How to find a IP range by DMZ?

sarif5 — Wed, 04 Oct 2017 12:54:33 GMT

I am trying to find a range by DMZ. For example in ASA we can show-

show route | inc 10.10.10

and it will show the DMZ where that route belong.

Is there a way to find that in PAN OS 7.1?

Re: How to find a IP range by DMZ?

reaper — Thu, 05 Oct 2017 08:11:06 GMT

The Palo Alto Networks firewall is zone based, this means routes are subordinate to zones and not directly related

so the first thing you could do is

> show routing route | match 10.0.0

to find the interface associated to the subnet you are looking for, then do

> show interface ethernet1/X | match Zone (capital Z)

reaper@myNGFW> show routing route | match 10.0.0                  
10.0.0.0/24                                 10.0.0.1                                0      A C              ethernet1/11                                       
reaper@myNGFW> show interface ethernet1/11 | match Zone
Zone: trust, virtual system: vsys3

topic Re: How to find a IP range by DMZ? in General Topics

How to find a IP range by DMZ?

Re: How to find a IP range by DMZ?