[c-nsp] examining the routing table on Cisco Firewalls...

Robert Maier desolationrob at gmail.com
Tue Dec 7 05:20:41 EST 2010


Hi at all


Can anyone tell me why "sh route" on PIX/ASA/FWSM is such a dumb command ? I
mean, why is the device hiding such vital information like it´s routing
decision ?

So it always ends up like this:

sh route | i "guess the right network"
and if i´m lucky and not troubleshooting a FWSM, use the packet-tracer -.-

So, why has cisco complety renewed NAT (2 time since PIX6,3) but doesn´t
implement a command like sh ip route | longer-prefixes on IOS ?


More information about the cisco-nsp mailing list