ADTRAN AOS Version R10.1.0 Command Reference Manual page 284

Command Reference Guide
debug ip firewall
Use the debug ip firewall command to activate debug messages associated with the AOS Internet Protocol
version 4 (IPv4) firewall operation. Debug messages are displayed (real time) to the terminal (or Telnet)
screen. Use the no form of this command to disable the debug messages. Variations of this command
include:
debug ip firewall
debug ip firewall vrf <name>
Turning on a large amount of debug information can adversely affect the performance of
your unit.
Syntax Description
vrf <name>
Default Values
By default, all debug messages in AOS are disabled.
Command History
Release 2.1
Release 17.1
Release 17.9
Release R10.1.0
Functional Notes
The debug ip firewall command activates debug messages to provide real-time information about the
IPv4 AOS stateful inspection firewall operation.
VRF on AOS products allows a single physical router to be partitioned into multiple virtual routers. Each
router instance has its own route table and interface assignments. Beginning with Release 16.1, all AOS
routers supporting multiple VRF instances (multi-VRF) have an unnamed default VRF instance regardless
of whether multi-VRF is configured. Therefore, executing the abovementioned commands without
specifying a VRF will only affect the default unnamed VRF.
Usage Examples
The following example activates the debug messages for the IPv4 AOS stateful inspection firewall:
>enable
#debug ip firewall
60000CRG0-35E
Optional. Displays debug information for the specified VPN routing and
forwarding (VRF) instance.
Command was introduced.
Command was expanded to include the vrf parameter.
Command was changed to require the ip keyword for ADTRAN
internetworking products only.
Command was changed to require the ip keyword for ADTRAN voice
products.
Copyright © 2012 ADTRAN, Inc.
Enable Mode Command Set
284