华为USG防火墙查看指定Ip的连接表

需求

要查询source Ip 10.284.200.50 , destination IP 10.248.1.200 的session

命令

display firewall session table source global 10.248.200.50  destination global 10.248.1.200

示例

<USG>  display firewall session table source global 10.248.200.50  destination global 10.248.1.200
2026-03-02 09:38:59.59 +08:00
 Current Total Sessions : 4
 Slot: 0 CPU: 0 
 smtp  VPN: public --> public  Remote 10.248.200.50:8678 --> 10.248.1.200:25 
 smtp  VPN: public --> public  Remote 10.248.200.50:8682 --> 10.248.1.200:25 
 smtp  VPN: public --> public  Remote 10.248.200.50:8677 --> 10.248.1.200:25 
 smtp  VPN: public --> public  Remote 10.248.200.50:8683 --> 10.248.1.200:25

如果要查询明细的端口号，只需要后面加 destination-port global

示例：

<USG> display firewall session table source global 10.16.133.219  destination global 172.16.44.100 destination-port global 25
2026-03-02 09:44:13.737 +08:00
 Current Total Sessions : 1
 Slot: 0 CPU: 0 
 smtp  VPN: public --> public  Remote 10.16.133.219:9082 --> 172.16.44.100:25