srx junosコマンドメモ

コンフィグのset表示

show configuration | display set

フローの確認

show security flow session

負荷の確認

show chassis routing-engine
show chassis forwarding

root SSHのオフ

set system services ssh root-login deny

シリアル番号の確認

show chassis hardware

ユーザー追加

set system login user srxadm class super-user
set system login user srxadm authentication plain-text-password

プリセットされた設定情報の確認

request pfe execute target fwdd command "show usp app-def tcp"

パケットキャプチャ方法

set forwarding-options packet-capture maximum-capture-size 1500
set forwarding-options packet-capture file filename "FineName"

set firewall filter PCAP term 1 from source-address X.X.X.X
set firewall filter PCAP term 1 from destination-address X.X.X.X
set firewall filter PCAP term 1 then sample 
set firewall filter PCAP term 1 then accept 
set firewall filter PCAP term allow-all-else then accept

set interfaces reth0 unit 0 family inet filter output PCAP
set interfaces reth0 unit 0 family inet filter input PCAP

/var/tmp以下に出力される。