JUNIPER SRX CLI CHEATSHEET

Here are some commonly used CLI commands for managing and configuring Juniper SRX devices:

COMMAND DESCRIPTION SRX

Viewing System Information
show version Displays the Junos software version running on the device
Shows how long the device has been running since its last COMMAND DESCRIPTION
show system uptime
reboot System Logs and Monitoring
Provides hardware information such as model, serial show log Displays system log messages
show chassis hardware
number, and installed modules
show security flow session source- Shows active sessions originating from a specific source IP
Interface Configuration and Status prefix <source-ip> address
show interfaces terse Displays brief information about all interfaces on the device show security flow session destination- Shows active sessions destined to a specific destination IP
show interfaces <interface-name> Shows detailed information about a specific interface prefix <destination-ip> address
show interfaces diagnostics optics Displays optical transceiver diagnostics information for a Packet Capture
<interface-name> specific interface
monitor traffic interface <interface-
Routing and Forwarding Table Initiates packet capture on a specific interface
name>
show route Shows the routing table monitor traffic interface <interface-
show route forwarding-table Displays the forwarding table Initiates packet capture with more detailed information
name> extensive
show route protocol <protocol-name> Shows routes learned via a specific routing protocol Captures packets without resolving IP addresses to
monitor traffic no-resolve
Security Policies and Zones hostnames
show security policies Displays security policies configured on the device Commit and Rollback
show security zones Shows configured security zones and associated interfaces commit Commits configuration changes to the device
show security flow session Displays active sessions passing through the device Checks the configuration for syntax errors without
commit check
NAT (Network Address Translation) committing
show security nat source Shows configured source NAT rules commit full commit entire configuration
show security nat destination Displays configured destination NAT rules commit comment “{TEXT}” Add a comment after commit changes
Process Management rollback <rollback-number> Rolls back the configuration to a previous state
show system processes extensive Show processes rollback rescue Rollback the configuration to rescue point
Restart the process after all the present tasks have been Miscellaneous
restart {process} gracefully
completed request system reboot Reboots the device
VPN (Virtual Private Network) request system storage cleanup Remove unwanted files
show security ipsec security-associations Displays active IPsec security associations request support information Collects system information for troubleshooting purposes
show security ike security-associations Shows active IKE (Internet Key Exchange) security associations Configure Enters configuration mode
show security ipsec vpn Displays configured IPsec VPNs exit Exits configuration mode or the CLI

networkinterview.com(An Initiative By ipwithease.com)