CLI for Juniper Firewalls and routers.

What version are you using on Screenos and Junos bud and I can help you out, but you may find it easier to have a look yourself at :

www.juniper.net/techpubs

DM

The CLI reference itself and the help feature are your best friends. If you type a part of a command, then question mark, a command summary appears for matching commands or arguments. Pressing tab instead expands the command, if unique, or lists a choice of matching key words.

Hi all,
agree with u Qlemo but some times u need more deeply technical commands to do it. For example u need to trace certain IP by applying filter on the firewall.
how it can be done in an easy steps?

Are you asking how to issue related commands, or how to get the syntax for them? Some commands are "hidden", i.e. no help given by default.

For IP debugging, following commands are usefull:
set ffilter          - filter debug output based on src-/dst- ip/port or protocol
snoop             - configure filter for packet capture, or start/stop capture
... fprofile ...     - create a complete traffic profile, which can be analyzed later by e.g. dst port


for getting a complete syntax overview, have a look at
get cm 0
get cm 1
...
get cm 5

This gives you all variations of possible CLI commands - expect to read megabytes on text :-) Can't remember exactly, but I think you can even use the keyword "hidden" after the above commands to reveal even more "usefull" commands.

Good Qlemo,
is there ny online resource for such commands...or at least check list?

Regarding fprofile, I've created following EE Article: https://www.experts-exchange.com/articles/Hardware/Networking_Hardware/Routers/Juniper-ScreenOS-traffic-profiling-with-fprofile.html