How To View Routing Table of Management Interface and Service Route Table?

How To View Routing Table of Management Interface and Service Route Table?

67845
Created On 04/07/19 23:00 PM - Last Modified 01/19/26 07:58 AM


Objective


How to view routing table of management interface and service route table?

Environment


  • NGFW
  • All PANOS versions


Procedure


Routing table through management interface and service route are installed using reserved routing table IDs (numbers).
To view all available routing tables, use this command:
user@firewall> debug dataplane internal vif vr

#
# reserved values
#
#255   local
#254   main
#253   default
#0     unspec

#
#PAN source interface routes
250    srcif
#PAN host vif for internal communcation
251    panhost
#PAN vif for inband HA control link
252    panha

#
#PAN Aux ports tables
256    aux-1
257    aux-2

#
#PAN vif route tables
#

#
# vr default, id 1
#
1    vr1

To view the main routing table through management interface, use this command:
user@firewall> debug dataplane internal vif route 254

default via 10.129.70.1 dev eth0 
10.129.70.0/24 dev eth0  proto kernel  scope link  src 10.129.70.118 
<snip>

The rest of the entries are internal routes.

To view the service route destinations configured under Setup > Service > (Global/VirtualSystem) > ServiceRoute Configuration
User-added image
user@firewall> debug dataplane internal vif route 251
default via 127.131.1.254 dev eth3.251

If the default gateway is not reachable, then you may see the following:
user@firewall> debug dataplane internal vif route 254

default via 10.129.70.1 dev eth0 ination Host Unreachable  <<<<<<<
10.129.70.0/24 dev eth0  proto kernel  scope link  src 10.129.70.118 
<snip>

Run "show arp management " to see if you have an ARP entry for the default gateway.


 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLRLCA4&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language