Real quick, how do you verify what interface a destination route goes out of the Palo Alto in CLI? Here is what you do:
PA850-1(active)> test routing fib-lookup virtual-router vsys_router ip 192.168.1.5
--------------------------------------------------------------------------------
runtime route lookup
--------------------------------------------------------------------------------
virtual-router: vsys_router
destination: 192.168.1.5
result:
via 5.5.5.5 interface ethernet1/3, source 5.5.5.6, metric 10
--------------------------------------------------------------------------------
Right there it is. Its ethernet1/3 in this case. I wanted to know what interface 192.168.1.5 would be going out, and with the above command, it tells me. Note that "vsys_router" is your virtual router that you have defined for routing. It may be default in your case, or whatever you named it.
No comments:
Post a Comment
Your comment will be reviewed for approval. Thank you for submitting your comments.