topic Re: virtual routers in General Topics

virtual routers

jdprovine — Tue, 11 Oct 2016 22:02:56 GMT

How can you tell if a virtual router is passing traffic? Is there a check or test you can run?

Re: virtual routers

kiwi — Wed, 12 Oct 2016 07:31:11 GMT

Hi jprovine,

If you know which interface is using which virtual-router you could check interface counters (received and transmitted) with the command 'show counter interface ethernet1/x'.

hope this helps,

-Kim.

Re: virtual routers

TranceforLife — Wed, 12 Oct 2016 12:25:40 GMT

From my understanding VR is not passing traffic, it is just a bundle of the routes or single routing table which you attaching to the firewall interface (s). You can run simple "ping" or "traceroute" command to the destination to see next hot (path) etc. Don't forget allow this traffic in the security policy

Re: virtual routers

jdprovine — Wed, 12 Oct 2016 12:24:18 GMT

I will give that a shot

Re: virtual routers

jdprovine — Wed, 12 Oct 2016 12:24:45 GMT

I guess it would be more correct to say how do I make sure that the router is working LOL

Re: virtual routers

Rboehme — Thu, 13 Oct 2016 12:08:28 GMT

Actually what you can to is:

- attach your trust interface to the VR

- attach your untrust interface to the VR

- go to the CLI and enter "ping source <ip-of-trust-interface> host <ip-of-host-in-untrust-zone>

A setup like this would normally be trust (LAN) to untrust (internet) so in my case it would be:

ping source 192.168.0.1 host 8.8.8.8

If the ping succeeds you know that your VR is working.