The Junos way of making this happen is through a logical interface called irb.KB15719 - SRX Getting Started - CLI Modes and FeaturesĬomment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories.KB21781 - Data Collection Checklist - Logs/data to collect for troubleshooting.(ICMP stays within the forwarding plane, and 'monitor traffic' is tracking the RE (control plane)).įor additional information on the 'monitor traffic' command, refer to. It does not capture transit traffic (forwarding plane). This feature only captures traffic to/from the RE of the SRX or J Series device itself. > monitor traffic interface e1-0/0/0.0 no-resolve Notes: > monitor traffic interface layer2-headers This feature is useful for troubleshooting why one can't telnet to the SRX device, or for troubleshooting if a SNMP request is being received and transmitted from the SRX device, or for troubleshooting OSPF, BGP, and PPP connectivity issues. packets destined to and from the RE (Routing Engine) of the Junos device. Packet Capture of control traffic to and from the RE of the SRX Use the 'monitor traffic interface' command to capture 'self-traffic', i.e. KB21563 - How to capture packets on High-End SRX devices.However, this Packet Capture feature is not available on the SRX High-End devices.įor SRX High-End devices, packet capture can be achieved using the datapath-debug feature. Dynamic Routing Protocol messages, ARP, management traffic, ICMP to Routing Engine). Note: The Packet Capture Feature can also be used to capture 'self-traffic' (e.g. KB16110 - Example of performing a Packet Capture on SRX Branch devices.Packet Capture for transit traffic through the SRX For SRX Branch devices, use the Packet Capture Feature to snoop packets through the Junos device, within the forwarding plane. KB16233 - How to use 'Flow Traceoptions' and the 'security datapath-debug' KB16108 - Configuring Traceoptions for Debugging, and Trimming Output Variations of the command are as follows: Log Files System messages can be viewed in the log files with the 'show log messages' command. If you are familiar with ScreenOS, refer to KB14000 for a mapping of common troubleshooting commands from ScreenOS to Junos. Monitoring commands The most common, important commands for monitoring the SRX hardware, interfaces, sessions, and alarms are as follows: Packet Capture of control traffic to and from the RE of the SRX (monitor traffic interface).Packet Capture for transit traffic through the SRX (packet-capture).

Juniper srx commands