Session management probe commands -- display fastforward session table

Use display fastforward session table to display information about session entries that match specific criteria. The session entries are entries that are not processed by security services.

Syntax

Centralized devices:

display fastforward session table { ipv4 | ipv6 } [ source-ip source-ip ] [ destination-ip destination-ip ] [ verbose ]

Distributed devices in standalone mode:Centralized IRF devices:

display fastforward session table { ipv4 | ipv6 } [ slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ verbose ]

Distributed devices in IRF mode:

display fastforward session table { ipv4 | ipv6 } [ chassis chassis-number slot slot-number [ cpu cpu-number ] ] [ source-ip source-ip ] [ destination-ip destination-ip ] [ verbose ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4: Displays IPv4 session entries.

ipv6: Displays IPv6 session entries.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays information for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays information for all member devices if you do not specify a member device. On an IRF 3 system, this command displays information for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays information for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays information for all cards if you do not specify a card. On an IRF 3 system, this command displays information for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

source-ip source-ip: Specifies a source IP address. The source-ip argument specifies the source IP address of sessions from the initiator to the responder.

destination-ip destination-ip: Specifies a destination IP address. The destination-ip argument specifies the destination IP address of sessions from the initiator to the responder.

verbose: Displays detailed information about session entries. If you do not specify this keyword, the command displays brief information about session entries.

Usage guidelines

If you do not specify any parameters except ipv4 or ipv6, this command displays all IPv4 or IPv6 session entries that are not processed by security services.

Session management probe commands -- display system internal session statistics

Use display system internal session statistics to display abnormal packet statistics for sessions.

Syntax

Centralized devices:

display system internal session statistics { ipv4 | ipv6 }

Distributed devices in standalone mode:Centralized IRF devices:

display system internal session statistics { ipv4 | ipv6 } [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display system internal session statistics { ipv4 | ipv6 } [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4: Displays abnormal packet statistics for IPv4 sessions.

ipv6: Displays abnormal packet statistics for IPv6 sessions.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays abnormal packet statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays abnormal packet statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command displays abnormal packet statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command displays abnormal packet statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command displays abnormal packet statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command displays abnormal packet statistics for all cards if you do not specify a card. On an IRF 3 system, this command displays abnormal packet statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.

Session management probe commands -- reset system internal session statistics

Use reset system internal session statistics to clear abnormal packet statistics for sessions.

Syntax

Centralized devices:

reset system internal session statistics { ipv4 | ipv6 }

Distributed devices in standalone mode:Centralized IRF devices:

reset system internal session statistics { ipv4 | ipv6 } [ slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset system internal session statistics { ipv4 | ipv6 } [ chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Probe view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4: Clears abnormal packet statistics for IPv4 sessions.

ipv6: Clears abnormal packet statistics for IPv6 sessions.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears abnormal packet statistics for all cards. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears abnormal packet statistics for all member devices. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. On an IRF fabric, this command clears abnormal packet statistics for all member devices if you do not specify a member device. On an IRF 3 system, this command clears abnormal packet statistics for all IRF member devices and PEXs if you do not specify an IRF member device or PEX. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on a member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. If you do not specify a card, this command clears abnormal packet statistics for all cards. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. On an IRF fabric, this command clears abnormal packet statistics for all cards if you do not specify a card. On an IRF 3 system, this command clears abnormal packet statistics for all cards and PEXs if you do not specify a card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot. Support for this option depends on the device model.