[ATP/FLEX]How to check multicast DNS packet in the firewall?
Options
Zyxel_Jeff
Posts: 1,079 Zyxel Employee
in Networking
Scenario :
The user may encounter a problem where there is traffic related to port 5353 (multicast DNS) being dropped by the security policy, but they may not know which client IP is generating the traffic, as shown below:
This FAQ will guide you on how to check it.
Answer :
The user can utilize the CLI command "show sdwan interface" to list all interfaces and use the CLI "packet-trace interface interface name port 5353" to capture traffic related to port 5353 on the specified interface.
For example, using the command "packet-trace interface vlan10 port 5353" enables us to identify IPs attempting to send multicast DNS packets on port 5353 within the network environment.
0
Categories
- All Categories
- 384 Beta Program
- 2.1K Nebula
- 117 Nebula Ideas
- 80 Nebula Status and Incidents
- 5.1K Security
- 79 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 909 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 209 Service & License
- 335 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.9K FAQ
- 898 Nebula FAQ
- 415 Security FAQ
- 234 Switch FAQ
- 205 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 137 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 73 About Community
- 62 Security Highlight