Verifying a Firewall Filter That Handles Fragments

Purpose

Verify the firewall filter configured in Configuring a Routing Engine Firewall Filter to Handle Fragments.

Action

To verify that the actions of the firewall filter terms are taken, send packets to the Services Router that match the terms. In addition, verify that the filter actions are not taken for packets that do not match.

• Verify that packets with small fragment offsets are recorded in the router's system logging facility.
• Use the show route summary command to verify that the routing table does not contain any entries with a protocol other than Direct, Local, BGP, or Static.

Router ID: 192.168.249.71

inet.0: 34 destinations, 34 routes (33 active, 0 holddown, 1 hidden)
              Direct:     10 routes,      9 active
               Local:      9 routes,      9 active
                 BGP:     10 routes,     10 active
              Static:      5 routes,      5 active
...

What it Means

Verify that the show route summary command does not display a protocol other than Direct, Local, BGP, or Static.

Related Topics

For a complete description of show route summary output, see the JUNOS Routing Protocols and Policies Command Reference.