topic Re: show routing route destination output in General Topics

show routing route destination output

muellerm — Fri, 16 Dec 2011 10:30:55 GMT

Hi all,

there is something which is confusing me when I want to check an entry of the routing table.

If I'm looking for an entry of my routing table with:"show routing route destination x.x.x.x/x" and the route is covered by the default route, the output is like below:

admin@rou11004(active-primary)> show routing route destination 8.8.8.8/32

flags: A:active, ?:loose, C:connect, H:host, S:static, ~:internal, R:rip, O:ospf, B:bgp,
Oi:ospf intra-area, Oo:ospf inter-area, O1:ospf ext-type-1, O2:ospf ext-type-2

VIRTUAL ROUTER: WWW (id 2)
==========
destination                                 nexthop                                 metric flags      age   interface          next-
AS
total routes shown: 0

VIRTUAL ROUTER: WAN (id 3)
==========
destination                                 nexthop                                 metric flags      age   interface          next-
AS
total routes shown: 0

I can reach the destination.

I'm running a A/A cluster of PA-5050 (4.1.0) I've already tested it with (4.1.1), but it's still the same result

Any explanation?

Thanks

Michael

Re: show routing route destination output

rmonvon — Fri, 16 Dec 2011 19:37:04 GMT

I believe we're doing an exact match on the query. You query 8.8.8.8/32, there is no such entry in the routing table, so it returns zero route match.

Re: show routing route destination output

muellerm — Mon, 19 Dec 2011 10:07:02 GMT

Hello rmonvon,

thanks for your fast response.

Anyway, it's not good when you're trying to troubleshoot routing. Like this you can never be sure where a packet will be sent to.

Another thing I figured out is, that when I have alreday a network setup 81.92.x.x/x and I'm looking for a route for a network which is similar like 81.92.y.y/y the other network will be displayed.

Michael

Re: show routing route destination output

mgentile — Mon, 19 Dec 2011 18:00:48 GMT

The "show routing route" output is pretty crumby. Why can't it just show something like "the IP/prefix you asked about matches on this route name, this route prefix, and will be forwarded by this interface, to this next-hop IP address?"

Re: show routing route destination output

rmonvon — Tue, 20 Dec 2011 03:50:36 GMT

Michael...You can try the test command to test which route will match a destination for a specific virtual-router:

admin@pan-firewall> test routing fib-lookup ip 1.1.1.1 virtual-router
default default
<value> within virtual-router

Thanks.

Re: show routing route destination output

muellerm — Tue, 20 Dec 2011 14:41:23 GMT

Hi,

thanks for your help.

This command is realy helpful

Michael

Re: show routing route destination output

H.Tendrup — Thu, 10 Oct 2024 17:35:43 GMT

the test routing ~ command is useful, but it still doesn't supply the matching route in the rib. I agree that PAN OS needs a "show ip route x.x.x.x" equivalent.