設定相關Filter做Debug Mode使用
root@junos-SRX> show configuration security flow | display set
set security flow traceoptions file tracetest
set security flow traceoptions flag basic-datapath
set security flow traceoptions packet-filter ICMP-Filter protocol icmp
set security flow traceoptions packet-filter ICMP-Filter source-prefix 192.168.88.0/24
set security flow traceoptions packet-filter ICMP-Filter destination-prefix 168.95.1.1/32
root@junos-SRX> show configuration security flow
traceoptions {
file tracetest;
flag basic-datapath;
packet-filter ICMP-Filter {
protocol icmp;
source-prefix 192.168.88.0/24;
destination-prefix 168.95.1.1/32;
}
}
檢查Log檔
root@junos-SRX> show log tracetest
沒有留言:
張貼留言