Last Updated on August 1, 2021 by Admin 1
The following command was executed on the router R61.R61#debug ip packet detail 105
What type of information will this debug command generate?
- all information on packets that are not fast switched by the router named 105
- all information on packets that are not fast switched by the local router
- information on packets that are not fast switched as filtered by the access list 105
- information on packets sent from router 105
This debug command will generate information on packets that are not fast switched as filtered by the access list 105. The output of certain debug commands can generate a tremendous amount of output, and in most cases a lot of information you don’t need. It can even impact the performance of the router while the debug command is in effect. The best way to reduce this output is to filter it through an extended access list.
To do this, you create the access list as you would any other access list and then reference the access list number when you execute the debug command. For example, to restrict the output of the debug ip packet detail command to the traffic generate between the devices with the IP addresses 10.10.10.2 and 13.1.1.1, you would create the following extended access list:
access-list 105 permit icmp host 10.10.10.2 host 13.1.1.1
access-list 105 permit icmp host 13.1.1.1 host 10.10.10.2
When you then execute the debug ip packet detail command and reference the list number of 105, it will only display debug output concerning communications between these IP addresses.
The number 105 in the command does not reference a router name or number. It references an access list number.
The command will not display all information on packets that are not fast switched by the local router. It will be limited to information as filtered in the access list 105.
The command will not list information on packets sent from router 105. The number 105 refers to an access list number, not a router.
Objective:
Infrastructure Security
Sub-Objective:
Configure and verify router security features