Skip to main content
btey
Staff & Editor
Staff & Editor
October 15, 2024

Technical Tip: To list route tag address

  • October 15, 2024
  • 0 replies
  • 2530 views
Description This article describes the method to show route tag address.
Scope FortiGate v7.4.0.
Solution

In v7.4.0, the SD-WAN service or proute list will not show the learned tag address:

 

sample # diagnose sys sdwan service4

Service(1): Address Mode(IPV4) flags=0x4200 use-shortcut-sla use-shortcut
Tie break: cfg
Shortcut priority: 2
Gen(2), TOS(0x0/0x0), Protocol(0): src(1->65535):dst(1->65535), Mode(manual)
Members(1):
1: Seq_num(2 vpn-aws virtual-wan-link), alive, selected
Route tag address(1): Route-tag(21464)

 

sample # diagnose firewall proute list
list route policy info(vf=root):

id=2130706433(0x7f000001) vwl_service=1(abbbbbb) vwl_mbr_seq=2 dscp_tag=0xfc 0xfc flags=0x40 order-addr tos=0x00 tos_mask=0x00 protocol=0 port=src(0->0):dst(0->0) iif=0(any)
path(1): oif=23(vpn-aws)
source wildcard(1): 0.0.0.0/0.0.0.0
Destination Address(route_tag): 21464
hit_count=628 rule_last_used=2024-10-14 01:18:24

 

To check the details of the route tag learned:

 

sample # diagnose sys route_tag list
Route-tag: 21464, vrf_id: 0, address: v4(1), v6(0)Last write/now: 6769851 6792012
Prefix(24): Address list(1):
192.168.1.0-192.168.1.255 oif: 23

 

sample # diagnose firewall route_tag list 21464 (diagnose firewall route_tag list <tag number>)
list route tag info(vf(root)), route_tag(21464):
route tag address, route_tag(21464) vrf_num(1):
vrf id(0), num(1): 192.168.1.0-192.168.1.255

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.