Juniper ScreenOS防火墻查看某個(gè)IP或某個(gè)Port或某個(gè)

網(wǎng)站建設(shè)哪家好，找創(chuàng)新互聯(lián)！專注于網(wǎng)頁(yè)設(shè)計(jì)、網(wǎng)站建設(shè)、微信開發(fā)、微信小程序、集團(tuán)企業(yè)網(wǎng)站建設(shè)等服務(wù)項(xiàng)目。為回饋新老客戶創(chuàng)新互聯(lián)還提供了嘉魚免費(fèi)建站歡迎大家使用！

ScreenOS版本：

ISG2000-> get system | in "Software Version"

Software Version: 5.4.0r6.0, Type: Firewall+×××

IP/Port/Mac又可細(xì)分為源IP、目的IP、源Port、目的Port、源Mac和目的Mac，命令如下：

ISG2000-> get session ?

> redirect output

| match output

<return>

dst-ip destination ip address

dst-mac destination mac address

dst-port destination port number or range

hardware show hardware sessions only

id show sessions with id

ike-nat show ike-nat ALG info

protocol protocol number or range

rm show sessions for resource management

service show sessions with service type

src-ip source ip address

src-mac source mac address

src-port source port number or range

tunnel show tunnel sessions

vsd-id get vsd-id specified sessions

下面是查看源IP為10.244.148.231的所有會(huì)話總數(shù)：

ISG2000-> get session src-ip 10.244.148.231

alloc 39986/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

total reserved 0, free sessions in shared pool 484302

slot 2: hw0 alloc 39884/max 1048575 

Total 29340 sessions according filtering criteria.

id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2202, dip 0 module 0

if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35

if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21

下面是查看目的Port為161的所有會(huì)話總數(shù)：

ISG2000-> get session dst-port 161

alloc 40045/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

total reserved 0, free sessions in shared pool 484243

slot 2: hw0 alloc 39942/max 1048575 

Total 38375 sessions according filtering criteria.

id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2201, dip 0 module 0

if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35

if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21

下面是查看目的Mac為00005e00010a的所有會(huì)話總數(shù)：

ISG2000-> get session src-mac 00005e00010a

alloc 39913/max 524288, alloc failed 241404, mcast alloc 0, di alloc failed 0

total reserved 0, free sessions in shared pool 484375

slot 2: hw0 alloc 39838/max 1048575 

Total 39015 sessions according filtering criteria.

id 138/s0*,vsys 0,flag 04200400/0000/0003,policy 5,time 2142, dip 0 module 0

if 23(nspflag 800801):10.244.148.231/44295->10.243.211.40/161,17,00005e00010a,sess token 24,vlan 0,tun 0,vsd 0,route 35

if 64(nspflag 800800):10.244.150.49/44295<-10.243.211.40/161,17,00005e000133,sess token 6,vlan 0,tun 0,vsd 0,route 21

Juniper ScreenOS防火墻清除某個(gè)IP或某個(gè)Port或某個(gè)Mac會(huì)話數(shù)的方法就是把get關(guān)鍵字換成clear。

當(dāng)前文章：JuniperScreenOS防火墻查看某個(gè)IP或某個(gè)Port
網(wǎng)頁(yè)URL：http://chinadenli.net/article0/gsgjio.html

成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián)，為您提供網(wǎng)站策劃、商城網(wǎng)站、云服務(wù)器、企業(yè)建站、面包屑導(dǎo)航、微信公眾號(hào)

廣告

聲明：本網(wǎng)站發(fā)布的內(nèi)容（圖片、視頻和文字）以用戶投稿、用戶轉(zhuǎn)載內(nèi)容為主，如果涉及侵權(quán)請(qǐng)盡快告知，我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng)，如需處理請(qǐng)聯(lián)系客服。電話：028-86922220；郵箱：631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載，或轉(zhuǎn)載時(shí)需注明來(lái)源： 創(chuàng)新互聯(lián)