Technical Tip: Performing WAD Debug for IP Range

It is possible to perform wad debug for IP ranges by defining 2 IP addresses (starting from the lowest IP in the range and ending with the highest IP on the range to debug).

Example:
To debug for src addresses within 10.1.0.1 - 10.1.0.30

CLI:

lab # diagnose wad filter src 10.1.0.1 10.1.0.30

lab # diagnose wad filter list
drop unknown sessions: disabled
source ip: 10.1.0.1-10.1.0.30

The same syntax applies for filtering a range of destination addresses to be debugged as well.

CLI:

lab # diagnose wad filter dst 192.1.1.1 192.1.1.5

lab # diagnose wad filter list
drop unknown sessions: disabled
dest ip: 192.1.1.1-192.1.1.5

Using the method above, it is also possible to filter for a range of source and destination addresses as well.

Example:
To perform wad debug for:

Source address range: 10.1.0.1 - 10.1.0.30.
Destination address range: 192.1.1.1 192.1.1.5.

CLI:

lab # diagnose wad filter src 10.1.0.1 10.1.0.30
lab # diagnose wad filter dst 192.1.1.1 192.1.1.5
lab # diagnose wad filter list
drop unknown sessions: disabled
source ip: 10.1.0.1-10.1.0.30
dest ip: 192.1.1.1-192.1.1.5

After setting the necessary filters, enable WAD debugging as shown below: 

lab # diagnose wad debug enable category all

lab # diagnose wad debug enable level verbose 

lab # diagnose wad debug show   <----- After this command, verify that all the WAD filters, along with IP range are set correctly.

lab # diagnose debug enable 

To stop debugging, execute the commands below: 

lab # diagnose deb disable

lab # diagnose deb reset 

To clear all WAD filters, run the following commands:

lab # diagnose wad filter clear
lab # diagnose wad filter list
drop unknown sessions: disabled