exchange type Specifies the number of messages in an IKE exchange, and the payload All Levels
types that are contained in each message. Each exchange type provides a
particular set of security services, such as anonymity of the participants,
perfect forward secrecy of the keying material, and authentication of the
participants. JUNOS software supports two types of exchanges:
! Main—The exchange is done with six messages. Main encrypts the
payload, protecting the identity of the neighbor.
! Aggressive—The exchange is done with three messages. Aggressive does
not encrypt the payload, leaving the identity of the neighbor unprotected.
Authentication method Type of authentication determines which payloads are exchanged and detail
when they are exchanged. The JUNOS software supports only pre-shared
keys.
Local Prefix and port number of the local end. detail
Remote Prefix and port number of the remote end. detail
Lifetime Number of seconds remaining until the IKE security association expires. detail
Algorithms Header for the IKE algorithms output. detail
! Authentication—Type of authentication algorithm used: md5 or sha1.
! Encryption—Type of encryption algorithm used. It can be des-cbc,
3des-cbc, or None.
! Pseudo random function—Function that generates highly unpredictable
random numbers. It can be hmac-md5 or hmac-sha1.
Traffic statistics Number of bytes and packets received and transmitted on the IKE security detail
association.
! Input bytes, Output bytes—Number of bytes received and transmitted on
the IKE security association.
! Input packets, Output packets—Number of packets received and
transmitted on the IKE security association.
Flags Notification to the key management process of the status of the IKE detail
negotiation. It can be one of the following:
! caller notification sent—Caller program notified about the completion of
the IKE negotiation.
! waiting for done—Negotiation is done. The library is waiting for the
remote end retransmission timers to expire.
! waiting for remove—Negotiation has failed. The library is waiting for the
remote end retransmission timers to expire before removing this
negotiation.
! waiting for policy manager—Negotiation is waiting for a response from the
policy manager.
IPSec security associates Number of IPSec security associations created and deleted with this IKE detail
security association.
656 ! show ike security-associations


keys.
! Authentication—Type of authentication algorithm used: md5 or sha1.
! Encryption—Type of encryption algorithm used. It can be des-cbc,
3des-cbc, or None.
! Pseudo random function—Function that generates highly unpredictable
association.
negotiation.
policy manager.
show ike security-associations ! 657


Phase 2 negotiations in Number of phase 2 IKE negotiations in progress and status information: detail
progress
! Negotiation type—Type of phase 2 negotiation. The JUNOS software
currently supports quick mode.
! Message ID—Unique identifier for a phase 2 negotiation.
! Local identity—Identity of the local phase 2 negotiation. The format is
id-type-name(proto-name:port-number,[0..id-data-len]=iddata-presentation).
! Remote identity—Identity of the remote phase 2 negotiation. The format
is id-type-name(proto-name:port-number,[0..id-data-len]=iddata-presentation).
! Flags—Notification to the key management process of the status of the
IKE negotiation. It can be one of the following:
! caller notification sent—Caller program notified about the completion
of the IKE negotiation.
negotiation.
! waiting for policy manager—Negotiation is waiting for a response from
the policy manager.
show ike user@host> show ike security-associations

security-associations Remote Address State Initiator cookie Responder cookie Exchange type
4.4.4.4 Matured 93870456fa000011 723a20713700003e Main
show ike user@host> show ike security-associations detail

security-associations IKE peer 4.4.4.4
detail Role: Initiator, State: Matured
Initiator cookie: cf22bd81a7000001, Responder cookie: fe83795c2800002e
Exchange type: Main, Authentication method: Pre-shared-keys
Local: 4.4.4.5:500, Remote: 4.4.4.4:500
Lifetime: Expires in 187 seconds
Algorithms:
Authentication : md5
Encryption : 3des-cbc
Pseudo random function: hmac-md5
Traffic statistics:
Input bytes : 1000
Output bytes : 1280
Input packets: 5
Output packets: 9
Flags: Caller notification sent
IPsec security associations: 2 created, 0 deleted
Phase 2 negotiations in progress: 1
Negotiation type: Quick mode, Role: Initiator, Message ID: 3582889153

Local: 4.4.4.5:500, Remote: 4.4.4.4:500
Local identity: ipv4_subnet(tcp:80,[0..7]=10.1.1.0/24)
Remote identity: ipv4_subnet(tcp:100,[0..7]=10.1.2.0/24)
Flags: Caller notification sent, Waiting for done
658 ! show ike security-associations

show ipsec certificates
Syntax show ipsec certificates

<brief | detail>
<crl crl-name | serial-number>
information about the IPSec certificate database.
Options none—Display standard information about all of the entries in the IPSec certificate
database.
crl crl-name | serial-number—(Optional) Display information about the entries on the

certificate revocation list (CRL) or for the specified serial number. A CRL is a
timestamped list identifying revoked certificates. The CRL is signed by a
certificate authority (CA) or CRL issuer and made freely available in a public
repository. Each revoked certificate is identified in a CRL by its certificate serial
number.
See Also clear ipsec security-associations on page 631
List of Sample Output show ipsec certificates detail on page 660
Output Fields Table 173 lists the output fields for the show ipsec certificates command. Output
Table 173: show ipsec certificates Output Fields (1 of 2)

Database Display information about the IPSec certificate database. All levels
! Total entries—Number of database entries, including entries that are not
trusted or that are in the process of being deleted.
! Active entries—Number of database entries, excluding entries that are
marked as deleted.
! Locked entries—Number of statically configured database entries that
cannot expire, such as CA certificates that are root or trusted.
Subject Distinguished name for the certificate for C, O, CN, as described in All levels
RFC 3280, Internet x.509 Public Key Infrastructure Certificate and Certificate
Revocation List (CRL) Profile.
ID Identification number of the database entry. ID is generated by the internal All levels
certificate database.
References Reference number the certificate manager has for the particular entry. detail
Serial Unique serial number assigned to each certificate by the CA. All levels
show ipsec certificates ! 659


Flags State of the certificate. detail
! Trusted—Passed validity checks.
! Not trusted—Failed validity checks.
! Root—Entry is locked and may have been learned through IKE or a
locally configured CA certificate.
! Non-root—Entry is not locked.
! Crl-issuer—Entity issues CRLs.
! Non-crl-issuer—Entity does not issue CRLs.
Validity period starts Start time that the certificate is valid, in the format yyyy mon dd, hh:mm:ss detail
GMT.
Validity period ends End time that the certificate is valid, in the format yyyy mon dd, hh:mm:ss detail
GMT.
Alternative name Auxiliary identity for the certificate. It can be dns-name, email-address, detail
information ip-address, or uri (uniform resource identifier).
Issuer Information about the entity that has signed and issued the CRL as detail
described in RFC 2459, Internet X.509 Public Key Infrastructure Certificate
and CRL Profile.
show ipsec certificates user@host> show ipsec certificates detail

detail Database: Total entries: 3 Active entries: 4 Locked entries: 1
Subject: C=us, O=x
ID: 5, References: 0, Serial: 22314868
Flags: Trusted Non-root Crl-issuer
Validity period starts: 2003 Mar 1st, 01:20:42 GMT
Validity period ends: 2003 Mar 31st, 01:50:42 GMT
Alternative name information:
IP address: 10.20.210.1
Issuer: C=FI, O=Company-ABC, CN=Company ABC class 2
Subject: C=us, O=x

Flags: Trusted Non-root Crl-issuer
Validity period starts: 2003 Mar 1st, 01:21:45 GMT
Validity period ends: 2003 Mar 31st, 01:51:45 GMT
IP address: 10.20.210.20
Subject: C=FI, O=SSH Company-ABC, CN=Company ABC class 2

Flags: Trusted Root Non-crl-issuer
Validity period starts: 2001 Aug 1st, 07:08:32 GMT
Validity period ends: 2004 Aug 1st, 07:08:32 GMT
Email address: [email protected]
660 ! show ipsec certificates

show ipsec redundancy
Syntax show ipsec redundancy (interface <es-fpc/pic/port> | security association <sa-name>)
information about IPSec redundancy.
Options interface <es-fpc/pic/port>—Display information about all encryption interfaces, or

optionally, about a particular encryption interface.
security association <sa-name>—Display information about all remote tunnels, or

optionally, about a particular remote tunnel.
See Also request ipsec switch on page 652
List of Sample Output show ipsec redundancy interface on page 661

show ipsec redundancy security-associations on page 661
Output Fields Table 174 lists the output fields for the show ipsec redundancy command. Output
Table 174: show ipsec redundancy Output Fields

Failure counter Number of times a PIC switched between primary and backup
interfaces, or the number of times the tunnel switched between the
primary and remote peers since the software has been activated.
Primary interface Name of the interface configured to be the primary interface.
Backup interface Name of the interface configured to be the backup interface.
State State of the primary or backup interface can be Active, Offline, or
Standby. Both ES PICs are initialized to Offline. For primary and
remote peers, State can be Active or Standby. Both peers are in a
state of Standby by default (there is not yet a connection between
the two peers).
Security association Name of the security association.
Local IP Local IP address.
Primary remote IP IP address of the configured primary remote peer.
Backup remote IP IP address of the configured backup remote peer.
show ipsec redundancy user@host> show ipsec redundancy interface

interface Failure counter: 0
Primary interface: es-1/3/0, State: Active
Backup interface : es-1/1/0, State: Standby
show ipsec redundancy user@host> show ipsec redundancy security-associations sa-dynamic

security-associations Security association: sa-dynamic, Failure counter: 0
Local IP: 4.4.4.4
Primary remote IP: 4.4.4.5, State: Standby
Backup remote IP : 3.3.3.3, State: Standby
show ipsec redundancy ! 661

show ipsec security-associations
Syntax show ipsec security-associations

<brief | detail>
<sa-name>
information about the IPSec security associations applied to the local or transit
traffic stream.
Options none—Display standard information about all IPSec security associations.
sa-name—(Optional) Display the specified IPSec security association.
List of Sample Output show ipsec security-associations sa-name on page 663

show ipsec security-associations sa-name detail on page 664
Output Fields Table 173 lists the output fields for the show ipsec certificates command. Output

Security association Name of the security association. All levels
Interface family Status of the interface family of the security association. If the interface All levels
family field is absent, it is a transport mode security association. The
interface family can have one of three options:
! Up—The security association is referenced in the interface family and the
interface family is up.
! Down—The security association is referenced in the interface family and
the interface family is down.
! No reference—The security association is not referenced in the interface
family.
Local gateway Gateway address of the local system. All levels
Remote gateway Gateway address of the remote system. All levels
Local identity Prefix and port number of the local end All levels
Remote identity Prefix and port number of the remote end. All levels
Direction Direction of the security association: inbound or outbound. All levels
SPI Value of the security parameter index. All levels
AUX-SPI Value of the auxiliary security parameter index. All levels
! When the value is AH or ESP, AUX-SPI is always 0.
! When the value is AH+ESP, AUX-SPI is always a positive integer.
662 ! show ipsec security-associations


State Status of the security association: detail
! Installed—The security association is installed in the security association
database. (For transport mode security associations, the value of State
must always be Installed.)
! Not installed—The security association is not installed in the security
association database.
Mode Mode of the security association: All levels
! transport—Protects single host-to-host protections.
! tunnel—Protects connections between security gateways.
Type Type of security association:. All levels

! manual—Security parameters require no negotiation. They are static, and
are configured by the user.
! dynamic—Security parameters are negotiated by the IKE protocol.
Dynamic security associations are not supported in transport mode.
Protocol Protocol supported: All levels
! transport mode—Supports Encapsulation Security Protocol (ESP) or
Authentication Header (AH).
! tunnel mode—Supports ESP or AH+ESP.
Authentication Type of authentication used: hmac-md5-96, hmac-sha1-96, or None. detail

Encryption Type of encryption used: des-cbc, 3des-csc, or None. detail
Soft lifetime (dynamic output only) Each lifetime of a security association has two display detail
Hard lifetime options, hard and soft, one of which must be present for a dynamic security
association. The hard lifetime specifies the lifetime of the SA. The soft
lifetime, which is derived from the hard lifetime, informs the IPSec key
management system that the SA is about to expire. This allows the key
management system to negotiate a new SA before the hard lifetime expires.
! Expires in seconds seconds—Number of seconds left until the security
association expires.
! Expires in kilobytes kilobytes—Number of kilobytes left until the security
Anti-replay service State of the service that prevents packets from being replayed: Enabled or detail
Disabled.
Replay window size Configured size, in packets, of the antireplay service window: 32 or 64. The detail
antireplay window size protects the receiver against replay attacks by
rejecting old or duplicate packets. If the replay window size is 0, the
antireplay service is disabled.
show ipsec user@host> show ipsec security-associations sa-cosmic brief

security-associations Security association: sa-cosmic, Interface family: Up
sa-name Local gateway: 21.21.1.1, Remote gateway: 21.21.2.1
Local identity: ipv4_subnet(any:0,[0..7]=0.0.0.0/0)
Remote identity: ipv4_subnet(any:0,[0..7]=0.0.0.0/0)
Direction SPI AUX-SPI Mode Type Protocol
inbound 2908734119 0 tunnel dynamic AH
outbound 3494029335 0 tunnel dynamic AH
show ipsec security-associations ! 663

show ipsec user@host> show ipsec security-associations sa-cosmic detail

security-associations Security association: sa-cosmic, Interface family: Up
sa-name detail
Local gateway: 21.21.1.1, Remote gateway: 21.21.2.1
Direction: inbound, SPI: 2908734119, AUX-SPI: 0, State: Installed
Protocol: AH, Authentication: hmac-md5-96, Encryption: None
Soft lifetime: Expired
Anti-replay service: Disabled
Direction: outbound, SPI: 3494029335, AUX-SPI: 0, State: Installed

Protocol: AH, Authentication: hmac-md5-96, Encryption: None
Soft lifetime: Expired
Anti-replay service: Disabled
664 ! show ipsec security-associations

show security pki ca-certificate
Syntax show security pki ca-certificate

<brief | detail>
<ca-profile ca-profile-name>
Description (Adaptive services interfaces only) Display information about certificate authority
(CA) digital certificates installed in the routing platform.
Options none—(Same as brief) Display information about all CA digital certificates.
ca-profile ca-profile-name—(Optional) Display information about only the specified

CA profile.
List of Sample Output show security pki ca-certificate on page 666

show security pki ca-certificate detail on page 666
Output Fields Table 176 lists the output fields for the show security pki ca-certificate command.
Table 176: show security pki ca-certificate Output Fields (1 of 2)

Certificate identifier Name of the digital certificate. All levels
Certificate version Revision number of the digital certificate. detail
Serial number Unique serial number of the digital certificate. detail
Issued by Authority that issued the digital certificate. none brief
Issued to Device that was issued the digital certificate. none brief
Issuer Authority that issued the digital certificate, including details of the authority detail
organized using the distinguished name format. Possible subfields are:
! Common name—Name of the authority.
! Organization—Organization of origin.
! Organizational unit—Department within an organization.
! State—State of origin.
! Country—Country of origin.
Subject Details of the digital certificate holder organized using the distinguished name detail
format. Possible subfields are:
! Common name—Name of the requestor.
show security pki ca-certificate ! 665

Table 176: show security pki ca-certificate Output Fields (2 of 2)

Validity Time period when the digital certificate is valid. Values are: All levels
! Not before—Start time when the digital certificate becomes valid.
! Not after—End time when the digital certificate becomes invalid.
Public key algorithm Encryption algorithm used with the private key, such as rsaEncryption(1024 bits). All levels
Signature algorithm Encryption algorithm that the CA used to sign the digital certificate, such as detail
sha1WithRSAEncryption.
Fingerprint Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify detail
the digital certificate.
Distribution CRL Distinguished name information and the URL for the certificate revocation list (CRL) detail
server.
Use for key Use of the public key, such as Certificate signing, CRL signing, Digital signature, or Key detail
encipherment.
show security pki user@host> show security pki ca-certificate

ca-certificate Certificate identifier: entrust
Issued to: juniper, Issued by: juniper
Validity:
Not before: 2005 Oct 18th, 23:54:22 GMT
Not after: 2025 Oct 19th, 00:24:22 GMT
Public key algorithm: rsaEncryption(1024 bits)
Certificate identifier: entrust

Issued to: First Officer, Issued by: juniper
Validity:

Issued to: First Officer, Issued by: juniper
Validity:
show security pki user@host> show security pki ca-certificate detail

ca-certificate detail Certificate identifier: entrust
Certificate version: 3
Serial number: 4355 9235
Issuer:
Organization: juniper, Country: us
Subject:
Validity:
cb:9e:2d:c0:70:f8:ea:3c:f2:b5:f0:02:48:87:dc:68:99:a3:57:4f
0e:b9:98:0b:95:47:0d:1f:97:7c:53:17:dd:1a:f8:da:e5:08:d1:1c
78:68:1f:2f:72:9f:a2:cf:81:e3:ce:c5:56:89:ce:f0:97:93:fa:36
19:3e:18:7d:8c:9d:21:fe:1f:c3:87:8d:b3:5d:f3:03:66:9d:16:a7
bf:18:3f:f0:7a:80:f0:62:50:43:83:4f:0e:d7:c6:42:48:c0:8a:b2
c7:46:30:38:df:9b:dc:bc:b5:08:7a:f3:cd:64:db:2b:71:67:fe:d8
04:47:08:07:de:17:23:13
666 ! show security pki ca-certificate

Signature algorithm: sha1WithRSAEncryption

Fingerprint:
00:8e:6f:58:dd:68:bf:25:0a:e3:f9:17:70:d6:61:f3:53:a7:79:10 (sha1)
71:6f:6a:76:17:9b:d6:2a:e7:5a:72:97:82:6d:26:86 (md5)
Distribution CRL:
C=us, O=juniper, CN=CRL1
http://CA-1/CRL/juniper_us_crlfile.crl
Use for key: CRL signing, Certificate signing

Serial number: 4355 925c
Issuer:
Subject:
Organization: juniper, Country: us, Common name: First Officer
Validity:
c0:a4:21:32:95:0a:cd:ec:12:03:d1:a2:89:71:8e:ce:4e:a6:f9:2f
1a:9a:13:8c:f6:a0:3d:c9:bd:9d:c2:a0:41:77:99:1b:1e:ed:5b:80
34:46:f8:5b:28:34:38:2e:91:7d:4e:ad:14:86:78:67:e7:02:1d:2e
19:11:b7:fa:0d:ba:64:20:e1:28:4e:3e:bb:6e:64:dc:cd:b1:b4:7a
ca:8f:47:dd:40:69:c2:35:95:ce:b8:85:56:d7:0f:2d:04:4d:5d:d8
42:e1:4f:6b:bf:38:c0:45:1e:9e:f0:b4:7f:74:6f:e9:70:fd:4a:78
da:eb:10:27:bd:46:34:33
Fingerprint:
bc:78:87:9b:a7:91:13:20:71:db:ac:b5:56:71:42:ad:1a:b6:46:17 (sha1)
23:79:40:c9:6d:a6:f0:ca:e0:13:30:d4:29:6f:86:79 (md5)
Distribution CRL:
Use for key: Key encipherment

Serial number: 4355 925b
Issuer:
Subject:
Organization: juniper, Country: us, Common name: First Officer
Validity:
ea:75:c4:f3:58:08:ea:65:5c:7e:b3:de:63:0a:cf:cf:ec:9a:82:e2
d7:e8:b9:2f:bd:4b:cd:86:2f:f1:dd:d8:a2:95:af:ab:51:a5:49:4e
00:10:c6:25:ff:b5:49:6a:99:64:74:69:e5:8c:23:5b:b4:70:62:8e
e4:f9:a2:28:d4:54:e2:0b:1f:50:a2:92:cf:6c:8f:ae:10:d4:69:3c
90:e2:1f:04:ea:ac:05:9b:3a:93:74:d0:59:24:e9:d2:9d:c2:ef:22
b9:32:c7:2c:29:4f:91:cb:5a:26:fe:1d:c0:36:dc:f4:9c:8b:f5:26
af:44:bf:53:aa:d4:5f:67
Fingerprint:
46:71:15:34:f0:a6:41:76:65:81:33:4f:68:47:c4:df:78:b8:e3:3f (sha1)
ee:cc:c7:f4:5d:ac:65:33:0a:55:db:59:72:2c:dd:16 (md5)
Distribution CRL:
Use for key: Digital signature
show security pki ca-certificate ! 667

show security pki certificate-request
Syntax show security pki certificate-request

<brief | detail>
<certificate-id certificate-id-name>
Description (Adaptive services interfaces only) Display information about manually generated
local digital certificate requests that are stored in the routing platform.
Options none—(same as brief) Display information about all local digital certificate requests.
certificate-id certificate-id-name—(Optional) Display information about only the

specified local digital certificate request
See Also clear security pki certificate-request on page 633
List of Sample Output show security pki certificate-request on page 669

show security pki certificate-request detail on page 669
Output Fields Table 177 lists the output fields for the show security pki certificate-request
Table 177: show security pki certificate-request Output Fields (1 of 2)

Subject Details of the digital certificate holder organized using the distinguished name detail
Alternate subject Domain name or IP address of the device related to the digital certificate. detail
Public key Public key verification status: Failed or Passed. The detail output also provides the All levels
verification status verification hash.
668 ! show security pki certificate-request

Table 177: show security pki certificate-request Output Fields (2 of 2)

encipherment.
show security pki user@host> show security pki certificate-request

certificate-request Certificate identifier: local-microsoft-2
Issued to: router2.juniper.net
Public key verification status: Passed
show security pki user@host> show security pki certificate-request detail

certificate-request Certificate identifier: local-entrust3
detail Certificate version: 3
Subject:
Common name: router3.juniper.net
Alternate subject: router3.juniper.net
fb:79:df:d4:a9:03:0f:d3:69:7e:c1:e4:27:35:9c:d9:b1:a2:47:78
d2:6d:f3:e5:f4:68:4f:b3:04:45:88:57:99:82:39:a6:51:9e:5f:42
23:3f:d7:6e:3d:a5:54:a9:b1:2d:6e:90:dd:12:8a:bf:ef:2b:20:50
ba:f0:da:d9:0c:ad:5e:d6:c6:98:3a:ae:3f:90:dd:94:78:c1:ea:2e
7c:f0:2d:d4:79:d4:cd:f0:52:df:5e:72:f2:e7:ae:66:f7:61:f4:bc
72:57:3e:6c:6d:d3:24:58:8b:f4:ef:da:2a:6a:fa:eb:98:f8:34:84
79:54:da:4f:d3:6f:52:1f
Fingerprint:
7c:e8:f9:45:93:8d:a3:92:7f:18:29:02:f1:c8:e2:85:3d:ad:df:1f (sha1)
00:4e:df:a0:6b:ad:8c:50:da:7c:a1:cf:5d:37:b0:ea (md5)
show security pki certificate-request ! 669

show security pki crl
Syntax show security pki crl

<brief | detail>
<ca-profile ca-profile-name>
Description (Adaptive services interfaces only) Display information about the certificate
revocation lists (CRLs) that are stored in the routing platform.
Options none—(same as brief) Display information about all CRLs.
ca-profile ca-profile-name—Display CRL information about only the specified CA

profile.
See also clear security pki crl on page 634

show security pki crl on page 670
List of Sample Output show security pki crl on page 671

show security pki crl detail on page 671
Output Fields Table 178 shows the output fields for the show security pki crl command. Output
Table 178: show security pki crl Output Fields

CA profile Name of the configured CA profile. All levels
CRL version Revision number of the certificate revocation list. All levels
CRL number Number of the certificate revocation list All levels
CRL Issuer Device that was issued the certificate revocation list. All levels
Issuer Details of the digital certificate holder organized using the distinguished name Detail
Effective date Date and time the certificate revocation list becomes valid. All levels
Next update Date and time the routing platform will download the latest version of the certificate All levels
revocation list.
Revocation List List of digital certificates that have been revoked before their expiration date. Values Detail
are:
! Serial number—Unique serial number of the digital certificate
! Revocation date—Date and time that the digital certificate was revoked.
670 ! show security pki crl

show security pki crl CA profile entrust

CRL version: V2
CRL number: 24
CRL issuer: C=CA, O=juniper
Effective date: 2006 May 31st, 05:35:25 GMT
Next update: 2006 Jun 1st, 06:35:25 GMT
show security pki crl CA profile: entrust

detail CRL version: V2
CRL number: 24
Issuer:
Organization: juniper, Country: ca
Validity:
Effective date: 2006 May 31st, 05:35:25 GMT
Next update: 2006 Jun 1st, 06:35:25 GMT
Revocation List:
Serial number Revocation date
4451aca3 2006 May 25th, 09:13:38 GMT
4451aca4 2006 May 25th, 10:11:33 GMT
4451acb4 2006 May 29th, 11:28:54 GMT
4451aceb 2006 May 29th, 11:29:01 GMT
4451acfe 2006 May 29th, 11:29:17 GMT
4451acff 2006 May 31st, 05:29:55 GMT
show security pki crl ! 671

show security pki local-certificate
Syntax show security pki local-certificate

<brief | detail>
<certificate-id certificate-id-name>
Description (Adaptive services interfaces only) Display information about the local digital
certificates and the corresponding public keys installed in the routing platform.
Options none—(same as brief) Display information about all local digital certificates and
corresponding public keys.
certificate-id certificate-id-name—(Optional) Display information about only the

specified the local digital certificate and corresponding public keys.
See Also clear security pki local-certificate on page 635
List of Sample Output show security pki local-certificate on page 673

show security pki local-certificate detail on page 673
Output Fields Table 179 lists the output fields for the show security pki local-certificate command.
Table 179: show security pki local-certificate Output Fields (1 of 2)

Issuer Authority that issued the digital certificate, including details of the authority organized detail
using the distinguished name format. Possible subfields are:
Subject Details of the digital certificate holder organized using the distinguished name format. detail
Possible subfields are:
672 ! show security pki local-certificate

Table 179: show security pki local-certificate Output Fields (2 of 2)

Alternate subject Domain name or IP address of the device related to the digital certificate. detail
Public key Public key verification status: Failed or Passed. The detail output also provides the All levels
verification status verification hash.
Fingerprint Secure Hash Algorithm (SHA1) and Message Digest 5 (MD5) hashes used to identify the detail
digital certificate.
Distribution CRL Distinguished name information and URL for the certificate revocation list (CRL) server. detail
encipherment.
show security pki user@host> show security pki local-certificate

local-certificate Certificate identifier: local-entrust2
Issued to: router2.juniper.net, Issued by: juniper
Validity:
Not before: 2005 Nov 21st, 23:28:22 GMT
Not after: 2008 Nov 21st, 23:58:22 GMT
show security pki user@host> show security pki local-certificate detail

local-certificate detail Certificate identifier: local-entrust3
Serial number: 4355 94f9
Issuer:
Subject:
Organization: juniper, Country: us, Common name: router3.juniper.net
Validity:
Not after: 2008 Nov 22nd, 00:03:58 GMT
fb:79:df:d4:a9:03:0f:d3:69:7e:c1:e4:27:35:9c:d9:b1:a2:47:78
d2:6d:f3:e5:f4:68:4f:b3:04:45:88:57:99:82:39:a6:51:9e:5f:42
23:3f:d7:6e:3d:a5:54:a9:b1:2d:6e:90:dd:12:8a:bf:ef:2b:20:50
ba:f0:da:d9:0c:ad:5e:d6:c6:98:3a:ae:3f:90:dd:94:78:c1:ea:2e
7c:f0:2d:d4:79:d4:cd:f0:52:df:5e:72:f2:e7:ae:66:f7:61:f4:bc
72:57:3e:6c:6d:d3:24:58:8b:f4:ef:da:2a:6a:fa:eb:98:f8:34:84
79:54:da:4f:d3:6f:52:1f
Fingerprint:
61:3a:d0:b4:7a:16:9b:39:ba:81:3f:9d:ab:34:e5:c8:be:3b:a1:6d (sha1)
60:a0:ff:58:05:4a:65:73:9d:74:3a:e1:83:6f:1b:c8 (md5)
Distribution CRL:
show security pki local-certificate ! 673

show services ipsec-vpn certificates
Syntax show services ipsec-vpn certificates

<brief | detail>
<service-set service-set>
Description (Adaptive services interfaces only) Display local and remote certificates installed in
the IPSec configuration memory cache that are used for the IKE negotiation.
Options none—(same as brief) Display information about local and remote certificates
associated with all service sets.
service-set service-set—(Optional) Display information about local and remote

certificates associated with only the specified service set.
List of Sample Output show security ipsec-vpn certificates on page 675

show security ipsec-vpn certificates detail on page 676
Output Fields Table 180 lists the output fields for the show services ipsec-vpn certificates
Table 180: show services ipsec-vpn certificates Output Fields (1 of 2)

Service set Name of the IPSec service set. All levels
Total entries Number of certificate cache entries. All levels
Certificate cache Identification number of the certificate cache entry. All levels
entry
Flags Information about the digital certificate, including whether the certificate is a root none brief
certificate and trusted.
Alternate subject Domain name or IP address of the device related to the digital certificate. All levels
Validity Time period when the digital certificate is valid. Values are: none brief
Public key algorithm Specifies the encryption algorithm used with the private key, such as detail
rsaEncryption(1024 bits).
674 ! show services ipsec-vpn certificates

Table 180: show services ipsec-vpn certificates Output Fields (2 of 2)

Distribution CRL Distinguished name information and the URL for the certificate revocation list (CRL) detail
server.
encipherment.
show security ipsec-vpn user@host> show services ipsec-vpn certificates

certificates Service set: serviceset-dynamic-BiEspsha3des, Total entries: 3
Certificate cache entry: 3
Flags: Non-root Trusted
Validity:
Not after: 2008 Nov 22nd, 00:03:58 GMT

Flags: Non-root Trusted
Validity:
Not after: 2008 Nov 21st, 23:58:22 GMT

Flags: Root Trusted
Issued to: juniper, Issued by: juniper
Validity:
show services ipsec-vpn certificates ! 675

show security ipsec-vpn user@host> show services ipsec-vpn certificates detail

certificates detail Service set: serviceset-dynamic-BiEspsha3des, Total entries: 3
Public key algorithm: rsaEncryption
Fingerprint:
61:3a:d0:b4:7a:16:9b:39:ba:81:3f:9d:ab:34:e5:c8:be:3b:a1:6d (sha1)
60:a0:ff:58:05:4a:65:73:9d:74:3a:e1:83:6f:1b:c8 (md5)
Distribution CRL:

Fingerprint:
30:c3:a4:04:da:33:9d:60:23:5a:48:75:48:2c:f0:c6:96:6c:31:fa (sha1)
9a:a2:ce:ef:7e:10:80:a0:c8:4d:2f:e7:e1:d3:69:9d (md5)
Distribution CRL:

Flags: Root
Serial number: 4355 9235
Fingerprint:
00:8e:6f:58:dd:68:bf:25:0a:e3:f9:17:70:d6:61:f3:53:a7:79:10 (sha1)
71:6f:6a:76:17:9b:d6:2a:e7:5a:72:97:82:6d:26:86 (md5)
Distribution CRL:
Use for key: CRL signing, Certificate signing
676 ! show services ipsec-vpn certificates

show services ipsec-vpn ike security-associations
Syntax show services ipsec-vpn ike security-associations

<brief | detail>
<peer-address>
Description (Adaptive services interface only) Display information for Internet Key Exchange
(IKE) security associations. If no security association is specified, the information
for all security associations is displayed.
Options none—(same as brief) Display standard information for all IPSec security
associations.
peer-address—(Optional) Display information about a particular security association

address.
List of Sample Output show services ipsec-vpn ike security-associations detail on page 679
Output Fields Table 181 lists the output fields for the show services ipsec-vpn ike
security-associations command. Output fields are listed in the approximate order in
which they appear.
Table 181: show services ipsec-vpn ike security-associations Output Fields (1 of 3)

IKE peer Remote end of the IKE negotiation. detail
Role Part played in the IKE session. The router triggering the IKE negotiation is detail
the initiator, and the router accepting the first IKE exchange packets is the
responder.
Remote Address Responder’s address. none specified
State State of the IKE security association: none specified
! Matured—The IKE security association is established.
! Not matured—The IKE security association is in the process of
negotiation.
Initiator cookie When the IKE negotiation is triggered, a random number is sent to the All levels
remote node.
Responder cookie The remote node generates its own random number and sends it back to All levels
the initiator as a verification that the packets were received.
Of the numerous security services available, protection against denial of
service (DoS) is one of the most difficult to address. A “cookie” or
anticlogging token (ACT) is aimed at protecting the computing resources
from attack without spending excessive CPU resources to determine the
cookie’s authenticity. An exchange prior to CPU-intensive public key
operations can thwart some DoS attempts (such as simple flooding with
invalid IP source addresses).
show services ipsec-vpn ike security-associations ! 677


keys.
! Authentication—(detail output only) Type of authentication algorithm
used: md5 or sha1.
! Encryption—(detail output only) Type of encryption algorithm used. It can
be des-cbc, 3des-cbc, or None.
! Pseudo random function— Function that generates highly unpredictable
association.
negotiation.
policy manager.
678 ! show services ipsec-vpn ike security-associations


Phase 2 negotiations in Number of phase 2 IKE negotiations in progress and status information: detail
progress
! Negotiation type—Type of phase 2 negotiation. The JUNOS software
currently supports quick mode.
! Message ID—Unique identifier for a phase 2 negotiation.
! Local identity—Identity of the local phase 2 negotiation. The format is
id-type-name(proto-name:port-number,[0..id-data-len]=iddata-presentation).
! Remote identity—Identity of the remote phase 2 negotiation. The format
is id-type-name(proto-name:port-number,[0..id-data-len]=iddata-presentation).
! Flags—Notification to the key management process of the status of the
IKE negotiation. It can be one of the following:
! caller notification sent—Caller program notified about the completion
of the IKE negotiation.
negotiation.
! waiting for policy manager—Negotiation is waiting for a response from
the policy manager.
show services ipsec-vpn user@host> show services ipsec-vpn ike security-associations detail
ike IKE peer 4.4.4.4
security-associations Role: Initiator, State: Matured
detail Initiator cookie: cf22bd81a7000001, Responder cookie: fe83795c2800002e
Exchange type: Main, Authentication method: Pre-shared-keys
Local: 4.4.4.5:500, Remote: 4.4.4.4:500
Lifetime: Expires in 187 seconds
Algorithms:
Authentication : md5
Encryption : 3des-cbc
Pseudo random function: hmac-md5
Traffic statistics:
Input bytes : 1000
Output bytes : 1280
Input packets: 5
Output packets: 9
Flags: Caller notification sent
IPsec security associations: 2 created, 0 deleted
Phase 2 negotiations in progress: 1
Negotiation type: Quick mode, Role: Initiator, Message ID: 3582889153

Local: 4.4.4.5:500, Remote: 4.4.4.4:500
Local identity: ipv4_subnet(tcp:80,[0..7]=10.1.1.0/24)
Remote identity: ipv4_subnet(tcp:100,[0..7]=10.1.2.0/24)
Flags: Caller notification sent, Waiting for done
show services ipsec-vpn ike security-associations ! 679

show services ipsec-vpn ipsec security-associations
Syntax show services ipsec-vpn ipsec security-associations

Description (Adaptive services interface only) Display IPSec security associations for the
specified service set. If no service set is specified, the security associations for all
service sets are displayed.
Options none—Display standard information about IPSec security associations for all
service sets.

service set.
List of Sample Output show services ipsec-vpn ipsec security associations extensive on page 682
Output Fields Table 182 lists the output fields for the show services ipsec-vpn ipsec
security-associations command. Output fields are listed in the approximate order in
which they appear.
Table 182: show services ipsec-vpn ipsec security-associations Output Fields (1 of 2)

Service set Name of the service set for which the IPSec security associations are All levels
defined. If appropriate, includes the outside service interface VRF name.
Rule Name of the rule set applied to the security association. detail extensive
Term Name of the IPSec term applied to the security association. detail extensive
Tunnel index Numeric identifier of the specific IPSec tunnel for the security association. detail extensive
IPSec inside interface Name of the logical interface hosting the IPSec tunnels. All levels
Local identity Prefix and port number of the local end All levels
Remote identity Prefix and port number of the remote end. All levels
Primary remote gateway IP address of the configured primary remote peer. All levels
Backup remote gateway IP address of the configured backup remote peer. All levels
State State of the primary or backup interface: Active, Offline, or Standby. Both ES All levels
PICs are initialized to Offline. For primary and backup peers, State can be
Active or Standby. If both peers are in a state of Standby, no connection exists
yet between the two peers.
Failover counter Number of times a PIC switched between primary and backup interfaces, or All levels
the number of times the tunnel switched between the primary and remote
peers since the software has been activated.
Direction Direction of the security association: inbound or outbound. All levels
680 ! show services ipsec-vpn ipsec security-associations

Table 182: show services ipsec-vpn ipsec security-associations Output Fields (2 of 2)

SPI Value of the security parameter index. All levels
AUX-SPI Value of the auxiliary security parameter index. All levels
! When the value of Protocol is AH or ESP, AUX-SPI is always 0.
! When the value of Protocol is AH+ESP, AUX-SPI is always a positive integer.
Mode Mode of the security association: detail extensive

! transport—Protects single host-to-host protections.
! tunnel—Protects connections between security gateways.
Type Type of security association: detail extensive

! manual—Security parameters require no negotiation. They are static, and
are configured by the user.
! dynamic—Security parameters are negotiated by the IKE protocol.
Dynamic security associations are not supported in transport mode.
State Status of the security association: detail extensive
! Installed—The security association is installed in the security association
database. (For transport mode security associations, the value of State
must always be Installed)
! Not installed—The security association is not installed in the security
association database.
Protocol Protocol supported: All levels
! transport mode supports Encapsulation Security Protocol (ESP) or
Authentication Header (AH).
! tunnel mode supports ESP or AH+ESP.
Authentication Type of authentication used: hmac-md5-96, hmac-sha1-96, or none. detail extensive

Encryption Type of encryption algorithm used: can be aes-cbc (128 bits), detail
aes-cbc (192 bits), aes-cbc (256 bits), des-cbc, 3des-cbc, or None.
Soft lifetime Each lifetime of a security association has two display options, hard and detail extensive
Hard lifetime soft, one of which must be present for a dynamic security association. The
hard lifetime specifies the lifetime of the SA. The soft lifetime, which is
derived from the hard lifetime, informs the IPSec key management system
that the SA is about to expire. This information allows the key management
system to negotiate a new SA before the hard lifetime expires.
! Expires in seconds seconds—Number of seconds left until the security
! Expires in kilobytes kilobytes—Number of kilobytes left until the security
Anti-replay service State of the service that prevents packets from being replayed: Enabled or detail extensive
Disabled.
Replay window size Configured size, in packets, of the antireplay service window: 32 or 64. The detail
antireplay window size protects the receiver against replay attacks by
rejecting old or duplicate packets. If the replay window size is 0, antireplay
service is disabled.
show services ipsec-vpn ipsec security-associations ! 681

show services ipsec-vpn user@host> show services ipsec-vpn ipsec security-associations extensive
ipsec security Service set: service-set-1
associations extensive Rule: _junos_, Term: term-1, Tunnel index: 1
Local gateway: 101.101.101.2, Remote gateway: 14.14.14.4
IPSec inside interface: sp-2/0/0.1
Primary remote gateway: 101.101.101.1, State: Standby
Backup remote gateway: 14.14.14.4, State: Active
Failover counter: 1
Direction: inbound, SPI: 3743521590, AUX-SPI: 0

Mode: tunnel, Type: dynamic, State: Installed
Protocol: ESP, Authentication: hmac-sha1-96, Encryption: 3des-cbc
Anti-replay service: Enabled, Replay window size: 64
Direction: outbound, SPI: 2551045240, AUX-SPI: 0

Mode: tunnel, Type: dynamic, State: Installed
Protocol: ESP, Authentication: hmac-sha1-96, Encryption: 3des-cbc
Anti-replay service: Enabled, Replay window size: 64
682 ! show services ipsec-vpn ipsec security-associations

show services ipsec-vpn ipsec statistics
Syntax show services ipsec-vpn ipsec statistics

<brief | detail>
<remote-gw remote-peer-address>
Description (Adaptive services interface only) Display IPSec statistics for the specified service
set. If no service set is specified, the statistics for all service sets are displayed.
Options none—Display standard IPSec statistics for all service sets.
remote-gw remote-peer-address—Display IPSec statistics for an individual IPSec

tunnel and an individual remote host.

service set.
List of Sample Output show services ipsec-vpn ipsec statistics detail on page 684
show services ipsec-vpn ipsec statistics remote-gw on page 684
Output Fields Table 183 lists the output fields for the show services ipsec-vpn ipsec statistics
Table 183: show services ipsec-vpn ipsec statistics Output Fields (1 of 2)

PIC The physical interface on which the IPSec tunnel is configured. All levels
Service set Name of the service set for which the IPSec tunnel is defined. All levels
Tunnel index Numeric identifier of the specific IPSec tunnel for the security association. All levels
ESP statistics Encapsulation Security Payload (ESP) statistics: All levels
! Encrypted bytes—Total number of bytes encrypted by the local system
across the IPSec tunnel.
! Decrypted bytes—Total number of bytes decrypted by the local system
! Encrypted packets—Total number of packets encrypted by the local
system across the IPSec tunnel.
! Decrypted packets—Total number of packets decrypted by the local
system across the IPSec tunnel
show services ipsec-vpn ipsec statistics ! 683

Table 183: show services ipsec-vpn ipsec statistics Output Fields (2 of 2)

AH Statistics Authentication Header statistics: All levels
! Input bytes—Total number of bytes received by the local system across
the IPSec tunnel.
! Output bytes—Total number of bytes transmitted by the local system
! Input packets—Total number of packets received by the local system
! Output packets—Total number of packets transmitted by the local system
Errors ! AH authentication failures—Total number of authentication header (AH) All levels
failures. An AH failure occurs when there is a mismatch of the
authentication header in a packet transmitted across an IPSec tunnel.
! Replay errors—Total number of replay errors. A replay error is generated
when a duplicate packet is received within the replay window.
! ESP authentication failures—Total number of Encapsulation Security
Payload (ESP) failures. An ESP failure occurs when there is an
authentication mismatch in ESP packets.
! Decryption errors—Total number of decryption errors.
! Bad headers—Total number of invalid headers detected.
! Bad trailers—Total number of invalid trailers detected.
show services ipsec-vpn user@host> show services ipsec-vpn ipsec statistics detail
ipsec statistics detail PIC: sp-3/1/0, Service set: service-set-1
Local gateway: 21.21.1.1, Remote gateway: 21.21.2.1, Tunnel index: 1

ESP Statistics:
Encrypted bytes: 0
Decrypted bytes: 0
Encrypted packets: 0
Decrypted packets: 0
AH Statistics:
Input bytes: 0
Output bytes: 0
Input packets: 0
Output packets: 0
Errors:
AH authentication failures: 0, Replay errors: 0
ESP authentication failures: 0, Decryption errors: 0
Bad headers: 0 Bad trailers: 0
show services ipsec-vpn user@host> show services ipsec-vpn ipsec statistics remote-gw 22.22.2.1
ipsec statistics PIC: sp-3/1/0, Service set: service-set-2
remote-gw
Local gateway: 22.22.1.1, Remote gateway: 22.22.2.1, Tunnel index: 2
ESP Statistics:
Encrypted bytes: 0
Decrypted bytes: 0
Encrypted packets: 0
Decrypted packets: 0
AH Statistics:
Input bytes: 0
Output bytes: 0
Input packets: 0
Output packets: 0
684 ! show services ipsec-vpn ipsec statistics

Errors:
AH authentication failures: 0, Replay errors: 0
ESP authentication failures: 0, Decryption errors: 0
Bad headers: 0 Bad trailers: 0
show services ipsec-vpn ipsec statistics ! 685

show system certificate
Syntax show system certificate

<certificate-id>
installed certificates signed by the Juniper Networks certificate authority.
Options none—Display all installed certificates signed by the Juniper Networks certificate
authority.
certificate-id—(Optional) Display the details of a particular certificate.
List of Sample Output show system certificate on page 687
Output Fields Table 184 lists the output fields for the show ipsec redundancy command. Output
Table 184: show ipsec redundancy Output Fields

Certificate identifier A unique identifier associated with a certificate. The certificate
identifier is the common name of the subject.
Issuer Information about the certificate issuer and the distinguished name
Subject (DN) of the issuer, respectively:
! Organization—Name of the owner’s organization.
! Organizational unit—Name of the owner's department.
! Country—Two-character country code in which the owner’s
system is located.
! State—State in the USA in which the owner is using the
certificate.
! Locality—City in which the owner’s system is located.
! Common name—Name of the owner of the certificate.
! E-mail address—E-mail address of the owner of the certificate.
Validity When a certificate is valid.

Signature algorithm Encryption algorithm applied to the installed certificate.
Public key algorithm Encryption algorithm applied to the public key.
686 ! show system certificate

show system certificate user@host> show system certificate

Certificate identifier: Dallas-v3
Issuer:
Organization: Juniper Networks, Organizational unit: Juniper CA,
Country: US, State: CA, Locality: Sunnyvale, Common name: Dallas CA,
E-mail address:[email protected]
Subject:
Organization: Juniper Networks, Organizational unit: Juniper CA,
Country: US, State: CA, Locality: Sunnyvale, Common name: Dallas-v3,
E-mail address:[email protected]
Validity:
Not before: Mar 13 03:23:25 2004 GMT
Not after: Mar 24 03:23:25 2014 GMT
Public key algorithm: dsaEncryption
show system certificate ! 687

688 ! show system certificate

Chapter 20
Layer 2 Tunneling Protocol Operational
Mode Commands
monitor and troubleshoot Layer 2 Tunneling Protocol (L2TP) services. Commands
are listed in alphabetical order.
Table 185: L2TP Services Operational Mode Commands
Task Command
Clear L2TP multilink bundles. clear services l2tp multilink on page 690
Clear L2TP sessions. clear services l2tp session on page 691

Clear L2TP tunnels. clear services l2tp tunnel statistics on page 693
Display L2TP multilink bundles. show services l2tp multilink on page 694
Display active L2TP sessions. show services l2tp session on page 696
Display L2TP summary information. show services l2tp summary on page 700
Display active L2TP tunnels. show services l2tp tunnel on page 701
Display active L2TP users. show services l2tp user on page 704
NOTE: L2TP services are supported on the adaptive services (sp-fpc/pic/port)

interface on M7i and M10i routers.
NOTE: For information about how to configure L2TP services, see the JUNOS
! 689
clear services l2tp multilink
Syntax clear services l2tp multilink (all <statistics> | bundle-id number <statistics> |
statistics (all | bundle-id number))
Description (M10i and M7i routers only) Close Layer 2 Tunneling Protocol (L2TP) multilink
sessions or clear session statistics.
Options all <statistics>—Close all L2TP multilink sessions or clear statistics for all L2TP
multilink sessions.
bundle-id number <statistics>—L2TP multilink bundle ID. The value is an internally

generated number from 1 to 65535. Close the specified L2TP multilink session,
or using the statistics keyword with this option, clear statistics for the specified
session.
statistics (all | bundle-id number)—Clear all session statistics or clear statistics for the
specified multilink bundle ID.
See Also show services l2tp multilink on page 694
List of Sample Output clear services l2tp multilink statistics all on page 690
request.
clear services l2tp user@host> clear services l2tp multilink statistics all
multilink statistics all Multilink 1 statistics cleared
690 ! clear services l2tp multilink

Chapter 20: Layer 2 Tunneling Protocol Operational Mode Commands
clear services l2tp session
Syntax clear services l2tp session (all statistics | interface sp-fpc/pic/port |

local-gateway gateway-address | local-gateway-name gateway-name |
local-session-id session-id <statistics> | local-tunnel-id tunnel-id |
peer-gateway gateway-address | peer-gateway-name gateway-name | statistics (all |
local-session-id session-id | user username) | tunnel-group group-name |
user username <statistics>)
Description (M10i and M7i routers only) Close Layer 2 Tunneling Protocol (L2TP) sessions, or
clear session statistics.
Options all statistics—Clear statistics for all L2TP sessions.
interface sp-fpc/pic/port—Clear statistics for only the L2TP tunnels using the
specified adaptive services interface.
local-gateway gateway-address—Clear statistics for only the L2TP tunnels that have
the specified local gateway address.
local-gateway-name gateway-name—Clear statistics for only the L2TP tunnels that

have the specified local gateway name.
local-session-id session-id <statistics>—Identifier for the local endpoint of the L2TP

session. Close the specified L2TP session, or using the statistics keyword with
this option, clear statistics for the specified session.
local-tunnel-id tunnel-id—Clear statistics for only the L2TP tunnels that have the
specified local tunnel identifier.
peer-gateway gateway-address—Clear statistics for only the L2TP tunnels that have
the specified peer gateway address.
peer-gateway-name gateway-name—Clear statistics for only the L2TP tunnels that

have the specified peer gateway name.
statistics (all | local-session-id session-id | user username)—Clear all session statistics,

clear statistics for the session using a specific local endpoint, or clear statistics
for the session with a specific username.
tunnel-group group-name—Clear statistics for only the L2TP tunnels that have the
specified tunnel group.
user username <statistics>—Username. Close the session for the specified

username, or using the statistics keyword with this option, clear statistics for
the session.
See Also show services l2tp session on page 696
List of Sample Output clear services l2tp session statistics all on page 692
clear services l2tp session ! 691

request.
clear services l2tp user@host> clear services l2tp session statistics all
session statistics all Session 26497 statistics cleared
692 ! clear services l2tp session

clear services l2tp tunnel statistics
Syntax clear services l2tp tunnel statistics (all statistics | interface sp-fpc/pic/port |
local-gateway gateway-address | local-gateway-name gateway-name | local-tunnel-id
tunnel-id | peer-gateway gateway-address | peer-gateway-name gateway-name |
tunnel-group group-name)
Description (M10i and M7i routers only) Clear Layer 2 Tunneling Protocol (L2TP) statistics.
Options all statistics—Clear statistics for all L2TP tunnels.
interface sp-fpc/pic/port—Clear statistics for only the L2TP tunnels using the
local-gateway gateway-address—Clear statistics for only the L2TP tunnels that have
local-gateway-name gateway-name—Clear statistics for only the L2TP tunnels that

have the specified local gateway name.
local-tunnel-id tunnel-id—Clear statistics for only the L2TP tunnels that have the
peer-gateway gateway-address—Clear statistics for only the L2TP tunnels that have
peer-gateway-name gateway-name—Clear statistics for only the L2TP tunnels that

have the specified peer gateway name.
tunnel-group group-name—Clear statistics for only the L2TP tunnels that have the
Additional Information To display information about L2TP CPU and memory usage, you can include the
tunnel group name in the show commands described in “Service Sets Operational
Mode Commands” on page 711.
See Also show services l2tp tunnel on page 701
List of Sample Output clear services l2tp tunnel on page 693

clear services l2tp tunnel statistics on page 693
request.
clear services l2tp user@host> clear services l2tp tunnel

tunnel Tunnel 9933 closed
clear services l2tp user@host> clear services l2tp tunnel statistics

tunnel statistics Tunnel 9933 statistics cleared
clear services l2tp tunnel statistics ! 693

show services l2tp multilink
Syntax show services l2tp multilink

<brief | detail | extensive | statistics>
<bundle-id number>
Description (M10i and M7i routers only) Display L2TP output organized by multilink bundle.
Options none—Same as brief.
brief | detail | extensive | statistics—(Optional) Display the specified level of output.

Use the statistics option to display packets and bytes that have been
encapsulated in the Multilink Protocol. Nonmultilink packets received on
member sessions are not counted here.
bundle-id number—(Optional) Display L2TP multilink bundle information for only

the specified bundle.
See Also clear services l2tp multilink on page 690
List of Sample Output show services l2tp multilink extensive on page 695
Output Fields Table 186 lists the output fields for the show services l2tp multilink command.
Table 186: show services l2tp multilink Output Fields (1 of 2)

Bundle ID Bundle identifier. to be provided
Links Number of links in the multilink bundle. to be provided
Bundle endpoint Endpoint discriminator that represents the device transmitting the packet. to be provided
Input MRRU Maximum packet size that the input interface can process. to be provided
Output MRRU Maximum packet size that the output interface can process. to be provided
Session local ID Identifier of the local endpoint of the L2TP session, as assigned by the L2TP to be provided
network server (LNS).
Session remote ID Identifier of the remote endpoint of the L2TP session, as assigned by the to be provided
L2TP access concentrator (LAC).
State Status of the L2TP session: to be provided
! Established—The session is operating.
! closed—The session is being closed.
! destroyed—The session is being destroyed.
! clean-up—The session is being cleaned up.
! lns-ic-accept-new—A new session is being accepted.
! lns-ic-idle—The session has been created and is idle.
! lns-ic-reject-new—The new session is being rejected.
! lns-ic-wait-connect—The session is waiting for the peer’s incoming call
connected (ICCN) message.
694 ! show services l2tp multilink

Table 186: show services l2tp multilink Output Fields (2 of 2)

Username Name of the user logged in to the session. to be provided
Mode Mode of the interface representing the multilink bundle: dedicated or to be provided
shared.
Local IP IP address of the local endpoint of the Point-to-Point Protocol (PPP) session. to be provided
Remote IP IP address of the remote endpoint of the PPP session. to be provided
Local name Name of the LNS instance in which the session was created. to be provided
Remote name Name of the LAC from which the session was created. to be provided
Local MRU Maximum receive unit (MRU) setting of the local device, in bytes. to be provided
Remote MRU MRU setting of the remote device, in bytes. to be provided
Statistics since Date and time when collection of the following statistics began: to be provided
! Control Tx—Amount of control information transmitted, in packets and
bytes.
! Control Rx—Amount of control information received, in packets and
bytes.
! Data Tx—Amount of data transmitted, in packets and bytes.
! Data Rx—Amount of data received, in packets and bytes.
! Errors Tx—Number of errors transmitted, in packets.
! Errors Rx—Number of errors received, in packets.
show services l2tp user@host> show services l2tp multilink extensive

multilink extensive Bundle ID: 1
Links: 2, Bundle endpoint: [email protected]
Input MRRU: 1524, Output MRRU: 1524
Session local ID: 46122, Session remote ID: 39307
State: Established, Username: [email protected], Mode: dedicated
Local IP: 10.58.255.129:1701, Remote IP: 10.58.255.131:1701
Local name: router3, Remote name: router4
State: Established, Username: [email protected], Mode: dedicated
Local name: router1, Remote name: router2
Statistics since: Mon May 17 11:47:35 2004
Packets Bytes
Control Tx 7 196
Control Rx 3 90
Data Tx 0 0
Data Rx 0 0
Errors Tx 0
Errors Rx 0
show services l2tp multilink ! 695

show services l2tp session
Syntax show services l2tp session

<interface sp-fpc/pic/port>
<local-gateway gateway-address>
<local-gateway-name gateway-name>
<local-session-id session-id>
<local-tunnel-id tunnel-id>
<peer-gateway gateway-address>
<peer-gateway-name gateway-name>
<tunnel-group group-name>
<user username>
Description (M10i and M7i routers only) Display a list of active L2TP sessions.
Options none—Display standard information about all active L2TP sessions.
brief | detail | extensive | statistics—Display the specified level of output. Use the
statistics option to display packet and byte counts for each session.
interface sp-fpc/pic/port—(Optional) Display L2TP session information for only the

local-gateway gateway-address—(Optional) Display L2TP session information for

only the specified local gateway address.
local-gateway-name gateway-name—(Optional) Display L2TP session information for

only the specified local gateway name.
local-session-id session-id—(Optional) Display L2TP session information for only the

specified local session identifier.
local-tunnel-id tunnel-id—(Optional) Display L2TP session information for only the

peer-gateway gateway-address—(Optional) Display L2TP session information for only

peer-gateway-name gateway-name—(Optional) Display L2TP session information for

only the specified peer gateway name.
tunnel-group group-name—(Optional) Display L2TP session information for only the

specified tunnel group. To display information about L2TP CPU and memory
usage, you can include the tunnel group name in the show services service-sets
memory-usage <group-name> and show services service-sets cpu-usage
<group-name> commands.
user username—(Optional) Display L2TP session information for only the specified
username.
696 ! show services l2tp session

See Also clear services l2tp session on page 691
LIst of Sample Output show services l2tp session extensive on page 699
Output Fields Table 187 lists the output fields for the show services l2tp session command.
Table 187: show services l2tp session Output Fields (1 of 2)

Interface Name of an adaptive services interface. to be provided
Tunnel group Name of a tunnel group. to be provided
Tunnel local ID Identifier of the local endpoint of the tunnel, as assigned by the L2TP to be provided
network server (LNS).
Session local ID Identifier of the local endpoint of the L2TP session, as assigned by the LNS. to be provided
Session remote ID Identifier of the remote endpoint of the L2TP session, as assigned by the to be provided
State State of the L2TP session: to be provided
Bundle ID Bundle identifier. Indicates the session is part of a multilink bundle. to be provided
Sessions that have a blank Bundle field are not participating in the
Multilink Protocol. Sessions in a multilink bundle might belong to different
L2TP tunnels. For L2TP output organized by bundle ID, issue the show
services l2tp multilink extensive command.
Mode Mode of the interface representing the session: shared or exclusive. to be provided
Local IP IP address of local endpoint of the Point-to-Point Protocol (PPP) session. to be provided
Remote IP IP address of remote endpoint of the PPP session. to be provided
Assigned IP address IP address assigned to remote client. to be provided
Local name Name of the LNS instance in which the session was created. to be provided
Remote name Name of the LAC from which the session was created. to be provided
Tx speed Transmit speed of the physical PPP link, in bps. to be provided
Rx speed Receive speed of the physical PPP link, in bps. to be provided
show services l2tp session ! 697

Table 187: show services l2tp session Output Fields (2 of 2)

Bearer type Type of bearer enabled: to be provided
! 0—Might indicate that the call was not received over a physical link (for
example, when the LAC and PPP are located in the same subsystem).
! 1—Digital access requested
! 2—Analog access requested
! 4—Asynchronous Transfer Mode (ATM) bearer support
Framing type Type of framing enabled: to be provided

! 1—Synchronous framing
! 2—Asynchronous framing
LCP renegotiation Whether Link Control Protocol (LCP) renegotiation is configured: On or Off. to be provided
Authentication Type of authentication algorithm used: Challenge Handshake to be provided
Authentication Protocol (CHAP) or Password Authentication Protocol (PAP).
Interface ID Identifier used to look up the logical interface for this session. to be provided
Interface unit Logical interface for this session. to be provided
Call serial number Unique serial number assigned to the call. to be provided
Create time Date and time when the call was created. to be provided
Up time Length of time elapsed since the call became active, in hours, minutes, and to be provided
seconds.
Idle time Length of time elapsed since the call became idle, in hours, minutes, and to be provided
seconds.
bytes.
bytes.
698 ! show services l2tp session

show services l2tp user@host> show services l2tp session extensive

session extensive Interface: sp-1/2/0, Tunnel group: group1, Tunnel local ID: 62746
State: Established, Bundle ID: 5, Mode: shared
Username: usr1@juniper_1.net, Assigned IP address: 10.50.2.1/32
Local MRU: 4000, Remote MRU: 1500, Tx speed: 64000, Rx speed: 64000
Bearer type: 2, Framing type: 1
LCP renegotiation: Off, Authentication: CHAP, Interface ID: unit_20
Interface unit: 20, Call serial number: 4137941434
Create time: Tue Mar 23 14:13:15 2004, Up time: 01:16:41
Idle time: 00:00:00
Statistics since: Tue Mar 23 14:13:13 2004
Packets Bytes
Control Tx 4 88
Control Rx 2 28
Data Tx 0 0
Data Rx 461 29.0k
Errors Tx 0
Errors Rx 0
Interface: sp-1/2/0, Tunnel group: group_company_dns, Tunnel local ID: 37266

State: Established, Bundle ID: 5, Mode: shared
Username: [email protected], Assigned IP address: 10.46.2.3/24
Local name: router-1, Remote name: router-2
Idle time: 01:16:36
Packets Bytes
Control Tx 6 196
Control Rx 4 150
Data Tx 0 0
Data Rx 1 80
Errors Tx 0
Errors Rx 0
show services l2tp session ! 699

show services l2tp summary
Syntax show services l2tp summary

Description (M10i and M7i routers only) Display Layer 2 Tunneling Protocol (L2TP) summary
information.
Options none—Display L2TP summary information for all adaptive services interfaces.
interface sp-fpc/pic/port—(Optional) Display L2TP summary information for only

the specified adaptive services interface.
List of Sample Output show services l2tp summary on page 700
Output Fields Table 188 lists the output fields for the show services l2tp summary command.
Table 188: show services l2tp summary Output Fields

Tunnels Number of tunnels established on the routing platform.
Sessions Number of sessions established on the routing platform.
Errors Number of errors.
Control Amount of control information transmitted and received, in packets and bytes.
Data Amount of data transmitted and received, in packets and bytes.
show services l2tp user@host> show services l2tp summary

summary Tunnels: 2, Sessions: 2, Errors: 0
Tx packets Rx packets Memory (bytes)
Control 6k 9k 688k
Data 70k 70k 3054
700 ! show services l2tp summary

show services l2tp tunnel

show services l2tp tunnel
<local-gateway gateway-address>
<local-gateway-name gateway-name>
<local-tunnel-id tunnel-id>
<peer-gateway gateway-address>
<peer-gateway-name gateway-name>
<tunnel-group group-name>
Description (M10i and M7i routers only) Display a list of active Layer 2 Tunneling Protocol
(L2TP) tunnels.
Options none—Display standard information about all active L2TP tunnels.
brief | detail | extensive | statistics—(Default) Display the specified level of output.

Use the statistics option to display L2TP tunnel statistics.
interface sp-fpc/pic/port—(Optional) Display L2TP tunnel information for only the

local-gateway gateway-address—(Optional) Display L2TP tunnel information for only

local-gateway-name gateway-name—(Optional) Display L2TP tunnel information for

only the specified local gateway name.
local-tunnel-id tunnel-id—(Optional) Display L2TP tunnel information for only the

peer-gateway gateway-address—(Optional) Display L2TP tunnel information for only

peer-gateway-name gateway-name—(Optional) Display L2TP tunnel information for

only the specified peer gateway name.
tunnel-group group-name—(Optional) Display L2TP tunnel information for only the

List of Sample Output show services l2tp tunnel extensive on page 703
Output Fields Table 189 on page 702 lists the output fields for the show services l2tp tunnel
show services l2tp tunnel ! 701

Table 189: show services l2tp tunnel Output Fields (1 of 2)

Local ID Numeric identifier of the local endpoint of the tunnel, as assigned by the to be provided
L2TP network server (LNS).
Remote ID Numeric identifier of the remote endpoint of the tunnel, as assigned by the to be provided
Remote IP IP address of the peer endpoint of the tunnel. to be provided
Sessions Number of L2TP sessions established through the tunnel. to be provided
State State of the L2TP tunnel: to be provided
! cc_responder_accept_new—The tunnel has received and accepted the
start control connection request (SCCRQ).
! cc_responder_reject_new—The tunnel has received and rejected the
SCCRQ.
! cc_responder_idle—The tunnel has just been created.
! cc_responder_wait_ctl_conn—The tunnel has sent the start control
connection response (SCCRP) and is waiting for the start control
connection connected (SCCCN) message.
! clean-up—The tunnel is being cleaned up.
! closed—The tunnel is being closed.
! destroyed—The tunnel is being destroyed.
! Established—The tunnel is operating.
! Terminate—The tunnel is terminating.
! Unknown—The tunnel is not connected to the router.
Local IP IP address of the local endpoint of the tunnel. to be provided

Local name Name used for local tunnel endpoint during tunnel negotiation. to be provided
Remote name Name used for remote tunnel endpoint during tunnel negotiation. to be provided
Max sessions Maximum number of sessions that can be established on this tunnel. to be provided
Window size Number of control messages that can be sent without receipt of an to be provided
acknowledgement.
Hello interval Interval between the transmission of hello messages, in seconds. to be provided
Create time Date and time when the tunnel was created. While the LNS and LAC are to be provided
connected, this value should correspond to the router’s uptime. If
connection to the LAC is severed, the State changes to Unknown and the
Create time value resets.
Up time Amount of time elapsed since the tunnel became active, in hours, minutes, to be provided
and seconds.
Idle time Amount of time elapsed since the tunnel became idle, in hours, minutes, to be provided
and seconds.
702 ! show services l2tp tunnel


bytes.
bytes.
show services l2tp user@host> show services l2tp tunnel extensive

tunnel extensive Interface: sp-1/2/0, Tunnel group: group1
Tunnel local ID: 62746, Tunnel remote ID: 16930
Remote IP: 10.128.1.2:1701
Sessions: 1, State: Established
Local IP: 10.128.1.1:1701
Max sessions: 50, Window size: 32, Hello interval: 60
Idle time: 00:00:07
Packets Bytes
Control Tx 80 1152
Control Rx 3 272
Data Tx 0 0
Data Rx 450 28.0k
Errors Tx 0
Errors Rx 0
Interface: sp-1/2/0, Tunnel group: group_company_dns

Tunnel local ID: 37266, Tunnel remote ID: 36217
Remote IP: 10.128.11.2:1701
Sessions: 1, State: Established
Local IP: 10.128.11.1:1701
Max sessions: unlimited, Window size: 32, Hello interval: 60
Idle time: 01:14:55
Packets Bytes
Control Tx 81 1164
Control Rx 3 273
Data Tx 0 0
Data Rx 1 80
Errors Tx 0
Errors Rx 0
show services l2tp tunnel ! 703

show services l2tp user
Syntax show services l2tp user

<user username>
Description (M10i and M7i routers only) Display a list of active Layer 2 Tunneling Protocol
(L2TP) users.
Options none—Display all active L2TP users.
brief | detail | extensive | statistics—(Optional) Display the specified level of output.

Use the statistics option to display L2TP user statistics.
user username—(Optional) Display L2TP user information for only the specified
username.
List of Sample Output show services l2tp user extensive on page 706
Output Fields Table 189 lists the output fields for the show services l2tp tunnel command. Output

Tunnel local ID Local identifier of the tunnel, as assigned by the L2TP network server (LNS). to be provided
Session local ID Local identifier of the session, as assigned by the L2TP network server to be provided
(LNS).
Session remote ID Remote identifier of the session, as assigned by the L2TP access to be provided
concentrator (LAC).
State State of the L2TP session: to be provided
Mode Mode of the interface representing the session: shared or exclusive. to be provided
Local IP IP address of the local endpoint of the tunnel. to be provided
Remote IP IP address of the peer endpoint of the tunnel. to be provided
704 ! show services l2tp user


Assigned IP address IP address assigned to remote client. to be provided
Local name Name of the local device. to be provided
Remote name Name of the remote device. to be provided
Tx speed Transmit speed of the tunnel session, in bps. to be provided
Rx speed Receive speed of the tunnel session, in bps. to be provided
Bearer type Type of bearer enabled: to be provided
! 0—Might indicate that the call was not received over a physical link (for
example, when the LAC and PPP are located in the same subsystem)
! 1—Digital access requested
! 2—Analog access requested
! 4—Asynchronous Transfer Mode (ATM) bearer support
Framing type Type of framing enabled: to be provided

! 1—Synchronous framing
! 2—Asynchronous framing
LCP renegotiation Whether Link Control Protocol (LCP) renegotiation is configured: On or Off. to be provided
Authentication Type of authentication algorithm used: Challenge Handshake to be provided
Authentication Protocol (CHAP) or Password Authentication Protocol (PAP).
Interface ID Name of the logical unit. to be provided
Interface unit Logical unit number. to be provided
Call serial number Unique serial number assigned to the call. to be provided
Create time Date and time when the call was created. to be provided
Up time Amount of time elapsed since the call became active, in hours, minutes, to be provided
and seconds.
Idle time Amount of time elapsed since the call became idle, in hours, minutes, and to be provided
seconds.
Statistics sine Date and time when collection of the following statistics began: to be provided
bytes.
bytes.
show services l2tp user ! 705

show services l2tp user user@host> show services l2tp user extensive
extensive Interface: sp-1/2/0, Tunnel group: group1, Tunnel local ID: 62746
State: Established, Mode: shared
Username: usr1@juniper_1.net, Assigned IP address: 10.50.2.1/32
Idle time: 00:00:00
Packets Bytes
Control Tx 4 88
Control Rx 2 28
Data Tx 0 0
Data Rx 461 29.0k
Errors Tx 0
Errors Rx 0
Interface: sp-1/2/0, Tunnel group: group_company_dns, Tunnel local ID: 37266
State: Established, Username: usr1@company_dns.com, Mode: shared
Username: usr1@company_dns.com, Assigned IP address: 10.48.1.1/32
Local MRU: 4470, Remote MRU: 4470, Tx speed: 155000000,
Rx speed: 155000000
Idle time: 01:16:36
Packets Bytes
Control Tx 6 196
Control Rx 4 150
Data Tx 0 0
Data Rx 1 80
Errors Tx 0
Errors Rx 0
706 ! show services l2tp user

Chapter 21
Network Address Translation
monitor and troubleshoot Network Address Translation (NAT) services.
Table 191: NAT Operational Mode Commands
Task Command
Display information about NAT pools. show services nat pool on page 708
NOTE: NAT is supported on the adaptive services interface on the following

routing platforms:
NAT is also supported on the redundant adaptive services interface (rspnumber) on

M-series and T-series routing platforms.
NOTE: For information about how to configure NAT services, see the JUNOS
! 707
show services nat pool
Syntax show services nat pool

<brief | detail>
<pool-name>
Description Display information about Network Address Translation (NAT) pools.
Options none—Display standard information about all NAT pools.
pool-name—(Optional) Display information about the specified NAT pool.
List of Sample Output show services nat pool brief on page 708
show services nat pool detail on page 709
Output Fields Table 192 lists the output fields for the show services nat pool command. Output
Table 192: show services nat pool Output Fields

Interface Name of an adaptive services interface. All levels
Service set Name of a service set. Individual empty service sets are not displayed, but if All levels
none of the service sets has any flows, a flow table header is printed for
each service set.
NAT pool Name of the Network Address Translation pool. All levels
Type or Translation type Address translation type: dynamic or static. All levels
Address or Address range Address range of the pool. All levels
Port or Port range Port range of the pool. Applicable only for dynamic NAT pools. Not All levels
displayed for static NAT pools.
Ports used or Ports in use Number of ports allocated in this pool with this name. Applicable only for All levels
dynamic NAT pools. Not displayed for static NAT pools.
Out of port errors Number of port allocation errors. Applicable only for dynamic NAT pools. detail
Not displayed for static NAT pools.
Max ports used Maximum number of ports used. Applicable only for dynamic NAT pools. detail
Not displayed for static NAT pools.
show services nat pool user@host> show services nat pool brief
brief Interface: sp-1/3/0, Service set: blue
NAT pool Type Address Port Ports used
pool1 static 100.100.100.100-100.100.100.100
pool2 static 200.200.200.200-200.200.200.200
pool3 dynamic 210.210.210.210-210.210.210.230 65530-65535 0
708 ! show services nat pool

Chapter 21: Network Address Translation Operational Mode Commands
show services nat pool user@host> show services nat pool detail
detail Interface: sp-1/2/0, Service set: set1
NAT pool: pool1, Translation type: static
Address range: 100.100.100.100-100.100.100.100
NAT pool: pool2, Translation type: static
Address range: 200.200.200.200-200.200.200.200
NAT pool: pool3, Translation type: dynamic
Address range: 210.210.210.210-210.210.210.230, Port range: 65530-65535,
Ports in use: 0, Out of port errors: 0, Max ports used: 0
show services nat pool ! 709

710 ! show services nat pool

Chapter 22
Service Sets Operational Mode
Commands
monitor and troubleshoot service sets. Commands are listed in alphabetical order.
Table 193: Service Sets Operational Mode Commands
Task Command
Clear service sets statistics. clear services service-sets statistics packet-drops on page 712
Display service sets CPU utilization. show services service-sets cpu-usage on page 713
Display services sets memory utilization. show services service-sets memory-usage on page 714
Display service sets statistics. show services service-sets statistics packet-drops interface on page 715
Display service sets summary information. show services service-sets summary on page 716
NOTE: Service sets are supported on the adaptive services interface on the
following routing platforms:
Service sets are also supported on the redundant adaptive services interface
(rspnumber) on M-series and T-series routing platforms.
NOTE: For information about how to configure service sets, see the JUNOS Services
! 711
clear services service-sets statistics packet-drops
Syntax clear services service-sets statistics packet-drops

Description Clear dropped-packet statistics for one adaptive services interface or for all adaptive
services interfaces.
Options none—Clear dropped-packet statistics for all configured adaptive services

interfaces.
interface interface-name—(Optional) Clear dropped-packet statistics for the specified

adaptive services interface. On M-series and T-series routing platforms, the
interface-name can be sp-fpc/pic/port or rspnumber. On J-series routing
platforms, the interface-name is sp-pim/0/port.
See Also show services service-sets statistics packet-drops on page 715
List of Sample Output clear services service-sets statistics packet-drops on page 712
request.
clear services user@host> clear services service-sets statistics packet-drops interface

service-sets statistics sp-5/0/0
packet-drops Flow collector interface: cp-5/0/0
Statistics cleared successfully
712 ! clear services service-sets statistics packet-drops

Chapter 22: Service Sets Operational Mode Commands
show services service-sets cpu-usage
Syntax show services service-sets cpu-usage

Description Display service set CPU usage.
Options none—Display CPU usage for all adaptive services interfaces and service sets.
interface interface-name—(Optional) Display CPU usage for a particular interface. On

M-series and T-series routing platforms, the interface-name can be
sp-fpc/pic/port or rspnumber. On the J-series routing platform, the
interface-name is sp-pim/0/port.
service-set service-set-name—(Optional) Display CPU usage for a particular service

set. For the Layer 2 Tunneling Protocol (L2TP), you can use a tunnel group to
represent a service set.
List of Sample Output show services service-sets cpu-usage on page 713
Output Fields Table 194 lists the output fields for the show services service-sets cpu-usage
Table 194: show services service-sets cpu-usage Output Fields

Interface Name of an adaptive services interface.
Service set Name of a service set.
CPU Utilization % Percentage of the CPU resources being used.
show services user@host> show services service-sets cpu-usage

service-sets cpu-usage Interface Service set CPU utilization %
sp-1/3/0 blue 0.00
show services service-sets cpu-usage ! 713

show services service-sets memory-usage
Syntax show services service-sets memory-usage

<zone>
Description Display service set memory usage.
Options none—Display service set memory usage.
interface interface-name—(Optional) Display memory usage for a particular

interface. On M-series and T-series routing platforms, the interface-name can be
service-set service-set-name—(Optional) Display memory usage for a particular

service set. For L2TP, you can use a tunnel group to represent a service set.
zone—(Optional) Display the memory usage zone of the adaptive services interface
or of an individual service set.
List of Sample Output show services service-sets memory-usage on page 714

show services service-sets memory-usage zone on page 714
Output Fields Table 195 lists the output fields for the show services service-sets memory-usage
Table 195: show services service-sets memory-usage Output Fields

Memory Utilization % Percentage of the memory resources being used.
Memory zone Memory zone in which the adaptive services interface is currently
operating:
! Green—All new flows are allowed.
! Yellow—Unused memory is reclaimed. All new flows are allowed.
! Orange—New flows are only allowed for service sets that are using
less than their equal share of memory.
! Red—No new flows are allowed.
show services user@host> show services service-sets memory-usage

service-sets Interface Service set Memory utilization %
memory-usage sp-1/3/0 blue 44
show services user@host> show services service-sets memory-usage zone

service-sets Interface Memory zone
memory-usage zone sp-1/3/0 Green
714 ! show services service-sets memory-usage

Chapter 22: Service Sets Operational Mode Commands
show services service-sets statistics packet-drops
Syntax show services service-sets statistics packet-drops

Description Display the number of dropped packets for service sets exceeding CPU limits or
memory limits.
Options none—Display the number of dropped service sets packets for all adaptive services
interfaces.
interface interface-name—(Optional) Display the number of dropped service sets

packets for a particular interface. On M-series and T-series routing platforms,
the interface-name can be sp-fpc/pic/port or rspnumber. On J-series routing
platforms, the interface-name is sp-pim/0/port.
See Also clear services service-sets statistics packet-drops on page 712
List of Sample Output show services service-sets statistics packet-drops interface on page 715
Output Fields Table 196 lists the output fields for the show services service-sets packet-drops
Table 196: show services service-sets packet-drops Output Fields

CPU limit Drops Number of packets dropped because the service set exceeded the average
CPU limit.
Memory limit Drops Number of packets dropped because the service set exceeded the
memory limit.
Flow limit Drops Number of packets dropped because the service set exceeded the
flow limit.
show services user@host> show services service-sets statistics packet-drops interface sp-1/0/0
service-sets statistics
packet-drops interface Cpu limit Memory limit Flow limit
Interface Service Set Drops Drops Drops
sp-1/0/0 sset1 0 0 0
show services service-sets statistics packet-drops ! 715

show services service-sets summary
Syntax show services service-sets summary

Description Display service set summary information.
Options none—Display service set summary information for all adaptive services interfaces.
interface interface-name—(Optional) Display service set summary information for a

List of Sample Output show services service-sets summary on page 716

show services service-sets summary interface on page 716
Output Fields Table 197 lists the output fields for the show services service-sets summary
Table 197: show services service-sets summary Output Fields

Service type Type of adaptive service, such as stateful firewall (SFW), Network
Address Translation (NAT), Intrusion Detection Services (IDS), Layer 2
Tunneling Protocol (L2TP), Compressed Real-Time Transport Protocol
(CRTP), or IP Security (IPSec).
Service sets configured Total number of service sets configured on the PIC that use internal
service set IDs and do not consume external service sets, including
CRTP and L2TP.
Bytes used Bytes used by a particular service, or all services.
Policy bytes used Policy bytes used by a particular service, or all services.
CPU utilization Percentage of the CPU resources being used.
show services user@host> show services service-sets summary

service-sets summary Service sets CPU
Interface configured Bytes used Policy bytes used utilization
sp-1/3/0 3 170 ( 0.00 %) 3116 ( 0.02 %) 0.00 %
rsp0 3 798 ( 0.00 %) 2772 ( 0.01 %) 0.00 %
show services user@host> show services service-sets summary interface sp-1/3/0

service-sets summary Interface: sp-1/3/0
interface Service sets CPU
Service type configured Bytes used utilization
SFW/NAT/IDS 1 54 ( 0.00 %) 0.00 %
L2TP 1 58 ( 0.00 %) 0.00 %
CRTP 1 58 ( 0.00 %) 0.00 %
System 0 920831 ( 0.44 %) 0.04 %
Idle 0 0 ( 0.00 %) 99.95 %
Total 3 921001 ( 0.44 %) 99.99 %
716 ! show services service-sets summary

Chapter 23
Stateful Firewall Operational Mode
Commands
monitor and troubleshoot stateful firewall services. Commands are listed in
alphabetical order.
Table 198: Stateful Firewall Services Operational Mode Commands
Task Command
Clear stateful firewall flows. clear services stateful-firewall flows on page 718
Clear stateful firewall Session Initiation Protocol clear services stateful-firewall sip-call on page 721
(SIP) call information.
Clear stateful firewall SIP register information. clear services stateful-firewall sip-register on page 724
Clear stateful firewall statistics. clear services stateful-firewall statistics on page 727
Display stateful firewall conversation information. show services stateful-firewall conversations on page 728
Display stateful firewall flow information. show services stateful-firewall flows on page 732
Display stateful firewall SIP call information. show services stateful-firewall sip-call on page 736
Display stateful firewall SIP register information. show services stateful-firewall sip-register on page 740
Display stateful firewall statistics. show services stateful-firewall statistics on page 744
Display statistics information for the application show services stateful-firewall statistics application-protocol sip on page 750
protocol SIP.
NOTE: Stateful firewall services are supported on the adaptive services interface on
the following routing platforms:
Stateful firewall services are also supported on the redundant adaptive services
interface (rspnumber) on M-series and T-series routing platforms. For information
about how to configure stateful firewall services, see the JUNOS Services Interfaces
! 717
clear services stateful-firewall flows
Syntax clear services stateful-firewall flows

<application-protocol protocol>
<destination-port destination-port>
<destination-prefix destination-prefix>
<protocol protocol>
<source-port source-port>
<source-prefix source-prefix>
Description Clear stateful firewall flows.
Options none—Clear all stateful firewall flows.
application-protocol—(Optional) Clear stateful firewall flows for one of the following

application protocols:
! bootp—Bootstrap protocol
! dce-rpc—Distributed Computing Environment-Remote Procedure Call

protocols
! dce-rpc-portmap—Distributed Computing Environment-Remote Procedure

Call protocols portmap service
! dns—Domain Name System protocol
! exec—Exec
! h323—H.323 standards
! iiop—Internet Inter-ORB Protocol
! login—Login
! netbios—NetBIOS
! netshow—NetShow
! realaudio—RealAudio
! rpc—Remote Procedure Call protocol
! rpc-portmap—Remote Procedure Call protocol portmap service
! rtsp—Real-Time Streaming Protocol
! shell—Shell
718 ! clear services stateful-firewall flows

Chapter 23: Stateful Firewall Operational Mode Commands
! sip—Session Initiation Protocol
! snmp—Simple Network Management Protocol
! sqlnet—SQLNet
! tftp—Trivial File Transfer Protocol
! traceroute—Traceroute
! winframe—WinFrame
destination-port destination-port—(Optional) Clear stateful firewall flows for a

particular destination port. The range of values is 0 to 65535.
destination-prefix destination-prefix—(Optional) Clear stateful firewall flows for a

particular destination prefix.
interface interface-name—(Optional) Clear stateful firewall flows for a particular

protocol—(Optional) Clear stateful firewall flows for one of the following IP protocol
types:
! number—Numeric protocol value from 0 to 255.
! ah—IPSec Authentication Header protocol
! egp—An exterior gateway protocol
! esp—IPSec Encapsulating Security Payload protocol
! gre—A generic routing encapsulation protocol
! ipip—IP-within-IP Encapsulation Protocol
! ospf—Open Shortest Path First protocol
! pim—Protocol Independent Multicast protocol
! rsvp—Resource Reservation Protocol
! sctp—Stream Control Protocol
clear services stateful-firewall flows ! 719

service-set service-set—(Optional) Clear stateful firewall flows for a particular service

set.
source-port source-port—(Optional) Clear stateful firewall flows for a particular

source port. The range of values is 0 to 65535.
source-prefix source-prefix—(Optional) Clear stateful firewall flows for a particular

source prefix.
See Also show services stateful-firewall flows on page 732
List of Sample Output clear services stateful-firewall flows on page 720
Output Fields Table 199 lists the output fields for the clear services stateful-firewall flows
Table 199: clear services stateful-firewall flows Output Fields

Service set Name of the service set from which flows are being cleared.
Flow removed Number of flows removed.
clear services user@host> clear services stateful-firewall flows

stateful-firewall flows Interface Service set Flow removed
sp-0/3/0 svc_set_trust 0
sp-0/3/0 svc_set_untrust 0
720 ! clear services stateful-firewall flows

clear services stateful-firewall sip-call
Syntax clear services stateful-firewall sip-call

<protocol protocol>
Description Clear Session Initiation Protocol (SIP) call information in stateful firewall flows.
Options none—Clear stateful firewall statistics for all interfaces and all service sets.
application-protocol—(Optional) Clear information about one of the following

! bootp—(SIP only) Bootstrap protocol
! dce-rpc—(SIP only) Distributed Computing Environment-Remote Procedure

Call protocols
! dce-rpc-portmap—(SIP only) Distributed Computing Environment-Remote

Procedure Call protocols portmap service
! dns—(SIP only) Domain Name System protocol
! exec—(SIP only) Exec
! ftp—(SIP only) File Transfer Protocol
! login—Login
! netbios—NetBIOS
! netshow—NetShow
! shell—Shell
clear services stateful-firewall sip-call ! 721

! sqlnet—SQLNet
destination-port destination-port—(Optional) Clear information for a particular

destination port. The range of values is 0 to 65535.
destination-prefix destination-prefix—(Optional) Clear information for a particular

destination prefix.
interface interface-name—(Optional) Clear information for a particular adaptive

services interface. On M-series and T-series routing platforms, the
protocol—(Optional) Clear information about one of the following IP protocol types:
! ipv6—IPv6 within IP
722 ! clear services stateful-firewall sip-call

service-set service-set—(Optional) Clear information for a particular service set.
source-port source-port—(Optional) Clear information for a particular source port.

The range of values is 0 to 65535.
source-prefix source-prefix—(Optional) Clear information for a particular source

prefix.
See Also show services stateful-firewall sip-call on page 736
List of Sample Output clear services stateful-firewall sip-call on page 723
Output Fields Table 200 lists the output fields for the clear services stateful-firewall sip-call
Table 200: clear services stateful-firewall sip-call Output Fields

SIP calls removed Number of SIP calls removed.
clear services user@host> clear services stateful-firewall sip-call

stateful-firewall sip-call Interface Service set SIP calls removed
sp-0/3/0 test_sip_777 1
clear services stateful-firewall sip-call ! 723

clear services stateful-firewall sip-register
Syntax clear services stateful-firewall sip-register

<protocol protocol>
Description Clear Session Initiation Protocol (SIP) register information in stateful firewall flows.
Options application-protocol—(Optional) Clear information about one of the following


Call protocols

! login—Login
! netbios—NetBIOS
! netshow—NetShow
! shell—Shell
724 ! clear services stateful-firewall sip-register

! sqlnet—SQLNet
destination-port destination-port—(Optional) Clear information for a particular

destination-prefix destination-prefix—(Optional) Clear information for a particular

destination prefix.
interface interface—(Optional) Clear information about a particular interface. On

M-series and T-series routing platforms, the interface-name can be
protocol—(Optional) Clear information about one of the following IP protocol types:
clear services stateful-firewall sip-register ! 725

service-set service-set—(Optional) Clear information for a particular service set.
source-port source-port—(Optional) Clear information for a particular source port.

source-prefix source-prefix—(Optional) Clear information for a particular source

prefix.
See Also show services stateful-firewall sip-register on page 740
List of Sample Output clear services stateful-firewall sip-register on page 726
Output Fields Table 201 lists the output fields for the clear services stateful-firewall sip-register
Table 201: clear services stateful-firewall sip-register Output Fields

SIP registration removed Number of SIP registers removed.
clear services user@host> clear services stateful-firewall sip-register

stateful-firewall Interface Service set SIP registration removed
sip-register sp-0/3/0 test_sip_777 1
726 ! clear services stateful-firewall sip-register

clear services stateful-firewall statistics
Syntax clear services stateful-firewall statistics

Description Clear stateful firewall statistics.
Options none—Clear stateful firewall statistics for all interfaces and all service sets.
interface interface-name—(Optional) Clear stateful firewall statistics for the specified

service-set service-set—(Optional) Clear stateful firewall statistics for the specified

service set.
See Also show services stateful-firewall statistics on page 744
List of Sample Output clear services stateful-firewall statistics on page 727
request.
clear services user@host> clear services stateful-firewall statistics

stateful-firewall
statistics
clear services stateful-firewall statistics ! 727

show services stateful-firewall conversations
Syntax show services stateful-firewall conversations

<limit number>
<protocol protocol>
Description Display information about stateful firewall conversations.
Options none—Display standard information about all stateful firewall conversations.
brief | extensive | terse—(Optional) Display the specified level of output.
application-protocol protocol—(Optional) Display information about one of the

following application protocols:

protocols

! exec—Exec
! login—Login
! netbios—NetBIOS
! netshow—NetShow
728 ! show services stateful-firewall conversations

! shell—Shell
! sqlnet—SQLNet
destination-port destination-port—(Optional) Display information for a particular

destination-prefix destination-prefix—(Optional) Display information for a particular

destination prefix.
interface interface-name—(Optional) Display information about a particular

limit number—(Optional) Maximum number of entries to display.
protocol protocol—(Optional) Display information about one of the following IP

protocol types:
! number—Numeric protocol value from 0 to 255
show services stateful-firewall conversations ! 729

service-set service-set—(Optional) Display information for the specific service set.
source-port source-port—(Optional) Display information for a particular source port.

source-prefix source-prefix—(Optional) Display information for a particular source

prefix.
List of Sample Output show services stateful-firewall conversations on page 731

show services stateful-firewall conversations destination-port on page 731
Output Fields Table 202 lists the output fields for the show services stateful-firewall conversations
Table 202: show services stateful-firewall conversations Output Fields

Service set Name of a service set. Individual empty service sets are not displayed, but if to be provided
no service set has any flows, a flow table header is printed for each service
set.
Conversation Information about a group of related flows. to be provided
! ALG Protocol—Application-level gateway protocol.
! Number of initiators—Number of flows that initiated a session.
! Number of responders—Number of flows that responded in a session.
Flow or Flow Prot Protocol used for this flow. to be provided
Source Source prefix of the flow in the format source-prefix:port. to be provided
Destination Destination prefix of the flow. to be provided
State Status of the flow: to be provided

! Drop—Drop all packets in the flow without response.
! Forward—Forward the packet in the flow without looking at it.
! Reject—Drop all packets in the flow with response.
! Watch—Inspect packets in the flow.
Dir Direction of the flow: input (I) or output (O). to be provided
Source NAT Original and translated source addresses are displayed if Network Address to be provided
Translation (NAT) is configured on this particular flow or conversation.
Frm Count Number of frames in the flow. to be provided
Destin NAT Original and translated destination IP addresses are displayed if NAT is to be provided
configured on this particular flow or conversation.
Byte count Number of bytes forwarded in the flow. to be provided
TCP established Whether a TCP connection was established: Yes or No. to be provided
TCP window size Negotiated TCP connection window size, in bytes. to be provided
TCP acknowledge TCP acknowledgment sequence number. to be provided
730 ! show services stateful-firewall conversations

Table 202: show services stateful-firewall conversations Output Fields

TCP tickle Whether TCP inquiry mode is on (enabled or disabled) and the time to be provided
remaining to send the next inquiry, in seconds.
Master flow Flow that initiated the conversation. to be provided
TImeout Lifetime of the flow, in seconds. to be provided
show services user@host> show services stateful-firewall conversations

stateful-firewall Interface: sp-1/3/0, Service set: green
conversations
Conversation: ALG Protocol: any, Number of initiators: 1,
Number of responders: 1
Flow
Prot Source Dest State Dir Frm count
TCP 10.58.255.50:33005-> 10.58.255.178:23 Forward I 13

Source NAT 10.58.255.50:33005-> 10.59.16.100:4000
Destin NAT 10.58.255.178:23 -> 0.0.0.0:4000
Byte count: 918
TCP established, TCP window size: 65535, TCP acknowledge: 2502627025
TCP tickle enabled, 0 seconds,
Master flow, Timeout: 30 seconds
TCP 10.58.255.178:23 -> 10.59.16.100:4000 Forward O 8
show services user@host> show services stateful-firewall conversations destination-port 21

stateful-firewall Interface: sp-0/3/0, Service set: svc_set_trust
conversations
destination-port Interface: sp-0/3/0, Service set: svc_set_untrust
Conversation: ALG protocol: ftp
Number of initiators: 1, Number of responders: 1
Flow State Dir Frm count
TCP 10.50.10.2:2143 -> 10.50.20.2:21 Watch O 0
TCP 10.50.20.2:21 -> 10.50.10.2:2143 Watch I 0
TCP 10.50.20.2:21 -> 10.50.10.2:2143 Watch I 0
show services stateful-firewall conversations ! 731

show services stateful-firewall flows
Syntax show services stateful-firewall flows

<brief | extensive | summary | terse>
<count>
<limit number>
<protocol protocol>
Description Display stateful firewall flow table entries.
Options none—Display standard information about all stateful firewall flows.
brief | extensive | summary | terse—(Optional) Display the specified level of output.
application-protocol protocol—(Optional) Display information about one of the

following application protocols:

protocols

! exec—Exec
! login—Login
! netbios—NetBIOS
! netshow—NetShow
732 ! show services stateful-firewall flows

! shell—Shell
! sqlnet—SQLNet
count—(Optional) Display a count of the matching entries.


destination prefix.

protocol protocol—(Optional) Display information about one of the following IP

protocol types:
! number—Numeric protocol value from 0 to 255
show services stateful-firewall flows ! 733

service-set service-set—(Optional) Display information for a particular service set.


prefix.
See Also clear services stateful-firewall flows on page 718
List of Sample Output show services stateful-firewall flows on page 734

show services stateful-firewall flows count on page 735
show services stateful-firewall flows destination port on page 735
show services stateful-firewall flows source port on page 735
Output Fields Table 203 lists the output fields for the show services stateful-firewall flows
Table 203: show services stateful-firewall flows Output Fields

Interface Name of the interface. to be provided
Service set Name of a service set. Individual empty service sets are not displayed, but if to be provided
no service set has any flows, a flow table header is displayed for each
service set.
Flow Count Number of flows in a session. to be provided
Flow or Flow Prot Protocol used for this flow. to be provided
Source Source prefix of the flow in the format source-prefix:port. to be provided
Dest Destination prefix of the flow. to be provided
State Status of the flow: to be provided

! Drop—Drop all packets in the flow without response.
! Forward—Forward the packet in the flow without looking at it.
! Reject—Drop all packets in the flow with response.
Dir Direction of the flow. It can be input (I) or output (O). to be provided
Frm count Number of frames in the flow. to be provided
show services user@host> show services stateful-firewall flows

stateful-firewall flows Interface: sp-1/3/0, Service set: green
Flow
Prot Source Dest State Dir Frm count
TCP 10.58.255.178:23 -> 10.59.16.100:4000 Forward O
TCP 10.58.255.50:33005-> 10.58.255.178:23 Forward I 1
Source NAT 10.58.255.50:33005-> 10.59.16.100:4000
Destin NAT 10.58.255.178:23 -> 0.0.0.0:4000
734 ! show services stateful-firewall flows

show services user@host> show services stateful-firewall flows count

stateful-firewall flows Interface Service set Flow Count
count
sp-1/3/0 green 2
show services user@router> show services stateful-firewall flows destination-port 21

stateful-firewall flows Interface: sp-0/3/0, Service set: svc_set_trust
destination port Flow State Dir Frm count
Interface: sp-0/3/0, Service set: svc_set_untrust

TCP 10.50.10.2:2143 -> 10.50.20.2:21 Watch O 0
show services user@router> show services stateful-firewall flows source-port 2143

stateful-firewall flows Interface: sp-0/3/0, Service set: svc_set_trust
source port Flow State Dir Frm count
Interface: sp-0/3/0, Service set: svc_set_untrust

TCP 10.50.10.2:2143 -> 10.50.20.2:21 Watch O 0
show services stateful-firewall flows ! 735

show services stateful-firewall sip-call
Syntax show services stateful-firewall sip-call

<limit number>
<protocol protocol>
Description Display stateful firewall Session Initiation Protocol (SIP) call information.
Options count—(Optional) Display a count of the matching entries.
brief—(Optional) Display brief SIP call information.
extensive—(Optional) Display detailed SIP call information.
terse—(Optional) Display terse SIP call information.
application-protocol—(Optional) Display information about one of the following


Call protocols

! login—Login
! netbios—NetBIOS
! netshow—NetShow
736 ! show services stateful-firewall sip-call

! shell—Shell
! sqlnet—SQLNet


destination prefix.
interface interface-name—(Optional) Display information about a particular adaptive

services interface. On M-series and T-series routing platforms, the
protocol—(Optional) Display information about one of the following IP protocol

types:
show services stateful-firewall sip-call ! 737



prefix.
See Also clear services stateful-firewall sip-call on page 721
List of Sample Output show services stateful-firewall sip-call extensive on page 739
Output Fields Table 204 lists the output fields for the show services stateful-firewall sip-call
Table 204: show services stateful-firewall sip-call Output Fields (1 of 2)

Service set Name of a service set. to be provided

From Initiator address. to be provided
To Responder address. to be provided
Call ID SIP call identification string. to be provided
Number of initiator flows Number of control, contact, or media initiator flows. to be provided
Number of responder flows Number of control, contact, or media responder flows. to be provided
protocol Protocol used for this flow. to be provided
source-prefix Source prefix of the flow in the format source-prefix:port. to be provided
destination-prefix Destination prefix of the flow. to be provided
state Status of the flow: to be provided
! Drop—Drop all packets in the flow without a response.
! Forward—Forward the packet in the flow without examining it.
! Reject—Drop all packets in the flow with a response.
! Unknown—Unknown status.
direction Direction of the flow: input (I), output (O), or unknown (U). to be provided
frame-count Number of frames in the flow. to be provided
738 ! show services stateful-firewall sip-call

Table 204: show services stateful-firewall sip-call Output Fields (2 of 2)

Byte count Number of bytes forwarded in the flow. to be provided
Flow role Role of the flow that is under evaluation: Initiator, Master, Responder, or to be provided
Unknown.
Timeout Lifetime of the flow, in seconds. to be provided
show services user@host> show services stateful-firewall sip-call extensive

stateful-firewall sip-call Interface: sp-0/3/0, Service set: test_sip_777
extensive
From: : [email protected]:0;000ff73ac89900021bb231dc-3ef68435
To: : [email protected]:0;0011bb65c2a30007777bd0fc-5748b749
Call ID: : [email protected]
Number of control initiator flows: : 1, Number of control responder flows:
: 1
UDP 10.20.70.2:50354 -> 10.200.100.1:5060 Watch I
2
Byte count: 1112
Flow role: Master, Timeout: 30
UDP 10.200.100.1:5060 -> 10.20.170.111:50354 Watch O
0
Byte count: 0
Flow role: Responder, Timeout: 30
UDP 0.0.0.0:0 -> 10.20.170.111:5060 Watch O
7
Byte count: 2749
Flow role: Responder, Timeout: 30
Number of contact initiator flows: 1, Number of contact responder flows: 1
UDP 0.0.0.0:0 -> 10.20.140.11:5060 Watch I
1
Byte count: 409
UDP 10.20.140.11:31864 -> 10.20.170.111:18808 Forward O
622
Byte count: 124400
UDP 0.0.0.0:0 -> 10.20.170.111:18809 Forward O
0
Byte count: 0
Flow role: Initiator, Timeout: 30
Number of media initiator flows: 4, Number of media responder flows: 0
UDP 10.20.70.2:18808 -> 10.20.140.11:31864 Forward I
628
Byte count: 125600
UDP 0.0.0.0:0 -> 10.20.140.11:31865 Forward I
0
Byte count: 0
0 0.0.0.0:0 -> 0.0.0.0:0 Unknown U
0
Byte count: 0
Flow role: Unknown, Timeout: 0
0 0.0.0.0:0 -> 0.0.0.0:0 Unknown U
Interface: sp-0/3/0, Service set: test_sip_888
show services stateful-firewall sip-call ! 739

show services stateful-firewall sip-register
Syntax show services stateful-firewall sip-register

<limit number>
<protocol protocol>
Description Display stateful firewall Session Initiation Protocol (SIP) register information.
Options count—(Optional) Display a count of the matching entries.
brief—(Optional) Display brief SIP register information.
extensive—(Optional) Display detailed SIP register information.
terse—(Optional) Display terse SIP register information.
application-protocol—(Optional) Display information about one of the following


Call protocols

! login—Login
! netbios—NetBIOS
! netshow—NetShow
740 ! show services stateful-firewall sip-register

! shell—Shell
! sqlnet—SQLNet

destination port.

destination prefix. The range of values is 0 to 65535.

protocol—(Optional) Display information about one of the following IP protocol

types:
show services stateful-firewall sip-register ! 741



prefix.
See Also clear services stateful-firewall sip-register on page 724
List of Sample Output show services stateful-firewall sip-register extensive on page 743
Output Fields Table 205 lists the output fields for the show services stateful-firewall sip-register
Table 205: show services stateful-firewall sip-register Output Fields

SIP Register Register information header. to be provided
Protocol Protocol used for this flow. to be provided

Registered IP Register IP address. to be provided
Port Register port number. to be provided
Expiration timeout Configured lifetime, in seconds. to be provided
Timeout remaining Lifetime remaining, in seconds. to be provided
From Initiator address. to be provided
To Responder address. to be provided
Call ID SIP call identification string. to be provided
742 ! show services stateful-firewall sip-register

show services user@host> show services stateful-firewall sip-register extensive

stateful-firewall Interface: sp-0/3/0, Service set: test_sip_777
sip-register extensive
SIP Register: Protocol: UDP, Registered IP: 10.20.170.111, Port: 5060, Acked
Expiration timeout: 36000, Timeout remaining: 35544
From: : [email protected]:0;
To: : [email protected]:0;
Interface: sp-0/3/0, Service set: test_sip_888
SIP Register: Protocol: UDP, Registered IP: 10.20.170.112, Port: 5060, Acked
Expiration timeout: 36000, Timeout remaining: 35549
From: : [email protected]:0;
To: : [email protected]:0;
show services stateful-firewall sip-register ! 743

show services stateful-firewall statistics
Syntax show services stateful-firewall statistics

<brief | detail | extensive | summary>
Description Display stateful firewall statistics.
Options none—Display standard information about all stateful firewall statistics.
brief | detail | extensive | summary—(Optional) Display the specified level of output.
application-protocol protocol—(Optional) Display stateful firewall statistics for one of

the following application protocols:

protocols

! exec—Exec
! login—Login
! netbios—NetBIOS
! netshow—NetShow
! shell—Shell
744 ! show services stateful-firewall statistics

! sqlnet—SQLNet

interface. On M-series and T-series routing platforms, the interface-type can be
sp-fpc/pic/port or rspnumber. On the J-series routing platform, the interface-type
is sp-pim/0/port.
service-set service-set—(Optional) Display information about a particular service set.
See Also clear services stateful-firewall statistics on page 727
List of Sample Output show services stateful-firewall statistics extensive on page 749
Output Fields Table 206 lists the output fields for the show services stateful-firewall statistics
Table 206: show services stateful-firewall statistics Output Fields (1 of 4)

New flows Rule match counters for new flows: to be provided
! Accept—New flows accepted.
! Discard—New flows discarded.
! Reject—New flows rejected.
Existing flows Rule match counters for existing flows: to be provided

! Accept—Match existing forward or watch flow.
! Discard—Match existing discard flow.
! Reject—Match existing reject flow.
Drops Drop counters: to be provided

! IP option—Packets dropped in IP options processing.
! TCP SYN defense—Packets dropped by SYN defender.
! NAT ports exhausted—Hide mode. The router has no available NAT ports
for a given address or pool.
show services stateful-firewall statistics ! 745


Errors Total errors, categorized by protocol: to be provided
! IP—Total IP version 4 errors.
! TCP—Total Transmission Control Protocol (TCP) errors.
! UDP—Total User Datagram Protocol (UDP) errors.
! ICMP—Total Internet Control Message Protocol (ICMP) errors.
! Non-IP—Total non-IPv4 errors.
! ALG—Total application-level gateway (ALG) errors.
IP Errors IPv4 errors: to be provided

! IP packet length inconsistencies—IP packet length does not match the
Layer 2 reported length.
! Minimum IP header length check failures—Minimum IP header length is
20 bytes. The received packet contains less than 20 bytes.
! Reassembled packet exceeds maximum IP length—After fragment
reassembly, the reassembled IP packet length exceeds 65,535.
! Illegal source address—Source address is not a valid address. Invalid
addresses are 0, loopback, broadcast, multicast, and reserved addresses.
Source address 0, however, is allowed to support BOOTP and the
destination address 0xffffffff.
! Illegal destination address—Destination address is not a valid address.
The 0 address is reserved.
! TTL zero errors—Received packet had a time-to-live (TTL) value of 0.
! IP protocol number 0 or 255—IP protocol is 0 or 255.
! Land attack—IP source address is the same as the destination address.
! Smurf attack—Echo request is sent to a directed broadcast address.
! Non-IP packets—Packet did not conform to the IP standard.
! IP option—Packet dropped because of a nonallowed IP option.
! Non-IPv4 packets—Packet was not IPv4. (Only IPv4 is supported.)
! Bad checksum—Packet had an invalid IP checksum.
! Illegal IP fragment length—Illegal fragment length. All fragments (other than
the last fragment) must have a length that is a multiple of 8 bytes.
! IP fragment overlap—Fragments have overlapping fragment offsets.
! IP fragment reassembly timeout—Some of the fragments for an IP packet
were not received in time, and the reassembly handler dropped partial
fragments.


TCP Errors TCP protocol errors: to be provided
! TCP header length inconsistencies—Minimum TCP header length is
20 bytes, and the IP packet received does not contain at least 20 bytes.
! Source or destination port number is zero—TCP source or destination port is
zero.
! Illegal sequence number, flags combination—Dropped because of TCP
errors, such as an illegal sequence number, which causes an illogical
combination of flags to be set.
! SYN attack (multiple SYN messages seen for the same flow)—Multiple SYN
packets received for the same flow are treated as a SYN attack. The packets
might be retransmitted SYN packets and therefore valid, but a large
number is cause for concern.
! First packet not SYN—First packets for a connection are not SYN packets.
These packets might originate from previous connections or from
someone performing an ACK/FIN scan.
! TCP port scan (Handshake, RST seen from server for SYN)—In the case of a
SYN defender, if an RST (reset) packet is received instead of a SYN/ACK
message, someone is probably trying to scan the server. This behavior can
result in false alarms if the RST packet is not combined with an intrusion
detection service (IDS).
! Bad SYN cookie response—SYN cookie generates a SYN/ACK message for
all incoming SYN packets. If the ACK received for the SYN/ACK message
does not match, this counter is incremented.
UDP Errors UDP protocol errors: to be provided
! IP data length less than minimum UDP header length (8 bytes)—Minimum
UDP header length is 8 bytes. The received IP packets contain less than
8 bytes.
! Source or destination port is zero—UDP source or destination port is 0.
! UDP port scan (ICMP error seen for UDP flow)—ICMP error is received for a
UDP flow. This could be a genuine UDP flow, but it is counted as an error.
ICMP Errors ICMP protocol errors: to be provided
! IP data length less than minimum ICMP header length (8 bytes)—ICMP header
length is 8 bytes. This counter is incremented when received IP packets
contain less than 8 bytes.
! ICMP error length inconsistencies—Minimum length of an ICMP error packet
is 48 bytes, and the maximum length is 576 bytes. This counter is
incremented when the received ICMP error falls outside this range.
! Ping duplicate sequence number—Received ping packet has a duplicate
sequence number.
! Ping mismatched sequence number—Received ping packet has a
mismatched sequence number.


ALG drops Accumulation of all the application-level gateway protocol (ALG) drops to be provided
counted separately in the ALG context:
! BOOTP—Bootstrap protocol errors
-
! DCE-RPC—Distributed Computing Environment Remote Procedure Call
protocols errors
! DCE-RPC portmap—Distributed Computing Environment Remote-
Procedure Call protocols portmap service errors
! DNS—Domain Name System protocol errors
! Exec—Exec errors
! FTP—File Transfer Protocol errors
! H323—H.323 standards errors
! ICMP—Internet Control Message Protocol errors
! IIOP—Internet Inter-ORB Protocol errors
! Login—Login errors
! Netbios—NetBIOS errors
! Netshow—NetShow errors
! Realaudio—RealAudio errors
! RPC—Remote Procedure Call protocol errors
! RPC portmap—Remote Procedure Call protocol portmap service errors
! RTSP—Real-Time Streaming Protocol errors
! Shell—Shell errors
! SNMP—Simple Network Management Protocol errors
! Sqlnet—SQLNet errors
! TFTP—Trivial File Transfer Protocol errors
! Traceroute—Traceroute errors

show services user@host> show services stateful-firewall statistics extensive

stateful-firewall Interface: sp-1/3/0
statistics extensive Service set: interface-svc-set
New flows:
Accept: 907, Discard: 0, Reject: 0
Existing flows:
Accept: 3535, Discard: 0, Reject: 0
Drops:
IP option: 0, TCP SYN defense: 0
NAT ports exhausted: 0
Errors:
IP: 0, TCP: 0
UDP: 0, ICMP: 0
Non-IP packets: 0, ALG: 0
IP errors:
IP packet length inconsistencies: 0
Minimum IP header length check failures: 0
Reassembled packet exceeds maximum IP length: 0
Illegal source address: 0
Illegal destination address: 0
TTL zero errors: 0, IP protocol number 0 or 255: 0
Land attack: 0, Smurf attack: 0
Non IP packets: 0, IP option: 0
Non-IPv4 packets: 0, Bad checksum: 0
Illegal IP fragment length: 0
IP fragment overlap: 0
IP fragment reassembly timeout: 0
TCP errors:
TCP header length inconsistencies: 0
Source or destination port number is zero: 0
Illegal sequence number, flags combination: 0
SYN attack (multiple SYNs seen for the same flow): 0
First packet not SYN: 0
TCP port scan (Handshake, RST seen from server for SYN): 0
Bad SYN cookie response: 0
UDP errors:
IP data length less than minimum UDP header length (8 bytes): 0
Source or destination port is zero: 0
UDP port scan (ICMP error seen for UDP flow): 0
ICMP errors:
IP data length less than minimum ICMP header length (8 bytes): 0
ICMP error length inconsistencies: 0
Ping duplicate sequence number: 0
Ping mismatched sequence number: 0
ALG drops:
BOOTP: 0, DCE-RPC: 0, DCE-RPC portmap: 0
DNS: 0, Exec: 0, FTP: 0
H323: 0, ICMP: 0, IIOP: 0
Login: 0, Netbios: 0, Netshow: 0
Realaudio: 0, RPC: 0, RPC portmap: 0
RTSP: 0, Shell: 0
SNMP: 0, Sqlnet: 0, TFTP: 0
Traceroute: 0

show services stateful-firewall statistics application-protocol sip
Syntax show services stateful-firewall application-protocol sip
Description Display stateful firewall Session Initiation Protocol (SIP) statistics.
List of Sample Output show services stateful-firewall statistics application-protocol-sip on page 751
Output Fields Table 207 lists the output fields for the show services stateful-firewall statistics
application-protocol-sip command. Output fields are listed in the approximate order
in which they appear.
Table 207: show services stateful-firewall statistics application-protocol-sip
Output Fields
Service set Name of the service set flow.
ALG Name of the application-layer gateway.
Active SIP call count Number of active SIP calls.
Active SIP registration count Number of active SIP registrations.
REGISTER Number of new, invalid, and retransmitted register requests sent
to the SIP registrar.
INVITE Number of new, invalid, and retransmitted invite messages sent
by user agent clients.
ReINVITE Number of new, invalid, and retransmitted reinvite messages sent
by user agent clients.
ACK Number of new, invalid, and retransmitted ACK messages
received (in response to a SIP Call Invite message).
BYE Number of new, invalid, and retransmitted requests to terminate
SIP dialogues.
CANCEL Number of new, invalid, and retransmitted SIP request
cancellations.
SUBSCRIBE Number of new, invalid, and retransmitted SIP requests to
subscribe for event notifications.
NOTIFY Number of new, invalid, and retransmitted event notifications in
SIP dialogues.
OPTIONS Number of new, invalid, and retransmitted requests to query SIP
capabilities.
INFO Number of new, invalid, and retransmitted requests carrying
application-level information.
UPDATE Number of new, invalid, and retransmitted SIP dialogue updates.
REFER Number of new, invalid, and retransmitted requests to the
recipient to contact a third party.
750 ! show services stateful-firewall statistics application-protocol sip

Table 207: show services stateful-firewall statistics application-protocol-sip

Output Fields
Provisional responses Number of new, invalid, and retransmitted responses from the
user agent server to indicate the progress of a SIP transaction.
OK responses to INVITEs OK responses sent from the user agent clients to user agent
servers in response to Invite messages. The server can then return
an ACK message.
OK responses to non-INVITES OK responses to SIP messages other than an Invite message.
Redirection responses Responses from the user agent server to a user agent client
requesting the client to contact a different SIP uniform resource
identifier (URI).
Request failure responses Responses that indicate a definite failure from a particular server.
The client must not retry the same request without modification
after receiving this response.
Server failure responses Responses that indicate a server failure.
Global failure responses Responses that indicate a server has definitive information about
a particular user, not just the particular instance indicated in the
Request URI.
Invalid responses Responses that are invalid.
Response (all) retransmits Retransmissions of all responses.
Parser Syntax errors, content errors, and unknown methods counted by
the message parser.
show services user@host> show services stateful-firewall statistics application-protocol sip

stateful-firewall Interface: sp-0/3/0
statistics Service set: test_sip_777, ALG: SIP
application-protocol-sip Active SIP call count: 0, Active SIP registration count: 1
New Invalid Retransmit
REGISTER 2
INVITE 1 0
ReINVITE 1
ACK 1 0 0
BYE 0 0
CANCEL 0 0
SUBSCRIBE 0 0
NOTIFY 0 0
OPTIONS 0 0
INFO 0 0
UPDATE 0 0
REFER 0 0
Provisional responses (18x): 1, OK responses to INVITEs: 2
OK responses to non-INVITEs: 2, Redirection (3xx) responses: 0
Request failure (4xx) responses: 0, Server failure (5xx) responses: 0
Global failure (6xx) responses: 0, Invalid responses: 0
Response (all) retransmits: 0
Parser:
Syntax errors: 0, Content errors: 0, Unknown methods: 0
Service set: test_sip_888, ALG: SIP
Active SIP call count: 0, Active SIP registration count: 1
New Invalid Retransmit
REGISTER 2
INVITE 0 0
ReINVITE 0
ACK 0 0 0
show services stateful-firewall statistics application-protocol sip ! 751

BYE 0 0
CANCEL 0 0
SUBSCRIBE 0 0
NOTIFY 0 0
OPTIONS 0 0
INFO 0 0
UPDATE 0 0
REFER 0 0
Provisional responses (18x): 0, OK responses to INVITEs: 0
OK responses to non-INVITEs: 2, Redirection (3xx) responses: 0
Request failure (4xx) responses: 0, Server failure (5xx) responses: 0
Global failure (6xx) responses: 0, Invalid responses: 0
Response (all) retransmits: 0
Parser:
Syntax errors: 0, Content errors: 0, Unknown methods: 0
752 ! show services stateful-firewall statistics application-protocol sip

Part 5
Indexes
! Index on page 755
! Index of Commands on page 765
Indexes ! 753
754 ! Indexes
Index
A E1 test
aborting partitioning operation..................................361 starting ................................................................26
accounting profiles stopping ...............................................................27
records, displaying ..................................................86 E3 test
status, displaying .....................................................82 starting ................................................................28
active flow monitoring stopping ...............................................................29
aggregated flows, displaying................................588 T1 test
available PICs, displaying .....................................599 starting ................................................................37
CPU usage, displaying ..........................................600 stopping ...............................................................38
error statistics, displaying ....................................591 T3 test
flow statistics, displaying .....................................593 starting ................................................................39
flows, detailed information, displaying ..............594 stopping ...............................................................40
memory statistics, displaying ..............................597 bit error rate test See BERT
packet size distribution, displaying .....................598 boot messages, displaying ..........................................403
adaptive shapers, displaying ......................................511 buffers, displaying system ..........................................406
Address Resolution Protocol See ARP
aggregated flows, displaying ......................................588 C
alarms, displaying CB
chassis ....................................................................113 environmental information, displaying ..............131
health monitor .......................................................313 Ethernet switch, displaying port information ....159
RMON .....................................................................323 operation of, controlling .........................................93
system ....................................................................397 SPMB operation, restarting ..................................108
/altconfig directory.......................................................368 certificates
/altroot directory ..........................................................368 for IKE negotiation, displaying ............................674
archival configuration installed, displaying ..............................................686
displaying ...............................................................410 key pairs, generating ............................................642
archiving files ...............................................................245 PKI
arithmetic and relational operators CA certificates, clearing ...................................632
for monitor traffic command .................................65 CA certificates, displaying ...............................665
ARP table CA certificates, loading manually ...................644
clearing ...................................................................337 certificate revocation lists, clearing ...............634
displaying ...............................................................389 certificate revocation lists, displaying............670
associations, clearing ..................................................639 certificate revocation lists, loading
ATM nodes, reachability ..................................................7 manually........................................................645
authorization See permissions key pair, generating .........................................648
autoinstallation, displaying the status of...................402 local certificates, clearing ................................635
local certificates, displaying ............................672
B local certificates, loading manually ................651
backing up partitions ..................................................368 local certificates, requesting manually ..........646
backup JUNOS software files, deleting ......................378 local certificates, requesting online ...............643
backup software, displaying information..................440 local certificates, requesting that
BERT CA install .......................................................649
DS0 test local certificates, requests, clearing ...............633
starting ................................................................24 local certificates, requests, displaying ...........668
stopping ..............................................................25
Index ! 755
provided by Juniper Networks, adding............... 654 CLNS node reachability, checking .................................8
signed certificate, obtaining ................................ 640 commit operations, pending
unsigned certificate, obtaining ............................ 641 clearing ...................................................................338
CFEB displaying ...............................................................408
operation, controlling ............................................. 94 comparing files ............................................................247
statistics, displaying .............................................. 261 completing partial command entry ..........................227
status, displaying .................................................. 115 Compressed Real-Time Transport Protocol
chassis See CRTP
alarm conditions, displaying ............................... 113 compressing files .........................................................245
craft interface display messages /config directory ...........................................................368
clearing the display of ....................................... 92 configuration
displaying.......................................................... 111 deleting rescue configuration ..............................351
displaying through the CLI .............................. 117 displaying
stopping the display of .................................... 111 archival configuration ......................................410
environmental information, displaying.............. 122 CoS .....................................................................509
Ethernet switch information, displaying ............ 159 current configuration .......................................391
firmware version, displaying ............................... 176 previous configuration ....................................430
forwarding process, displaying ........................... 178 rescue configuration ........................................411
installed hardware, displaying............................. 183 saving rescue configuration .................................352
location, displaying ............................................... 200 syntax, verifying....................................................503
MAC addresses, displaying .................................. 202 configuration mode, entering.....................................344
serial numbers, displaying ................................... 183 conflicting IP addresses, displaying ...........................433
switch fabric status connections
FPCs, displaying ............................................... 165 IP sockets, displaying active ................................412
SIBs, displaying ................................................ 168 SSH, opening .........................................................306
switch fabric topology, displaying ...................... 171 testing
synchronization source information, ATM connections .................................................7
displaying ........................................................... 223 CLNS connections ................................................8
checksum general connections.............................................4
calculating for a file .............................................. 246 MPLS Layer 2 circuit connections ....................10
displaying values for all files ................................ 398 MPLS Layer 2 VPN connections .......................12
class of service See CoS MPLS Layer 3 VPN connections .......................14
cleanup, storage space ................................................ 383 MPLS LDP connections .....................................16
CLI MPLS LSP-endpoint connections ......................18
command completion .......................................... 227 MPLS RSVP connections ...................................20
command history content destination, displaying ..................................601
displaying.......................................................... 242 Control Board See CB
current working directory control source, displaying ...........................................602
displaying.......................................................... 241 conventions, documentation ........................................ xx
setting ................................................................ 228 copying
date files..........................................................................249
setting ................................................................ 237 CoS
exiting to create UNIX-level shell ........................ 502 adaptive shaper information, displaying ............511
idle timeout, setting .............................................. 229 configuration, displaying ......................................509
logical router view, clearing ................................. 226 forwarding table, displaying
logical routing instance, setting........................... 230 classifier information .......................................523
permissions, displaying ........................................ 239 code point value to loss priority .....................522
prompt, setting ...................................................... 231 code point value to loss priority, J-series ......527
restart, after software upgrade ............................ 232 code point value to queue number ................522
screen length, setting ........................................... 233 configuration ....................................................520
screen width, setting ............................................ 234 loss priority table indexes, J-series ................528
settings, displaying ............................................... 238 RED drop profiles.............................................524
terminal type, setting ........................................... 235 rewrite rules ......................................................529
timestamp, setting ................................................ 236 rewrite rules, table identifiers ........................530
756 ! Index
Index
scheduler map for switch fabric .....................526 DHCP

scheduler map information ............................531 address bindings
fragmentation map, displaying ...........................533 clearing ..............................................................341
interfaces, displaying ............................................534 displaying ..........................................................431
mapping, displaying address conflicts
code point aliases to bit patterns ...................514 clearing ..............................................................342
code point value to forwarding class .............512 displaying ..........................................................433
code point value to loss priority .....................512 address pools, displaying .....................................435
code point value to loss priority, J-series ......536 address statistics
CoS objects to routing instances ....................539 clearing ..............................................................343
forwarding classes to queue numbers ...........519 displaying ..........................................................437
schedulers to forwarding classes ...................540 global settings, displaying ....................................434
schedulers to switch fabric priority ...............516 digital certificates See certificates
RED profile information, displaying ...................515 Direct Memory Access See DMA
rewrite rules, displaying .......................................537 directories
routing instance information, displaying ...........539 usage information, displaying .............................415
scheduler map information, displaying ..............540 working, displaying ...............................................241
scheduler parameters, displaying .......................516 disk space available, displaying .................................475
switch fabric queue statistics, displaying ...........517 DLSw
traffic-control profile information, displaying ...542 circuits, displaying.................................................562
virtual channel group information, peers
displaying............................................................544 addresses, displaying .......................................566
virtual channel information, displaying .............543 capabilities, displaying ....................................561
CoS services status, displaying ..............................................564
clear statistics ........................................................554 DMA statistics, displaying ...........................................287
mapping, displaying DNS hostnames, displaying ........................................393
code point aliases to bit patterns ...................555 documentation conventions .........................................xx
craft interface display messages Domain Name System See DNS
clearing .....................................................................92 drop profiles, displaying data points .........................515
displaying dynamic flow capture
on the craft interface display ..........................111 content destination, displaying ...........................601
through the CLI.................................................117 control source, displaying ....................................602
stopping ..................................................................111 statistics
CRTP services clearing ..............................................................575
flows, displaying....................................................551 displaying ..........................................................604
output, displaying..................................................549 Dynamic Host Configuration Protocol See DHCP
statistics, clearing ..................................................548
current time, displaying ..............................................479 E
current working directory environmental information
displaying ...............................................................241 CB, displaying ........................................................131
setting .....................................................................228 chassis, displaying .................................................122
customer support FPC, displaying ......................................................134
contacting.............................................................. xxiv FPM, displaying .....................................................138
system information, displaying ...........................348 MCSs, displaying ...................................................141
PCGs, displaying ....................................................143
D PEMs, displaying ...................................................145
data link switching See DLSw Routing Engines, displaying .................................148
date SCG, displaying ......................................................150
setting from CLI .....................................................237 SFM, displaying .....................................................152
deleting SIB, displaying .......................................................155
backup JUNOS file .................................................378 Ethernet switch information, displaying ...................159
files..........................................................................250
software packages .................................................376
Index ! 757
F passive
facilities data link See FDL error statistics, displaying ...............................581
far-end alarm and control See FEAC flow statistics, displaying ................................583
FDL memory and flow statistics, displaying .........585
loopback test, performing ...................................... 30 status, displaying .............................................586
payload loopback test, performing ....................... 31 usage statistics, displaying ..............................587
FEAC forwarding classes, displaying............................519, 555
line loopback test, initiating .................................. 32 forwarding process, displaying ..................................178
line loopback test, terminating.............................. 33 forwarding table
FEB CoS information, displaying
firmware version, displaying ............................... 176 classifier information .......................................523
statistics, displaying .............................................. 264 code point value to loss priority .....................522
status, displaying .................................................. 175 code point value to loss priority, J-series ......527
file systems code point value to queue number ................522
checksum values, displaying ............................... 398 configuration ....................................................520
free disk space, displaying ................................... 475 loss priority per classifier ................................522
partitions, backing up ........................................... 368 loss priority table indexes, J-series ................528
files RED drop profiles.............................................524
archiving ................................................................ 245 rewrite rules ......................................................529
calculating checksum ........................................... 246 scheduler map ..................................................531
comparing .............................................................. 247 switch fabric scheduler map ...........................526
compressing .......................................................... 245 FPC
contents, displaying .............................................. 254 environmental information, displaying ..............134
copying ................................................................... 249 firmware version, displaying ...............................176
deleting................................................................... 250 installed, displaying list ........................................183
list of, displaying ................................................... 251 operation of, controlling .........................................95
log file, clearing ..................................................... 244 statistics, displaying ..............................................267
renaming ................................................................ 253 status, displaying ...................................................179
status of, displaying ................................................ 59 switch fabric status, displaying ...........................165
firmware FPM
chassis, displaying ................................................ 176 environmental information, displaying ..............138
system, displaying ................................................ 417 resychronizing craft interface status.....................96
upgrading J-series PIMs ........................................ 353 fragmentation map
flow collector services CoS information, displaying ................................533
interface files, displaying ..................................... 606 free disk space, displaying ..........................................475
packets received, displaying ................................ 608 freeing up storage space .............................................383
primary server, switching to................................ 578 Front Panel Module See FPM
secondary server, switching to............................ 579
statistics G
displaying.......................................................... 609 graceful switchover, displaying ..................................477
dropped-packet, clearing ................................ 712
interface, clearing ............................................ 577 H
test file, transferring ............................................. 580 halts
flow monitoring pending
active clearing ..............................................................339
aggregated flows, displaying .......................... 588 displaying ..........................................................429
CPU usage, displaying ..................................... 600 requesting ..............................................................354
detailed information, displaying .................... 594 hard disk
error statistics, displaying ............................... 591 partitioning
flow statistics, displaying ................................ 593 aborting .............................................................361
memory statistics, displaying ......................... 597 requesting .........................................................362
packet size distribution, displaying ............... 598 hardware, installed, displaying...................................183
PICs, displaying available ............................... 599 health monitor alarms, displaying .............................313
758 ! Index
Index
history, CLI commands IPSec security associations, clearing..............639

displaying ...............................................................242 IPSec security associations, displaying..........680
hostnames, DNS, displaying.......................................393 IPSec statistics, clearing ..................................638
hosts, reachability IPSec statistics, displaying ..............................683
ATM connections.......................................................7 encryption services interfaces
general connections ..................................................4 backup and primary, switching interfaces ....652
MPLS Layer 2 circuits .............................................10 backup and primary, switching services .......652
MPLS Layer 2 VPN connections ............................12 certificate database, displaying ......................659
MPLS Layer 3 VPN connections ............................14 IKE security associations, clearing .................630
MPLS LDP LSPs .......................................................16 IKE security associations, displaying .............655
MPLS LSP endpoints ...............................................18 IPSec security associations, clearing..............631
MPLS RSVP LSPs .....................................................20 IPSec security associations, displaying..........662
redundancy information, displaying .............661
I
I/O statistics, routing protocol tasks, displaying .......492 J
icons defined, notice .................................................... xix JUNOS software
idle timeout alarms, displaying .................................................397
user, setting ...........................................................229 autoinstallation status, displaying .......................402
IDS events backup files, deleting ............................................378
clearing boot messages, displaying ...................................403
for a destination ...............................................617 buffers, displaying .................................................406
for interfaces and services ..............................616 bundles, deleting ...................................................376
for source addresses ........................................619 checksum values, displaying................................398
for source and destination pairs ....................618 directory usage, displaying ..................................415
displaying ...............................................................620 disk space, displaying ...........................................475
IKE halt, requesting a ...................................................354
adaptive services interfaces loaded extensions, displaying ..............................441
security associations, clearing ........................637 packages, deleting .................................................376
security associations, displaying ....................677 pending reboots
statistics, clearing .............................................638 clearing ..............................................................339
encryption services interfaces displaying ..........................................................429
security associations, clearing ........................630 powering off ...........................................................363
security associations, displaying ....................655 processes, displaying ............................................421
installing software........................................................372 queue statistics, displaying ..................................427
interface diagnostics operational mode rebooting ................................................................365
commands............................................................23–40 rolling back.............................................................379
interface statistics, real-time, displaying .....................52 SDX client, displaying ...........................................439
Internet Key Exchange See IKE system statistics, displaying .................................443
intrusion detection service See IDS tasks, displaying
IP addresses I/O statistics ......................................................492
conflicting, displaying ...........................................433 memory usage ..................................................494
removing from DHCP server conflict list ...........342 protocol .............................................................490
IP multicast upgrading ...............................................................372
tracing routes uptime, displaying .................................................479
from the receiver to the source ........................67 validating candidate ..............................................381
from the source to the gateway router ............72 version, displaying
from the source to the receiver ........................68 for two Routing Engines ..................................498
listen for responses ............................................71 general ...............................................................497
IP sockets, displaying active .......................................412 virtual memory, displaying ..................................483
IPSec services
adaptive services interfaces K
backup and primary, switching tunnels ........653 kernel memory usage, displaying ..............................483
IKE security associations, clearing .................637 kernel replication state, displaying ............................477
IKE security associations, displaying .............677 key pair for digital certificate, generating .................642
Index ! 759
keyboard sequences MCS

used with monitor interface command................ 52 environmental information, displaying ..............141
used with monitor interface traffic command .... 53 operation of, controlling .........................................98
used with monitor mpls command ...................... 56 MD5 checksum, calculating .......................................246
memory, displaying for tasks .....................................494
L messages
L2TP services boot, displaying .....................................................403
multilink sessions user screens, displaying on ..................................346
clearing.............................................................. 690 MIBs
displaying.......................................................... 694 SNMP object values, displaying ...........................321
sessions Miscellaneous Control Subsystem See MCS
clearing.............................................................. 691 MPLS
displaying.......................................................... 696 Layer 2 circuit connections
summary information, displaying ...................... 700 operability, checking .........................................10
tunnel statistics, clearing ...................................... 693 Layer 2 VPN connections
tunnels, displaying ................................................ 701 operability, checking .........................................12
user information, displaying................................ 704 Layer 3 VPN connections
Layer 2 circuits operability, checking .........................................14
reachability, testing ................................................ 10 LDP-signaled LSP connections
Layer 2 Tunneling Protocol See L2TP operability, checking .........................................16
Layer 2 VPNs LSP endpoint connections
reachability, testing ................................................ 12 operability, checking .........................................18
Layer 3 VPNs
reachability, testing ................................................ 14 N
licenses NAT, status information, displaying ...........................708
adding ..................................................................... 357 Network Time Protocol See NTP
deleting................................................................... 358 next hops
displaying ............................................................... 418 PFE, displaying ......................................................275
saving ..................................................................... 359 notice icons defined ..................................................... xix
line-card chassis notification statistics, displaying for PFE ..................298
operation, controlling ............................................. 97 NTP
status, displaying .................................................. 199 peer status, displaying ..........................................394
location, chassis........................................................... 200 peer values, displaying .........................................396
log files
clearing contents of .............................................. 244 O
contents, displaying .............................................. 256 op scripts, executing ...................................................345
display of operational mode scripts, executing .........................345
starting ................................................................ 60 output control keys
stopping .............................................................. 61 for monitor interface command............................52
status, displaying .................................................... 59 for monitor interface traffic command ................53
logging out users ......................................................... 360 for monitor mpls command ..................................56
logical operators
for monitor traffic command ................................ 64 P
logical router view, clearing ........................................ 226 Packet Forwarding Engine clock generator See PCG
login, specifying a Routing Engine ............................ 347 Packet Forwarding Engine See PFE
logout, users ................................................................. 360 packet headers, transmitted, displaying .....................62
LSPs packet size distribution, displaying ...........................598
RSVP, real-time status ............................................ 56 partial command entry, completing ..........................227
partitioning the hard disk
M aborting ..................................................................361
MAC addresses requesting ..............................................................362
displaying ............................................................... 202 partitions, backing up .................................................368
match conditions
for monitor traffic command ................................ 63
760 ! Index
Index
passive flow monitoring Q

error statistics, displaying ....................................581 queues
flow statistics, displaying .....................................583 CoS switch fabric statistics, displaying ...............517
memory statistics, displaying ..............................585 forwarding class mapping, displaying ................519
PICs, displaying available .....................................586 statistics, displaying ..............................................427
statistics, clearing ..................................................576
usage statistics, displaying ...................................587 R
PCG random early detection See RED
environmental information, displaying ..............143 real-time monitoring
operation of, controlling .........................................99 files ............................................................................59
PEM, environmental information, displaying ..........145 interfaces ..................................................................52
permissions, CLI, displaying.......................................239 IP multicast paths ....................................................67
PFE RSVP LSPs ................................................................56
CFEB statistics, displaying....................................261 traffic.........................................................................62
DMA statistics, displaying ....................................287 real-time performance monitoring See RPM
error statistics, displaying ....................................290 rebooting router software
forwarding process status, displaying ................269 pending reboots
forwarding statistics, displaying ..........................269 clearing ..............................................................339
FPC statistics, displaying ......................................267 displaying ..........................................................429
IPv4 statistics, displaying .....................................292 requesting a system reboot ..................................365
IPv6 statistics, displaying .....................................295 RED drop profiles, displaying .....................................515
LCC statistics, displaying ......................................272 Remote Monitoring See RMON
next hops, displaying ............................................275 remote system access, operational mode
notification statistics, displaying .........................298 commands ........................................................305–308
PCG operation, controlling .....................................99 removing
polled I/O statistics, displaying ............................300 backup JUNOS file .................................................378
routing table, displaying .......................................277 files ..........................................................................250
SCB information, displaying ................................280 software packages .................................................376
SFM information, displaying ................................282 renaming files ..............................................................253
SSB statistics, displaying ......................................284 replication errors, displaying ......................................477
terse information, displaying ...............................304 rescue configuration
traffic statistics, displaying ...................................301 deleting ...................................................................351
PICs displaying ...............................................................411
active flow monitoring saving ......................................................................352
available PICs, displaying ................................599 restart-auto-negotiation, performing ...........................36
CPU usage, displaying .....................................600 restarting
installed, displaying list ........................................183 software processes ................................................385
operation of, controlling .......................................100 resynchronizing FPM status .........................................96
status reverting to earlier software .......................................379
displaying for a specific PIC............................204 rewrite rules, displaying
displaying FPCs and PICs ................................179 information ............................................................537
PKI See certificates, PKI mapping of code point value to loss priority .....529
polled I/O statistics, displaying for PFE .....................300 mapping of code point value to queue
Power Entry Module See PEM number................................................................529
powering off routing software table identifiers ......................................................530
requesting a system power off ............................363 RMON alarms and events, displaying .......................323
processes rollback
displaying information .........................................421 displaying ...............................................................430
restarting ................................................................385 requesting...............................................................379
prompt routes, displaying
setting to display in CLI ........................................231 to specified network host .......................................74
Index ! 761
Routing Engines SIB

connections, displaying ........................................ 412 environmental information, displaying ..............155
environmental information, displaying.............. 148 information, displaying ........................................215
hostname information, displaying ...................... 498 operation, controlling ...........................................107
login connection, specifying ................................ 347 SPMB status, displaying........................................219
operation of, controlling....................................... 101 status, displaying ...................................................215
status, displaying .................................................. 206 switch fabric status, displaying ...........................168
switchover information, displaying .................... 477 switch fabric topology, displaying.......................171
version information, displaying .......................... 498 Simple Network Management Protocol See SNMP
routing protocol tasks SNMP
displaying ............................................................... 490 health monitor alarms, displaying ......................313
statistics, displaying .............................................. 492 inform statistics, displaying .................................320
RPM services MIB object values, displaying ..............................321
probe results RMON alarms and events, displaying ................323
history, displaying ............................................. 43 statistics
recent, displaying .............................................. 46 clearing ..............................................................312
protocols and ports, displaying ............................. 42 displaying ..........................................................326
RSVP version 3 configuration, displaying.....................329
LSP connections SNMP inform statistics, displaying ............................320
operability, checking ......................................... 20 sockets, displaying active IP .......................................412
LSPs, real-time status ............................................. 56 software See JUNOS software
SONET Clock Generator See SCG
S SPMB
SCB information, displaying ........................................217
firmware version, displaying ............................... 176 restarting ................................................................108
PFE information, displaying ................................ 280 SIB status, displaying ............................................219
status, displaying .................................................. 212 SSB
SCG firmware version, displaying ...............................176
environmental information, displaying.............. 150 operation, controlling ...........................................109
operation, controlling ........................................... 104 statistics, displaying ..............................................284
screen length, setting .................................................. 233 status, displaying ...................................................221
screen width, setting ................................................... 234 SSH, opening a connection ........................................306
SDX client information, displaying ........................... 439 startup messages, displaying......................................403
security certificates See certificates stateful firewall
self diagnosis See op scripts conversations
serial numbers, displaying ......................................... 183 displaying ..........................................................728
Service Deployment System See SDX flows
services sets clearing ..............................................................718
CPU usage, displaying .......................................... 713 displaying ..........................................................732
dropped packet statistics SIP call information
clearing.............................................................. 712 clearing ..............................................................721
displaying.......................................................... 715 displaying ..........................................................736
memory usage, displaying ................................... 714 SIP register information
summary information, displaying ...................... 716 clearing ..............................................................724
SFM displaying ..........................................................740
environmental information, displaying.............. 152 SIP statistics
firmware version, displaying ............................... 176 displaying ..........................................................750
master, determining ............................................. 106 statistics
operation, controlling ........................................... 105 clearing ..............................................................727
statistics, displaying .............................................. 282 displaying ..........................................................744
status, displaying .................................................. 213 statistics
active flow error ....................................................591
active flow instances.............................................593
active flow memory utilization ............................597
762 ! Index
Index
aggregated active flow ..........................................588 trace files

DHCP server, displaying .......................................437 display of
dynamic flow capture starting ................................................................60
clearing ..............................................................575 stopping ...............................................................61
displaying ..........................................................604 status, displaying .....................................................59
interfaces, real-time ................................................52 tracing IP multicast path
protocol-related, displaying .................................443 from receiver to source ..........................................67
routing protocol I/O, displaying ...........................492 from router to gateway ...........................................72
SIP from server to router ..............................................68
clearing ..............................................................727 tracing routes
displaying ..........................................................744 from the receiver to the source .............................67
system queues, displaying ...................................427 from the source to the gateway router .................72
T640 routing node, displaying.............................272 from the source to the receiver .............................68
storage space, freeing..................................................383 monitoring ...............................................................71
support, technical traffic, real-time monitoring .........................................62
customer support, contacting ............................. xxiv tty connections
system information, displaying ...........................348 specifying for login ................................................347
switch fabric typefaces, documentation conventions ......................xx
queue statistics, displaying ..................................517
scheduler mapping, displaying ....................516, 526 U
status, displaying ...........................................165, 168 UNIX-level shell, creating ............................................502
switch fabric topology, displaying ..............................171 upgrading software
Switch Interface Board See SIB performing .............................................................372
Switch Processor Mezzanine Board See SPMB uptime, displaying .......................................................479
Switching and Forwarding Module See SFM user timeout, setting ...................................................229
switchover, displaying information about .................477 users
synchronization source, displaying ...........................223 CLI permissions, displaying .................................239
syntax of configuration files, verifying ......................503 logged in, displaying .............................................481
System and Switch Board See SSB logging users out ...................................................360
System Control Board See SCB logs, displaying ......................................................256
messages, displaying for ......................................346
T
T640 routing node V
operation of, controlling .........................................97 validating software ......................................................381
statistics, displaying ..............................................272 verifying syntax of configuration file.........................503
status, displaying ...................................................199 version
tasks firmware, displaying .............................................176
I/O statistics, displaying........................................492 software, displaying
memory usage, displaying ...................................494 for two Routing Engines ..................................498
protocol, displaying...............................................490 general ...............................................................497
technical support virtual memory, displaying .........................................483
customer support, contacting ............................. xxiv
system information, displaying ...........................348 W
terminal screen length, setting ..................................233 working directory
terminal screen width, setting ...................................234 current, displaying ................................................241
terminal type current, setting ......................................................228
setting .....................................................................235
terminating partitioning operation ............................361
text message on craft interface
clearing .....................................................................92
displaying ...............................................................111
time, displaying............................................................479
timeout, user, setting...................................................229
timestamp, CLI output, setting ..................................236
Index ! 763
764 ! Index
Index of Commands
C clear system services dhcp statistics command ......343
clear arp command .....................................................337 configure command ....................................................344
clear chassis display message command ...................92
clear cli logical-router command ...............................226 F
clear dlsw reachability command..............................560 file archive command .................................................245
clear ike security-associations command .................630 file checksum md5 command ...................................246
clear ipsec security-associations command .............631 file compare command ...............................................247
clear log command ......................................................244 file copy command ......................................................249
clear passive-monitoring statistics command ..........576 file delete command ...................................................250
clear security pki ca-certificate command ................632 file list command .........................................................251
clear security pki certificate-request command .......633 file rename command.................................................253
clear security pki crl command .................................634 file show command .....................................................254
clear security pki local-certificate command............635
clear services cos statistics command ......................554 M
clear services crtp statistics command .....................548 monitor interface command ........................................52
clear services dynamic-flow-capture command ......575 monitor label-switched-path command ......................56
clear services flow-collector statistics command .....577 monitor list command ..................................................59
clear services ids command .......................................616 monitor start command................................................60
clear services ids destination-table command .........617 monitor stop command ................................................61
clear services ids pair-table command .....................618 monitor traffic command .............................................62
clear services ids source-table command .................619 mtrace command ..........................................................67
clear services ipsec-vpn certificates command........636 mtrace from-source command ....................................68
clear services ipsec-vpn ike security-associations mtrace monitor command ...........................................71
command ..................................................................637 mtrace to-gateway command ......................................72
clear services ipsec-vpn ipsec security-associations
command ..................................................................639 O
clear services ipsec-vpn ipsec statistics op command ................................................................345
command .................................................................638
clear services l2tp multilink command .....................690 P
clear services l2tp session command .......................691 ping atm command .........................................................7
clear services l2tp session statistics command........691 ping clns command .........................................................8
clear services l2tp tunnel statistics command .........693 ping command .................................................................4
clear services service-sets statistics packet-drops ping mpls l2circuit command ......................................10
command ..................................................................712 ping mpls l2vpn command ..........................................12
clear services stateful-firewall flows command .......718 ping mpls l3vpn command ..........................................14
clear services stateful-firewall sip-call command ....721 ping mpls ldp command ...............................................16
clear services stateful-firewall sip-register ping mpls lsp-end-point command .............................18
command .................................................................724 ping mpls rsvp command .............................................20
clear services stateful-firewall statistics
command .................................................................727
R
clear snmp statistics command .................................312 request chassis cb command .......................................93
clear system commit command ................................338 request chassis cfeb command ....................................94
clear system reboot command ..................................339 request chassis fpc command ......................................95
clear system services dhcp binding command ........341 request chassis fpm resync command .......................96
clear system services dhcp conflict command ........342 request chassis lcc command ......................................97
Index of Commands ! 765

request chassis mcs command.................................... 98 request system software delete command ..............376
request chassis pcg command..................................... 99 request system software delete-backup
request chassis pic command.................................... 100 command .................................................................378
request chassis routing-engine master request system software rollback command ...........379
command ................................................................. 101 request system software validate command ...........381
request chassis scg command ................................... 104 request system storage cleanup command..............383
request chassis sfm command .................................. 105 restart command .........................................................385
request chassis sfm master switch command ......... 106
request chassis sib command .................................... 107 S
request chassis spmb restart command ................... 108 set chassis display message command ..................... 111
request chassis ssb master switch command .......... 109 set cli complete-on-space command .........................227
request chassis synchronization switch set cli directory command .........................................228
command ................................................................. 110 set cli idle-timeout command ....................................229
request ipsec switch command ................................. 652 set cli logical-router .....................................................230
request message command ....................................... 346 set cli prompt command ............................................231
request routing-engine login command ................... 347 set cli restart-on-upgrade command .........................232
request security certificate command ...................... 640 set cli screen-length command ..................................233
request security key-pair command ......................... 642 set cli screen-width command ...................................234
request security pki ca-certificate enroll set cli terminal command ..........................................235
command ................................................................. 643 set cli timestamp command ......................................236
request security pki ca-certificate load set date command.......................................................237
command ................................................................. 644 show accounting profile command .............................82
request security pki crl load ....................................... 645 show accounting records command ...........................86
request security pki generate-certificate-request show arp command ....................................................389
command ................................................................. 646 show chassis alarms command ................................. 113
request security pki generate-key-pair command ... 648 show chassis cfeb command ..................................... 115
request security pki local-certificate enroll show chassis craft-interface command .................... 117
command ................................................................. 649 show chassis environment cb command ................. 131
request security pki local-certificate load show chassis environment command ......................122
command ................................................................. 651 show chassis environment fpc command ................134
request services flow-collector show chassis environment fpm command ..............138
change-destination primary interface show chassis environment mcs command .............. 141
command ................................................................. 578 show chassis environment pcg command ...............143
request services flow-collector show chassis environment routing engine
change-destination secondary interface command .................................................................148
command ................................................................. 579 show chassis environment scg command ...............150
request services flow-collector test-file-transfer show chassis environment sfm command...............152
command .................................................................. 580 show chassis environment sib command ................155
request services ipsec-vpn ipsec switch tunnel show chassis ethernet-switch command ..................159
command .................................................................. 653 show chassis fabric fpcs command...........................165
request support information command ................... 348 show chassis fabric sibs command ...........................168
request system certificate add command ................ 654 show chassis fabric topology command ...................171
request system firmware command ......................... 353 show chassis feb command .......................................175
request system halt command .................................. 354 show chassis firmware command .............................176
request system license add command ..................... 357 show chassis forwarding command..........................178
request system license delete command ................. 358 show chassis fpc command .......................................179
request system license save command .................... 359 show chassis hardware command ............................183
request system logout command .............................. 360 show chassis lccs command ......................................199
request system partition abort command................ 361 show chassis location command ...............................200
request system partition hard-disk command ......... 362 show chassis mac-addresses command ...................202
request system power-off command ........................ 363 show chassis pic command .......................................204
request system reboot command ............................. 365 show chassis routing-engine command ...................206
request system snapshot command ......................... 368 show chassis scb command ....................................... 212
request system software add command .................. 372 show chassis sfm command ...................................... 213
766 ! Index of Commands

Index of Commands
show chassis spmb command ................................... 217 show host command ...................................................393
show chassis ssb command ....................................... 221 show ike security-associations command ................655
show chassis synchronization command .................223 show ipsec certificates command .............................659
show class-of-service adaptive-shaper command ...511 show ipsec redundancy command............................661
show class-of-service classifier command ................512 show ipsec security-associations command.............662
show class-of-service code-point-alias command ....514 show llc2 redundancy command ..............................567
show class-of-service command ................................509 show llc2 redundancy interface statistics
show class-of-service drop-profile command...........515 command .................................................................568
show class-of-service fabric scheduler-map show llc2 redundancy mac-translation
command .................................................................516 command .................................................................569
show class-of-service fabric statistics command .....517 show llc2 redundancy track command.....................570
show class-of-service forwarding-class command...519 show log command .....................................................256
show class-of-service forwarding-table show ntp associations command ..............................394
command .................................................................520 show ntp status command .........................................396
show class-of-service forwarding-table show passive-monitoring error command ...............581
drop-profile command ............................................524 show passive-monitoring flow command ................583
show class-of-service forwarding-table show passive-monitoring memory command .........585
rewrite-rule command ............................................529 show passive-monitoring status command ..............586
show class-of-service forwarding-table show passive-monitoring usage command ..............587
rewrite-rule mapping command ............................530 show pfe cfeb command ............................................261
show class-of-service forwarding-table show pfe feb command ..............................................264
scheduler-map command .......................................531 show pfe fpc command ..............................................267
show class-of-service forwarding-table classifier show pfe fwdd command ...........................................269
command ..................................................................522 show pfe lcc command ...............................................272
show class-of-service forwarding-table classifier show pfe next-hop command ....................................275
mapping command ..................................................523 show pfe route command ..........................................277
show class-of-service forwarding-table fabric show pfe scb command ..............................................280
scheduler-map command ........................................526 show pfe sfm command .............................................282
show class-of-service forwarding-table show pfe ssb command ..............................................284
loss-priority-map command ....................................527 show pfe statistics dma command ............................287
show class-of-service forwarding-table show pfe statistics error command ...........................290
loss-priority-map mapping command....................528 show pfe statistics ip command ................................292
show class-of-service fragmentation-map show pfe statistics ip6 command ..............................295
command .................................................................533 show pfe statistics notification command ................298
show class-of-service interface command ................534 show pfe statistics pio command ..............................300
show class-of-service loss-priority-map show pfe statistics traffic command .........................301
command .................................................................536 show pfe terse command ...........................................304
show class-of-service rewrite-rule command ...........537 show security pki ca-certificate command ...............665
show class-of-service routing-instance command ...539 show security pki certificate-request command ......668
show class-of-service scheduler-map command .....540 show security pki crl command .................................670
show class-of-service traffic-control-profile show security pki local-certificate command ...........672
command .................................................................542 show services accounting
show class-of-service virtual-channel command .....543 packet-size-distribution command ........................598
show class-of-service virtual-channel-group show services accounting aggregation command ...588
command .................................................................544 show services accounting errors command .............591
show cli authorization command ..............................239 show services accounting flow command ................593
show cli command ......................................................238 show services accounting flow-detail command .....594
show cli directory command .....................................241 show services accounting memory command ........597
show cli history command .........................................242 show services accounting status command .............599
show configuration command ...................................391 show services accounting usage command .............600
show dlsw capabilities command..............................561 show services cos statistics diffserv command .......555
show dlsw circuits command ....................................562 show services crtp command ....................................549
show dlsw peers command .......................................564 show services crtp flows command ..........................551
show dlsw reachability command .............................566

show services dynamic-flow-capture show system certificate command ...........................686

control-source command ....................................... 602 show system commit command ...............................408
show services dynamic-flow-capture show system configuration archival command .......410
content-destination command................................ 601 show system configuration rescue command .........411
show services dynamic-flow-capture statistics show system connections command........................412
command .................................................................. 604 show system directory-usage command ..................415
show services flow-collector file interface show system firmware command .............................417
command ................................................................. 606 show system license command.................................418
show services flow-collector input command.......... 608 show system processes command ............................421
show services flow-collector interface command ... 609 show system queues command ................................427
show services ids command ...................................... 620 show system rollback command ...............................430
show services ipsec-vpn certificates command....... 674 show system services dhcp binding command .......431
show services ipsec-vpn ike show system services dhcp conflict command .......433
security-associations command ............................ 677 show system services dhcp global command ..........434
show services ipsec-vpn ipsec show system services dhcp pool command ............435
security-associations command ............................ 680 show system services dhcp statistics command .....437
show services ipsec-vpn ipsec statistics show system services service-deployment
command ................................................................. 683 command .................................................................439
show services l2tp multilink command .................... 694 show system snapshot command .............................440
show services l2tp session command ...................... 696 show system software command..............................441
show services l2tp summary command................... 700 show system statistics arp command .......................452
show services l2tp tunnel command ........................ 701 show system statistics clnl command ......................454
show services l2tp user command ............................ 704 show system statistics command ..............................443
show services nat pool command ............................. 708 show system statistics esis command ......................456
show services rpm active-servers command ............. 42 show system statistics icmp command ....................457
show services rpm history-results command ............ 43 show system statistics icmpv6 command ................458
show services rpm probe-results command .............. 46 show system statistics igmp command ....................459
show services service-sets cpu-usage show system statistics ip ............................................460
command ................................................................. 553 show system statistics ip6 command .......................462
show services service-sets cpu-usage command ..... 711 show system statistics mpls command ....................464
show services service-sets statistics show system statistics rdp command .......................465
packet-drops command .......................................... 715 show system statistics tcp command .......................466
show services service-sets summary command ..... 716 show system statistics tnp command .......................469
show services stateful-firewall conversations show system statistics tudp command .....................471
command .................................................................. 728 show system statistics udp command ......................472
show services stateful-firewall flows command ...... 732 show system statistics vpls command ......................473
show services stateful-firewall sip-call command ... 736 show system storage command ................................475
show services stateful-firewall sip-register show system switchover command ..........................477
command ................................................................. 740 show system uptime command ................................479
show services stateful-firewall statistics show system users command ...................................481
command ................................................................. 744 show system virtual-memory command ..................483
show services stateful-firewall statistics show task command ...................................................490
application-protocol sip command ......................... 750 show task io command...............................................492
show snmp health-monitor command ..................... 313 show task memory command ...................................494
show snmp inform-statistics command ................... 320 show version command .............................................497
show snmp mib command ........................................ 321 show version invoke-on command ...........................498
show snmp rmon command ..................................... 323 ssh command ..............................................................306
show snmp statistics command ................................ 326 start shell command ...................................................502
show snmp v3 command ........................................... 329
show system alarms command ................................. 397 T
show system audit command .................................... 398 telnet command ..........................................................308
show system autoinstallation status command....... 402 test configuration command ......................................503
show system boot-messages command ................... 403 test interface ds0-bert-start command .......................24
show system buffers command ................................ 406 test interface ds0-bert-stop command ........................25

Index of Commands
test interface e1-bert-start command .........................26

test interface e1-bert-stop command ..........................27
test interface e3-bert-start command .........................28
test interface e3-bert-stop command ..........................29
test interface fdl-line-loop command ..........................30
test interface fdl-payload-loop command ................... 31
test interface feac-loop-initiate command ..................32
test interface feac-loop-terminate command .............33
test interface inband-line-loop command ..................34
test interface inband-payload-loop command ...........35
test interface restart-auto-negotiation command ......36
test interface t1-bert-start command ..........................37
test interface t1-bert-stop command ..........................38
test interface t3-bert-start command ..........................39
test interface t3-bert-stop command ..........................40
traceroute command ....................................................74
traceroute monitor command .....................................77


System Basics and Services Command Reference

Uploaded by

Copyright:

Available Formats

System Basics and Services Command Reference

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

System Basics and Services Command Reference

Uploaded by

Copyright:

Available Formats

What are the main topics covered in the document?

What are the main topics covered in the document?

What software is included in the product?

What software is included in the product?

JUNOSTM Internet SoftwareTM

System Basics and Services

Juniper Networks, Inc.

Copyright © 2006, Juniper Networks, Inc.

Year 2000 Notice

End User License Agreement

Part 1 Monitoring and Testing Tools

Part 2 System Management

Part 3 Class of Service

Abbreviated Table of Contents ! v

Chapter 21 Network Address Translation Operational Mode Commands 707

vi ! Abbreviated Table of Contents

Part 1 Monitoring and Testing Tools

Chapter 1 Connectivity Operational Mode Commands 3

Chapter 2 Interface Diagnostics Operational Mode Commands 23

Table of Contents ! vii

test interface t1-bert-stop ..............................................................................38

Chapter 3 Real-Time Performance Monitoring Operational Mode Commands 41

Chapter 4 Real-Time Router Monitoring Operational Mode Commands 51

Part 2 System Management

Chapter 5 Accounting Operational Mode Commands 81

Chapter 6 Chassis Operational Mode Commands 89

viii ! Table of Contents

show chassis cfeb ........................................................................................115

Chapter 7 Command-Line Interface Operational Mode Commands 225

Chapter 8 File Management Operational Mode Commands 243

Chapter 9 Packet Forwarding Engine Operational Mode Commands 259

Chapter 10 Remote System Access Operational Mode Commands 305

Chapter 11 Simple Network Management Protocol

Chapter 12 System Software Operational Mode Commands 333

clear system services dhcp conflict ..............................................................342

show system snapshot .................................................................................440

Part 3 Class of Service

Chapter 13 Class-of-Service Operational Mode Commands 507

xii ! Table of Contents

show class-of-service forwarding-table scheduler-map ................................531

Chapter 14 Compressed Real-Time Transport Protocol

Chapter 15 CoS Services Operational Mode Commands 553

Chapter 16 Data Link Switching Operational Mode Commands 559

Chapter 17 Flow Collection and Monitoring Operational Mode Commands 573

Table of Contents ! xiii

show services accounting flow-detail ..........................................................594

Chapter 18 Intrusion Detection Service Operational Mode Commands 615

Chapter 19 IP Security Operational Mode Commands 627

xiv ! Table of Contents

show services ipsec-vpn ipsec security-associations .....................................680

Chapter 20 Layer 2 Tunneling Protocol Operational Mode Commands 689

Chapter 21 Network Address Translation Operational Mode Commands 707

Chapter 22 Service Sets Operational Mode Commands 711

Chapter 23 Stateful Firewall Operational Mode Commands 717

xvi ! Table of Contents

! Objectives on page xvii

! Audience on page xix

! Using the Indexes on page xix

! Documentation Conventions on page xix