Verify the configuration is working as intended.Debug all packet drops in production network.The packet-tracer command lets you do the following: With the “packet-tracer” command it is possible to trace the lifespan of a packet through the security appliance to see if it is behaving as expected. : Displays the trace results in XML format.: Provides detailed tracing output information.dest_port: Destination port of the packet.dest_addr: Destination IP address of the packet.src_port: Source port of the packet (can be any arbitrary number, preferably above 1024).src_addr: Here enter a source IP address of the packet.protocol: This can be “ tcp” or “ udp” or “ icmp“.: Specify the source (ingress) interface from which the simulated packet will start.
There are much more options in the command above, but I’m showing the most simple and most useful syntax (we will see also detailed examples below). Packet-tracer input protocol src_addr src_port dest_addr dest_port To run a packet tracing session for packet troubleshooting and network fault isolation, use the packet-tracer command as shown below:
0 kommentar(er)
