Filter package-trace for multiple port and for a specific host

Raymond
Raymond Posts: 19  Freshman Member
First Comment Friend Collector Fifth Anniversary
in Security

I try to filter the traffic between the WAN port of a Zyxel Flex 500 (firmware v5.37) and a host (external IP address) for multiple ports, but the following commands shows me the traffic of all kind of ip addresses instead of only one.

packet-trace interface WAN extension-filter match-host 62.x.x.x 62.x.x.x match-port 500 4500

packet-trace interface WAN host 62.x.x.x extension-filter match-port 500 4500

what am I doing wrong?

Accepted Solution

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @Raymond,

    You can use the command.

    Router> packet-trace interface WAN src-host 62.x.x.x port 500

All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓

    Hi @Raymond,

    You can use the command.

    Router> packet-trace interface WAN src-host 62.x.x.x port 500

  • tobythomas
    tobythomas Posts: 4
    First Comment
    edited March 4

    To filter package-trace for multiple ports and a specific host, ensure to accurately specify the host's IP address and the desired ports in the command. The correct format should be: "packet-trace interface WAN extension-filter match-host [host_IP_address] match-port [port1] [port2]." For example, "packet-trace interface WAN extension-filter match-host 62.x.x.x match-port 500 4500." Make sure to replace [host_IP_address] with the actual external IP address of the host and [port1] [port2] with the desired port numbers.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）