1|Page

Juniper Hardware/Software diagnostics commands for troubleshooting Part 1

1.Juniper hardware/Software diagnostics commands

show version | save filename

show chassis hardware | save filename

show chassis environment | save filename

show system boot-messages | save filename

show configuration | save filename

show chassis hardware

show chassis temperature-thresholds

show chassis hardware detail | display xml | no-more

show version

show system snapshot media internal

2.To view the configuration file

show | display set | no-more

show | no-more

show interface terse

show route

show interfaces terse | save filename

show system processes

show interfaces <interface-name> extensive

show log messages

3.BGP commands
2|Page

show bgp neighbor | no-more

show route advertising-protocol bgp 10.200.7.2

show route receive-protocol bgp 10.200.7.2

show bgp summary

4.Routing protocol commands OSPF/ISIS

show isis adjacency brief

show ospf neighbor brief | save filename

show system storage | save filename

5.STP /switching commands

show spanning-tree bridge

show spanning-tree bridge detail

show spanning-tree interface

show spanning-tree interface detail

show spanning-tree statistics interface <int>

show spanning-tree statistics interface <int> detail

6.Switching commands T&B

show ethernet-switching interfaces

show ethernet-switching table

show interface

show interface extensive

Like show tech support command in cisco

request support information all-member | no-more

Log commands

show log jsrpd

show log messages

show log chassisd (will report hardware chassis failures)

show log dcd

show module command in cisco same like it, It will show the module is online or not

Show chassis fpc 7

Show chassis fpc 8(module in Srx or Mx router module)

L2 Verification & Troubleshooting

The following commands are helpful for verifying and troubleshooting ethernet switching and VLANs:

user@host> show ethernet-switching mac-learning-log

(Technical documentation reference: show ethernet-switching mac-learning-log)

user@host> show ethernet-switching table

(Technical documentation reference: show ethernet-switching table)

user@host> show vlans

user@host> show vlans <vlan> extensive

user@host> show ethernet-switching table interface <interface>

user@host> monitor interface <vlan interface>

show interfaces vlan /to see the vlan in SRX

show system users /to see the user in Mx480

monitor interface traffic

====================================================================

user@host> monitor interface traffic

>monitor interface so-1/0/0.0

====================================================================

show route resolution unresolved

user@host> show route resolution unresolved

Syslog

--------------

set system syslog host 172.19.110.10 any notice

Sources ping commands

SRXA# run ping 192.168.6.1 interface fe-0/0/1.0 (Sources ping via interface)

#> metacortex@Bazzalan# run ping 4.2.2.2 source 192.168.0.69 count 5 (Sources ping using live ip
address in device)
5|Page

Command Description

show version: - Software version

show chassis hardware detail: - Hardware and Serial numbers

show chassis environment: - Temperatures, Fan and Power Supply

show chassis routing-engine Temperatures, Memory, CPU Load

show interfaces terse: - Interface States

show interfaces extensive: - Interface and Zone Counters

monitor interface Real-time interface statistics

show security flow session: - Current sessions

show system alarms:- Alarms

show chassis alarms

Monitoring the interface

> monitor traffic interface <int> layer2-headers

> monitor traffic interface e1-0/0/0.0 no-resolve

set cli timestamp

request support information | no-more

Log

----------------

show log messages | no-more

show log chassisd | no-more

Ospf

----------------

show ospf overview

show ospf neighbor detail

show ospf route

show ospf statistics

show ospf interface

show ospf log

show route protocol ospf

show ospf database

show ospf database summary

show ospf database extensive

BGP

show route advertising-protocol bgp 220.227.29.7

show route receive-protocol bgp 220.27.29.8

show route receive-protocol bgp 125.17.74.4

show route receive-protocol bgp 121.241.5.117

SYSTEM
7|Page

set cli timestamp

show chassis routing-engine

show system processes extensive

show system users

show system connections

show system statistics

show chassis forwarding

show security monitor fpc pic <SPC-slot> (use 0 for Branch platforms)

show security monitor performance spu

show security monitor performance sess

OSPF

set cli timestamp

show ospf overview

show ospf database

show ospf neighbor detail

show ospf route

show ospf statistics

show ospf interface

show ospf log

show route protocol ospf

show route <x.x.x.x> extensive

show ospf database extensive

UTM
8|Page

set cli timestamp

show system licenses

show security utm status

show security utm session

show security utm anti-virus status detail

show security utm anti-virus statistics

show chassis routing-engine

show system processes extensive

show security utm session

show security utm web-filtering status

show security utm web-filtering statistics

show chassis routing-engine

show system processes extensive

IPSEC

show security ike security-association

show security ike security-association index <#> detail

show security ipsec security-association

show security ipsec security-association index <#> detail

show security ipsec statistics

show security ipsec statistics index <#>

show security ipsec next-hop-tunnels

monitor interface st0.x

IPSEC IKE
9|Page

show interfaces extensive st0.x

show security flow session tunnel

show route

show security pki local-cert detail

show security pki ca-cert detail

show security pki crl detail

show security ike security-association

show security ike security-association index <#> detail

show security ipsec security-association

show security ipsec security-association index <#> detail

show security ipsec statistics

show security ipsec statistics index <#>

show security ipsec next-hop-tunnels

show security flow session tunnel

IF PKI certs are used:

show security pki local-cert detail

show security pki ca-cert detail

show security pki crl detail

show security policies detail

show log /var/etc/policy.id

VRF Instance commands

----------------------------------

> show ospf interface instance AVAYA extensive

> show ospf neighbor instance AVAYA extensive

> show ospf database instance AVAYA extensive

> show ospf route instance AVAYA extensive

> show route protocol ospf table AVAYA.inet.0 extensive

THANK YOU
RAKESH A