Palo Alto – Perform FIB Lookup for a Specific Destination

This command is a good one that I use often. There are time I want to see if a route is in the PA and if it is, which interface is being used. If you’re in an environment with a of routes, especially static routes, this command is very helpful.

Example looking for and external IP:

PA5250-A(active)> test routing fib-lookup virtual-router VR_INET_CLUSTER ip 4.2.2.2

--------------------------------------------------------------------------------
runtime route lookup
--------------------------------------------------------------------------------
virtual-router:   VR_INET_CLUSTER
destination:      4.2.2.2
result:
  via 107.x.x.11 interface ethernet1/1, source 107.x.x.1, metric 10
--------------------------------------------------------------------------------

Example looking for and internal IP:

PA5250-A(active)> test routing fib-lookup virtual-router VR_INET_CLUSTER ip 10.100.10.101

--------------------------------------------------------------------------------
runtime route lookup
--------------------------------------------------------------------------------
virtual-router:   VR_INET_CLUSTER
destination:      10.100.10.101
result:
  via 192.168.10.4 interface ethernet1/10, source 192.168.10.3, metric 11
--------------------------------------------------------------------------------

You can also use the “show routing route” command but I like the command above better because in order to use this command, you need to know the subnet. With the above command, you just need an IP.

PA5250-A(active)> show routing route | match 10.100.10.0
10.100.10.0/24                             192.168.10.4                            11     A Oi       1250043 ethernet1/10
More Stories
Cisco ASA Static NAT