Check Point IP690 - Flash Based Sys, Installation Manual

Page: 106 / 118

8
Troubleshooting
106 Check Point IP690 Security Platform Installation Guide
Troubleshooting Routing Problems
Several useful tools are available to troubleshoot routing problems. The first tool is available
from the Monitor page in Network Voyager, from which you display routing statistics and errors.
You can access this information from the command-line interface using the ICLID (IPSRD
command-line interface daemon) command. An example use of the ICLID command is shown
below.
For information about the ICLID command, see the
Voyager Reference Guide . For information
about how to access Network Voyager and the related reference materials, see “Using Check
Point Network Voyager” on page 38.
Note
Adding a question mark (?) after any command provides additional command options.
Typing a question mark (?) at a prompt provides a list of available commands.
hostname[admin]# iclid
hostname | IP address>
hostname | IP address> ?
exit get help quit show
hostname | IP address>
hostname | IP address>
show ?
address bgp igmp iphelper mfc rip vrrp bootpgwigrp
krt ospf route inbound-filterdvmrpinterface memory
resource version
hostname | IP address> show route ?
aggregate bgp igrp ospf static
all direct inactive rip summary
hostname | IP address>
show route ospf
Codes: C - connected, S - static, I - IGRP, R - RIP,
B - BGP, O - OSPF, E - OSPF external, A - Aggregate,
K - Kernel Remnant, H - Hidden, S - Suppressed
The response to the preceding ICLID command is as follows:
0 172.16/16 via 10.1.1.225, eith-sp4p1c0,cost 3, age 3111
In addition, several trace options are available. You can enable these options under the routing
options in Network Voyager. When a trace is enabled the output appears in
/var/tmp/
ipsrd.log.
Common Problems with OSPF
Use tcpdump to view routing information. Use the following command display routing updates
for that interface:
tcpdump -i interface proto ospf