HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

Ste

Command

Remarks

4. Display the enabled

debugging functions.

display debugging [ interface

interface-type interface-number ]

[ module-name ] [ | { begin |

exclude | include }

regular-expression ]

Optional.

Available in any view.

Ping and tracert example

Network requirements

As shown in Figure 10, Firewall A failed to Telnet Firewall B. Determine whether Firewall A and Firewall

B can reach each other. If they cannot reach each other, locate the failed nodes in the network.

Figure 10 Network diagram

Configuration procedure

1. Use the ping command to test connectivity between Firewall A and Firewall B.

<FirewallA> ping 1.1.2.2

PING 1.1.2.2: 56 data bytes, press CTRL_C to break

Request time out

--- 1.1.2.2 ping statistics ---

5 packet(s) transmitted

0 packet(s) received

100.00% packet loss

The output shows that Firewall A and Firewall B cannot reach each other.

2. Use the tracert command to identify failed nodes:

# Enable sending of ICMP timeout packets on Device.

<Device> system-view

[Device] ip ttl-expires enable

# Enable sending of ICMP destination unreachable packets on Firewall B.

<FirewallB> system-view

[FirewallB] ip unreachables enable

# Execute the tracert command on Firewall A.

<FirewallA> tracert 1.1.2.2

traceroute to 1.1.2.2(1.1.2.2) 30 hops max,40 bytes packet, press CTRL_C to break

1 1.1.1.2 14 ms 10 ms 20 ms

2 * * *