click below
click below
Normal Size Small Size show me how
PALO ALTO
CLI
| Question | Answer |
|---|---|
| provides the system’s management IP, serial number and code version | show system info |
| shows the real time throughput on the device | show system statistics |
| shows whether various system processes are running | show system software status |
| used to see when commits, downloads, upgrades, etc. are completed | show jobs processed |
| show percent usage of disk partitions | show system disk--space- |
| show system logdb--quota | shows the maximum log file sizes |
| debug dataplane internal vif link | show management interface (eth0) counters |
| show running nat--policy- | shows current NAT policy table |
| show running ippool | use to see if NAT pool leak |
| test nat--policy--match | test nat--policy--match |
| displays the routing table | show routing route |
| test routing fib--lookup virtual--router <VR_name> ip <IP_addr_trying_reach> - | is like SH IP ROUTE X.X.X.X finds which route in table will be used to reach said IP |
| show running security--policy | shows the current policy set |
| test security--policy--match from trust to untrust destination <IP>- | simulate a packet going through the system, which policy will it match? |
| show log [ system | traffic | threat ] direction equal backward | will take you to the end of the specified log |
| clear log [ traffic | threat | acc ] | clear everything in the specified log |
| debug ike global on debug | view detailed debug information for IPSec tunneling (1) |
| less mp--log ikemgr.log | view detailed debug information for IPSec tunneling (2) |