Juniper Commands v4 CLI

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

WARNING!!: By no means this is an official supported/recommended Juniper command list !!!

Furthermore, care must be taken at the time to use Shell commands!! (only under JTAC supervision)
COMMAND
Description
Example
Chassis Management
show chassis alarm
show chassis craft-interface
set chassis display message "M40e unit for swap"
show chassis environment
show chassis temperature-thresholds
show chassis routing-engine
show chassis hardware
show chassis fpc
show chassis fpc detail
show chassis fpc pic-satus
show chassis pic fpc-slot 0 pic-slot 1
show chassis mac-addresses
show chassis [feb | scb | ssb | sfm slot ]

detail/frus/ext

Chassis alarm status


Information currently on craft display
displays a user defined message on the LCD craft interface
Environmental information & temperature
Displays temperature thresholds
Displays info about the RE, memory & CPU utilization
Hardware inventory + serial numbers; frus shows fans; ext shows eeprom, flash/disk capacity
displays status of all FPCs installed (mem heap should be <80% !)
includes also SRAM/SDRAM available Mem and usage
Displays info for all PICs
Displays info about one particular PIC
MAC address
displays satus about PFE system control board (temp, cpu%,DRAM)

System management
show host
show version
show system software
show system uptime
show system processes
show system statistics
show system connections
show system users
show system storage
root% df -k
show system boot-messages
show system virtual-memory
request system reboot
request system halt
request system reboot
request system snapshot
request support information
request system software add <pkgname>
restart <process> [ gracefully, immediately, soft]
request chassis routing-engine diagnostics all
request system storage cleanup

ns lookup
displays software running on the box
displays installed packages
uptime of the router
extensive/summary Show the process table
ip, icmp,
Show protocol statistics
lists only active IP sockets on RE
Show users currently logged into the system
displays the amount of amount of free disk space on file system
show system storage from Shell
displays contents of boot log (boot-up messages)
displays current memory state
Restarts the system
Stops the router and prepares it to be shut down
Reboot the system
Save config in /altconfig and software in /altroot before upgrade
show tech
performs bsd pgkadd; always use jbundle (4->5 jinstall)
Restart process
(hidden)
runs a diagnostic script in compact-flash,hard-disk & memory
Free storage space on the router by rotating log files and proposing a list
of files for deletion. User input is required for file deletion.

show host www.cisco.com

detail

Configuration
configuration
show

enters configuration mode


displays the current configuration
show protocols ospf
filters the output of the command
show config | match firewall
filters starting with the regular expression
show config | find firewall
save configuration as <file>
modifies configuration statements
edit protocols ospf
sets configuration statements
set chassis alarm sonet lo1 red
removes configuration statements
exists edit mode and also config mode
save, validate and activate a complete config
just check config do not apply
activates config for a x minutes and then ask for confirmation, x=10 default
activates config and exists edit mode
activates config on active RE and replicates it into backup RE
(hidden)
signals to all daemons a SIGHUP (kill -1) which forces them to read their config files (restarts all daemons)
(hidden) from shell same as commit full but from shell
activates config at a given time (schedule a commit)
commit at "18:00:00"
Clear all pending commit requests
deletes the new edited changes and returns to current config
returns to the last commited config
it will return to previously saved config. Only at the top level!
combines the current config and the new one
erases the candidate config and replaces it with "luis"
copy and paste portions of the config, vanaf root config
loads the factory default settings config
router# load override /packages/mnt/jbase/sbin/install/default-juniper.conf
compares the candidate config with the running config
displays a rollback file
shows differences between rollbacks 0 and 32 files
saves config in /var/home directory
save CJNR-reset
saves config in remote system using ssh
save [email protected]:SYD-AJNR-basic-intf
(hidden)
displays only certain JUNOS default settins (system/services/apps)
| match item
| find item
| save <file>

edit
set
delete
exit
commit
commit check
commit confirmed x
commit and-quit
commit synchronize
commit full
root% mgd -l
commit at
clear system commit
rollback 0
rollback
rollback + commit
load merge </var/home/user/config>
load override </var/home/user/config>
load merge terminal
load factory-default
show | compare
show system rollback 40
show system rollback compare 0 32
save
save username@host:filename
show configuration groups junos-defaults
Managing files
start shell
/config
/var/db/config
/var/tmp
/var/log
/var/home
/altroot
/altconfig
file list
file list /config
file show <file>
file delete
file copy source destination

flashdisk
harddisk
harddisk
harddisk
harddisk
harddisk
harddisk

file copy filename ftp://hostname/filename

ftp

file copy filename scp://user@hostname/filename

scp

file copy ftp://hostname/filename filename

ftp

show system rollback 40


show system rollback compare 0 32

Logs
show log messages
show log file-name
show log cli
show log chassisd
show log install
show log debug
show log messages?
show log inventory
monitor start file-name
monitor stop
help syslog

contains active config and rollbacks 1,2 & 3


contains rollback files 4 through 49
contains core files generated by the daemons when they crash
files generated by the logging and traceoptions
contains subdirectory per user
contains a copy of the root file structure form the flash drive
contains a copy of the /config file structure on the flash drive
displays all files on this user home directory
displays all files on the /config directory
displays content of <file>
deletes a file from hard disk
copies files from one RE to the other
Copy Files from the Local Router to a Remote System

Copy Files from a Remote System to the local router

request system snapshot


request system snapshot

file delete /var/tmp/smpd.core


GRTAMSTC1> file copy /var/home/jinstall-6.2-domestic-signed.tgz re0:/var/home/lgomez
root@host> file copy /config/juniper.conf ftp://jvserver.uu.net/tmp/juniper.conf
root@host> file copy /config/juniper.conf ftp://[email protected]/tmp/juniper.conf
root@host> file copy /config/juniper.conf scp://user@ssh-host/tmp/juniper.conf
root@host> file copy ftp://jvserver.uu.net/jbundle-package-name /var/tmp/jbundle-package-name
root@host> file copy ftp://[email protected]/jbundle-package-name /var/tmp/jbundle-package-name

displays a rollback file


shows differences between rollbacks 0 and 32 files

located in /var/log
shows all the logs, location is /var/log
shows logs about an specific log file
show logs about cli commands issued
show logs about chassis probs
show logs releveant to an install JUNOS version
show daemon logs
displays all the files with their dates of the collected logs
shows logs about inventory
monitors logs in real time
stops monitoring
explanation of log meaning

show log bgp-events.0

help syslog ASP_SFW_IP_FRAGMENT_ASSEMBLY_TIMEOUT

Show interfaces
show interfaces

monitor interface x-x/x/x


monitor traffic interface x-x/x/x
monitor traffic interface x-x/x/x write-file [file]
% tcpdump -r

detail
extensive
terse
description
media
statistics
routing

(hidden)
Shell command

monitor start <var/log/file>


show arp
clear interfaces statistics so-2/0/1
show interfaces diagnostics optics so-1/0/0

shows detailed info about an interface


shows all possible info about an interface (very detailed)
shows ip interface brief
shows interfaces description
Display media information
Display statistics and detailed info
Display routing status
monitors interface real-time statistics
prints packet headers to your terminal screen for info sent/received by the RE. No filtering allowed !!
writes output to this command to a file, with L2 headers present
all info is stored in a file so you can use tcpdump to read it
monitor traffic interface fe-0/0/0 write-file dump
read the contents of a tcpdump file
XR1.AMS6> start shell
% tcpdump -r dump icmp
prints logfile to your terminal screen
shows ARP entries
reset counters & statistics for this particular interface
displays SONET signaling power values and laser Tx Rx

Routing
show route
show route protocol [static, isis]
show route x.x.x.x extensive
show route advertising-protocol
show route receiving-protocol

show ip route
show ip route for an specific protocol
extensive view of a route

show route protocol static

Forwarding
show route forwarding-table destination x.x.x.x
clear route forwarding-table x.x.x.x
SFM0 (vty)# show route ip prefix x.x.x.x

Shell command

displays route entries in the master copy of the FT (on RE)


XR1.AMS6> show route forwarding-table destination 192.168.20.1
clears entries from the FT (be careful! could lead to RIB/FIB inconsistencies!!)
displays route entries into the PFE FT (should be identical to RE FT)

Firewall
show firewall
show firewall log
clear firewall [all|filter-name|counter-name]
show interfaces filters
show interfaces policers
show policer

detail

show packet/byte counts for all policing filters


log in memory resident buffer/kernel cache (detail: packet length)
clears counters
displays all firewall filters on all interfaces
displays all firewall policers on all interfaces
displays all policers, where it is used and no. packets processed

Management & Interface testing


ping
ping atm interface <intf> vci <nr>
traceroute

Loopback test
set t3-options loopback local
set t3-options loopback remote
BERT test
set t3-options bert-period 120
set t3-options bert-algorithm all-ones-repeating
set t3-options bert-error-rate 0
test interface t3-1/2/0 t3-bert-start
test interface t3-1/2/0 t3-bert-stop
show interfaces t3-1/2/0 extensive | find bert

icmp echo-request/echo-response
ping remote atm interface using oam cells
send udp 33434/ttl=1- receive icmp time-exceeded
send udp 33435/ttl=2 - receive icmp time-exceeded

send udp 33439/ttl=6 - receive icmp port unreachable


and delete
and delete

sets loopback on PIC towards router


sets loopback on PIC towards far-end

BERT test duration


BERT test pattern
BERT test error rate
Starts BERT test
Stops BERT test

Policy
test policy <policy-name> 0/0

Pass all routes (0/0) through the policy as test

You might also like