How do I Check if an IP Address is reachable from the Juniper Firewall device? (KB ID: KB6723)
| Article ID: | KB6723 |
|---|---|
| Former Article ID: | nskb5680 |
| Published: | Jan 22, 2007 |
| Last Modified: | Jan 22, 2007 |
| Visible By: | Employee, PTAC, Partner, Customer, Public |
Back to Previous Page | Knowledge Base Home
Article URL
Synopsis
How To Check if an IP Address is reachable from the Juniper firewall device?
Problem
Solution
A quick way to look at how the Firewall device will route a packet for a given address is to use the following CLI command:
get route ip <ip address> [Enter]Example 1: The following output states that the packet for 10.10.10.1 will be routed to the default gateway for the Untrust Interface on the trust-vr of 1.1.1.1
5xt-> get route ip 10.10.10.1
Routes for 10.10.10.1
---------------------
trust-vr : => 0.0.0.0/0 (id=3) via 1.1.1.1 (vr: trust-vr)
Interface untrust , metric 1
Example 2: The following output states that the packet for 10.15.13.150 will be routed to the tunnel.1 Interface in the trust-vr
5xt-> get route ip 10.15.13.150
Routes for 10.15.13.150
---------------------
trust-vr : => 10.15.13.145/28 (id=1) via 0.0.0.0 (vr: trust-vr)
Interface tunnel.1 , metric 0
Example 3: Displays an output where the packet does not have a static route and a default route is non-existent:
5xt-> get route ip 2.2.2.2
Routes for 2.2.2.2
---------------------
trust-vr : => none Category Description
By Product » Hardware » Firewalls » NetScreen Firewall/IPSec VPN
By Product » Software » Network Operating Systems » ScreenOS Software
By Network Technology » IP Protocols » Routing Protocols
Purpose
Troubleshooting