This article describes the show configuration command.

For other topics, go to the SRX Getting Started main page.

Use the show configuration command.

This section contains the following:

• Displaying the entire configuration
• Displaying a hierarchy of the configuration
• Displaying set commands from the configuration
• Displaying set commands with the match command
• Technical documentation

Displaying the entire configuration

Use the show configuration operational mode command to review the configuration that is currently running on the SRX Series device, which is the last committed configuration.

user@srx210> show configuration
## Last commit: 2014-2-28 10:27:20 UTC by lab
version 12.1X46-D15.3;
system {
    host-name srx210;
    root-authentication {
        encrypted-password "$ABC123"; ## SECRET-DATA
    }
    name-server {
        208.67.222.222;
    }
    login {
        user lab {
            uid 2000;
            class super-user;

...

You can also use the show configuration command while in configuration mode if you preface the command with the run command, which allows you to stay in configuration mode, and allows you to run operational commands:

user@host# run show configuration

 

Displaying a hierarchy of the configuration

You can review a specific hierarchy of the running configuration. To see the available hierarchies, enter show configuration ? at the CLI prompt:

Possible completions:
  <[Enter]>            Execute this command
> access               Network access configuration
> access-profile       Access profile for this instance
> accounting-options   Accounting data configuration
> applications         Define applications by protocol characteristics
+ apply-groups         Groups from which to inherit configuration data
> chassis              Chassis configuration   ...

For example, to review the interface configuration, use the following command:

user@host> show configuration interfaces
interface-range interfaces-trust {
    member ge-0/0/1;
    member fe-0/0/2;
    member fe-0/0/3;
    member fe-0/0/4;
    member fe-0/0/5;
    member fe-0/0/6;
    member fe-0/0/7;
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan-trust;
            }
        }
    }
}
ge-0/0/0 {
    unit 0 {
        family inet {
            address 10.1.37.22/24;
        }
    }
}
vlan {
    unit 0 {
        family inet {
            address 192.168.1.1/24;
        }
    }
}

Displaying set commands from the configuration

To review the configuration output in a format similar to ScreenOS show configuration output, use the show configuration | display set command, which shows the set commands used to create the configuration.

user @srx210> show configuration | display set
set version 12.1X46-D15.3
set system host-name srx210
set system root-authentication encrypted-password "$ABC123"
set system name-server 208.67.222.222
set system login user lab uid 2000
set system login user lab class super-user
...

 

Displaying set commands with the match command

You can use the match command in conjunction with the show configuration | display set command to review set commands that match the keyword that you specify. In the following example, the match criteria keyword is interfaces , and the show configuration output lists only set commands that contain the word interfaces .

user@host> show configuration | match interfaces | display set
set interfaces interface-range interfaces-trust member ge-0/0/1
set interfaces interface-range interfaces-trust member fe-0/0/2
set interfaces interface-range interfaces-trust member fe-0/0/3
set interfaces interface-range interfaces-trust member fe-0/0/4
set interfaces interface-range interfaces-trust member fe-0/0/5
set interfaces interface-range interfaces-trust member fe-0/0/6
set interfaces interface-range interfaces-trust member fe-0/0/7
set interfaces interface-range interfaces-trust unit 0 family ethernet-switching
vlan members vlan-trust
set interfaces ge-0/0/0 unit 0 family inet address 10.1.37.22/24
set interfaces vlan unit 0 family inet address 192.168.1.1/24
set security zones security-zone trust interfaces vlan.0
set security zones security-zone trust interfaces ge-0/0/0.0 host-inbound-traffic system-services all
set security zones security-zone trust interfaces ge-0/0/0.0 host-inbound-traffic protocols all
 

Technical documentation