O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

8.25. Troubleshoot MIPs

Problem

You want to troubleshoot problems with MIPs.

Solution

For configuration verification use these commands:

	get mip
	get config | include mip

For troubleshooting use the following commands:

	debug flow basic
	get session
	debug mip all

Discussion

Verifying MIPs is easy. The get mip command lists all MIPs configured on the system. The Map IP column is the public IP, the Host IP column is the private IP, the Interface column lists the interface on which the MIP was configured, and the VRouter column lists the target VR in which the private IP is sought:

	SSG140-> get mip
	Total MIPs under Root configured:1 Max:1500.
	--------------------------------------------------------------------
	Map IP             Host IP         Interface   VRouter
	--------------------------------------------------------------------
	192.168.1.0/24     192.168.2.0     ethernet0/1 trust-vr
	1.1.1.100/32       192.168.3.100   ethernet0/1 trust-vr

An easy way to see where a MIP touches a configuration is with get config | include mip, where mip is a regular expression filter to the configuration display. In some cases, it may be more useful to download the configuration to a local computer and to search it with an editor because typical configurations often have from hundreds to thousands of MIPs configured.

	SSG140-> get config | include mip
	set interface "ethernet0/1" mip 10.10.20.100 host 192.168.1.100

	netmask 255.255.255.255 vr "trust-vr"
	set policy id 1 from "Untrust" to "Trust" "Any" "MIP(10.10.20.100)" "ANY" permit

Flow debugging ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required