Friday, December 21, 2018

Palo Alto Firewall: Verifying A Route In CLI

Real quick, how do you verify what interface a destination route goes out of the Palo Alto in CLI?  Here is what you do:
PA850-1(active)> test routing fib-lookup virtual-router vsys_router ip 192.168.1.5

--------------------------------------------------------------------------------
runtime route lookup
--------------------------------------------------------------------------------
virtual-router:   vsys_router
destination:      192.168.1.5
result:
  via 5.5.5.5 interface ethernet1/3, source 5.5.5.6, metric 10
--------------------------------------------------------------------------------

Right there it is.  Its ethernet1/3 in this case.  I wanted to know what interface 192.168.1.5 would be going out, and with the above command, it tells me.  Note that "vsys_router" is your virtual router that you have defined for routing.  It may be default in your case, or whatever you named it.

No comments:

Post a Comment

Your comment will be reviewed for approval. Thank you for submitting your comments.