1|Page
Juniper Hardware/Software diagnostics commands for troubleshooting Part 1
1.Juniper hardware/Software diagnostics commands
show version | save filename
show chassis hardware | save filename
show chassis environment | save filename
show system boot-messages | save filename
show configuration | save filename
show chassis hardware
show chassis temperature-thresholds
show chassis hardware detail | display xml | no-more
show version
show system snapshot media internal
2.To view the configuration file
show | display set | no-more
show | no-more
show interface terse
show route
show interfaces terse | save filename
show system processes
show interfaces <interface-name> extensive
show log messages
3.BGP commands
2|Page
show bgp neighbor | no-more
show route advertising-protocol bgp 10.200.7.2
show route receive-protocol bgp 10.200.7.2
show bgp summary
4.Routing protocol commands OSPF/ISIS
show isis adjacency brief
show ospf neighbor brief | save filename
show system storage | save filename
5.STP /switching commands
show spanning-tree bridge
show spanning-tree bridge detail
show spanning-tree interface
show spanning-tree interface detail
show spanning-tree statistics interface <int>
show spanning-tree statistics interface <int> detail
6.Switching commands T&B
show ethernet-switching interfaces
show ethernet-switching table
show interface
show interface extensive
3|Page
Like show tech support command in cisco
request support information all-member | no-more
Log commands
show log jsrpd
show log messages
show log chassisd (will report hardware chassis failures)
show log dcd
show module command in cisco same like it, It will show the module is online or not
Show chassis fpc 7
Show chassis fpc 8(module in Srx or Mx router module)
L2 Verification & Troubleshooting
The following commands are helpful for verifying and troubleshooting ethernet switching and VLANs:
user@host> show ethernet-switching mac-learning-log
(Technical documentation reference: show ethernet-switching mac-learning-log)
user@host> show ethernet-switching table
(Technical documentation reference: show ethernet-switching table)
user@host> show vlans
4|Page
user@host> show vlans <vlan> extensive
user@host> show ethernet-switching table interface <interface>
user@host> monitor interface <vlan interface>
show interfaces vlan /to see the vlan in SRX
show system users /to see the user in Mx480
monitor interface traffic
====================================================================
user@host> monitor interface traffic
>monitor interface so-1/0/0.0
====================================================================
show route resolution unresolved
user@host> show route resolution unresolved
Syslog
--------------
set system syslog host 172.19.110.10 any notice
Sources ping commands
SRXA# run ping 192.168.6.1 interface fe-0/0/1.0 (Sources ping via interface)
#> metacortex@Bazzalan# run ping 4.2.2.2 source 192.168.0.69 count 5 (Sources ping using live ip
address in device)
5|Page
Command Description
show version: - Software version
show chassis hardware detail: - Hardware and Serial numbers
show chassis environment: - Temperatures, Fan and Power Supply
show chassis routing-engine Temperatures, Memory, CPU Load
show interfaces terse: - Interface States
show interfaces extensive: - Interface and Zone Counters
monitor interface Real-time interface statistics
show security flow session: - Current sessions
show system alarms:- Alarms
show chassis alarms
Monitoring the interface
> monitor traffic interface <int> layer2-headers
> monitor traffic interface e1-0/0/0.0 no-resolve
set cli timestamp
6|Page
request support information | no-more
Log
----------------
show log messages | no-more
show log chassisd | no-more
Ospf
----------------
show ospf overview
show ospf neighbor detail
show ospf route
show ospf statistics
show ospf interface
show ospf log
show route protocol ospf
show ospf database
show ospf database summary
show ospf database extensive
BGP
show route advertising-protocol bgp 220.227.29.7
show route receive-protocol bgp 220.27.29.8
show route receive-protocol bgp 125.17.74.4
show route receive-protocol bgp 121.241.5.117
SYSTEM
7|Page
set cli timestamp
show chassis routing-engine
show system processes extensive
show system users
show system connections
show system statistics
show chassis forwarding
show security monitor fpc pic <SPC-slot> (use 0 for Branch platforms)
show security monitor performance spu
show security monitor performance sess
OSPF
set cli timestamp
show ospf overview
show ospf database
show ospf neighbor detail
show ospf route
show ospf statistics
show ospf interface
show ospf log
show route protocol ospf
show route <x.x.x.x> extensive
show ospf database extensive
UTM
8|Page
set cli timestamp
show system licenses
show security utm status
show security utm session
show security utm anti-virus status detail
show security utm anti-virus statistics
show chassis routing-engine
show system processes extensive
show security utm session
show security utm web-filtering status
show security utm web-filtering statistics
show chassis routing-engine
show system processes extensive
IPSEC
show security ike security-association
show security ike security-association index <#> detail
show security ipsec security-association
show security ipsec security-association index <#> detail
show security ipsec statistics
show security ipsec statistics index <#>
show security ipsec next-hop-tunnels
monitor interface st0.x
IPSEC IKE
9|Page
show interfaces extensive st0.x
show security flow session tunnel
show route
show security pki local-cert detail
show security pki ca-cert detail
show security pki crl detail
show security ike security-association
show security ike security-association index <#> detail
show security ipsec security-association
show security ipsec security-association index <#> detail
show security ipsec statistics
show security ipsec statistics index <#>
show security ipsec next-hop-tunnels
show security flow session tunnel
IF PKI certs are used:
show security pki local-cert detail
show security pki ca-cert detail
show security pki crl detail
show security policies detail
show log /var/etc/policy.id
VRF Instance commands
----------------------------------
> show ospf interface instance AVAYA extensive
> show ospf neighbor instance AVAYA extensive
> show ospf database instance AVAYA extensive
10 | P a g e
> show ospf route instance AVAYA extensive
> show route protocol ospf table AVAYA.inet.0 extensive
THANK YOU
RAKESH A
