R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

Executing the ping operation at the CLI

Task Command

Remarks

Test the network

connectivity to an IP

address.

• For IPv4 networks:

ping [ ip ] [ -a source-ip | -c count | -f | -h ttl | -i

interface-type interface-number | -m interval | -n | -p

pad | -q | -r | -s packet-size | -t timeout | -tos tos | -v

| -vpn-instance vpn-instance-name ] * host

• For IPv6 networks:

ping ipv6 [ -a source-ipv6 | -c count | -m interval | -s

packet-size | -t timeout | -vpn-instance

vpn-instance-name] * host [ -i interface-type

interface-number ]

Required.

Available in any view.

NOTE:

• Set a larger value for the timeout timer (indicated by the -t keyword in the command) for a low-speed

network.

• Only the directly connected se

ment address can be pin

ed if the out

oin

interface is specified with

the -i keyword.

• The destination firewall whose ping response function is disabled cannot be pinged.

Tracert

Tracert (also called "Traceroute") enables you to get the IP addresses of Layer 3 devices in the path to a

specific destination. You can use tracert to test network connectivity and identify failed nodes.

Figure 4 Tracert diagram

Tracert uses received ICMP error messages to get the IP addresses of devices. As shown in Figure 4,

tracert works as follows:

1. The source device (Device A) sends a UDP packet with a TTL value of 1 to the destination device

(Device D). The destination UDP port of the packet is not used by any application of the

destination.

2. The first hop (Device B, the first Layer 3 device that receives the packet) responds by sending a

TTL-expired ICMP error message to the source, with its IP address 1.1.1.2 encapsulated. In this

way, the source device can get the address of the first Layer 3 device (1.1.1.2).