Monitoring Secure Policy Lists - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

Related Topics

Monitoring Secure Policy Lists

Display information about only secure policy lists. This command and the output are
Purpose
visible only to authorized users the mirror-enable command must be enabled
before using this command. Use the name keyword to display information for a
specific secure policy list.
To display information about secure policy lists:
Action
host1#show secure policy-list
Secure IP Policy secureIpPolicy
analyzer-udp-port 3000 mirror-id 6789 session-id 6543
Secure IPv6 Policy secure-ipv6-pol3
analyzer-udp-port 3000 mirror-id 6789 session-id 6543
virtual-router default
virtual-router default
L2TP Secure Policy secureL2tpPolicy
analyzer-udp-port 3000 mirror-id 6789 session-id 6543 (unreachable)
Table 68 on page 274 lists show secure policy-list command output fields.
Meaning
show secure classifier-list
Administrative state: enable
Reference count: 2
Classifier control list: secClassA
mirror analyzer-ip-address 192.168.1.1 analyzer-virtual-router default
Referenced by interface(s):
ATM5/0.1 secure-input policy, statistics disabled, virtual-router default
ATM5/0.1 secure-output policy, statistics disabled, virtual-router default
Administrative state: enable
Reference count: 2
Classifier control list: *
Mirror analyzer-ip-address 190.168.1.1 analyzer-virtual-router default
Referenced by interface(s):
GigabitEthernet1/0/2.1.2
GigabitEthernet1/0/2.1.2
Referenced by merged policies:
None
Administrative state: enable
Reference count: 2
Classifier control list: *
mirror analyzer-ip-address 192.168.2.1 analyzer-virtual-router default
Referenced by interface(s):
TUNNEL l2tp:1/msn.pwh.com/1
TUNNEL l2tp:1/msn.pwh.com/1
Chapter 14: Monitoring Packet Mirroring
Policy Table
------ -----
secure-input policy, statistics disabled,
secure-output policy, statistics disabled,
secure-input policy, statistics disabled
secure-output policy, statistics disabled
Monitoring Secure Policy Lists
273