F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Configuration Guide-6PW100

Ste

Command

Remarks

4. Display the enabled

debugging functions.

display debugging [ interface

interface-type interface-number ]

[ module-name ] [ | { begin |

exclude | include }

regular-expression ]

Optional.

Available in any view.

27B

Ping and tracert example

350BNetwork requirements

As shown in 725HFigure 9, Firewall A failed to Telnet Firewall B. Determine whether Firewall A and Firewall B

can reach each other. If they cannot reach each other, locate the failed nodes in the network.

Figure 9 Network diagram

351BConfiguration procedure

1. Use the ping command to test connectivity between Firewall A and Firewall B.

<FirewallA> ping 1.1.2.2

PING 1.1.2.2: 56 data bytes, press CTRL_C to break

Request time out

--- 1.1.2.2 ping statistics ---

5 packet(s) transmitted

0 packet(s) received

100.00% packet loss

The output shows that Firewall A and Firewall B cannot reach each other.

2. Use the tracert command to identify failed nodes:

# Enable sending of ICMP timeout packets on Device.

<Device> system-view

[Device] ip ttl-expires enable

# Enable sending of ICMP destination unreachable packets on Firewall B.

<FirewallB> system-view

[FirewallB] ip unreachables enable

# Execute the tracert command on Firewall A.

<FirewallA> tracert 1.1.2.2

traceroute to 1.1.2.2(1.1.2.2) 30 hops max,40 bytes packet, press CTRL_C to break

1 1.1.1.2 14 ms 10 ms 20 ms

2 * * *