Reason why the firewall displays the FIB timeout log


It is normal for the firewall to display the following information:
2010-04-08 16:48:35 CS-NGFW-1 FIB timer 385 timeout!
2010-04-08 16:48:30 CS-NGFW-1 FIB timer 938 timeout!
2010-04-08 16:48:25 CS-NGFW-1 FIB timer 213 timeout!
2010-04-07 16:48:35 CS-NGFW-1 FIB timer 837 timeout!
2010-04-07 16:48:30 CS-NGFW-1 FIB timer 573 timeout!
2010-04-07 16:48:25 CS-NGFW-1 FIB timer 427 timeout!
2010-04-06 16:48:35 CS-NGFW-1 FIB timer 791 timeout!
2010-04-06 16:48:30 CS-NGFW-1 FIB timer 841 timeout!
2010-04-06 16:48:25 CS-NGFW-1 FIB timer 400 timeout!
This is a normal phenomenon. The firewall updates and displays log information every 24 hours, which ensures that the control and forwarding planes have synchronized routing information.

Other related questions:
Reason why the firewall does not display the IP address in the tracert output
By CLI command, from the system view, execute: icmp ttl-exceeded send - By default, an interface is disabled to send ICMP Time Exceeded message; icmp host-unreachable send - this command enables transmitting the ICMP host-unreachable packets; undo firewall defend tracert enable - if (firewall defend tracert enable) command is configured, a FW discards ICMP timeout packets, UDP timeout packets, or destination port unreachable packets.

How to enable log display on the terminal or console for S series switches
For S series switches (except the S1700), you can use the following commands to enable log display on the terminal or console: - terminal debugging: enables the debug message display function on the terminal or console. - terminal logging: enables the log display function on the terminal or console. - terminal trapping: enables the trap display function on the terminal or console. - terminal monitor: enables the terminal or console to display messages sent from the information center. The terminal or console displays messages only after the terminal monitor command and any of the other three commands are configured. This function is enabled by default if you log in to the console through the console port. This function is disabled by default if you log in to the terminal using Telnet, and must be enabled using the terminal monitor command.

After I run the display fib command, what does flag mean in the command output
Currently, Flag can have the following values:
  • B: a blackhole route, that is, a route with the outbound interface NULL0.
  • D: a route generated by a dynamic routing protocol such as Intermediate System to Intermediate System routing protocol (IS-IS), open shortest path first (OSPF), Border Gateway Protocol (BGP), or Routing Information Protocol (RIP).
  • G: a gateway route, that is, a route with a gateway as the destination address.
  • H: a host route.
  • S: a static route, that is, a route configured using the ip route-static command or configured on the network management system (NMS).
  • U: a route that is reachable.

Reason why commands cannot be configured on the standby firewall
After the hot standby relationship is established between two firewalls, commands that can be automatically backed up cannot be manually configured on the standby firewall. Commands configured on the active firewall are automatically synchronized to the standby firewall. To manually configure commands of this type on the standby firewall, cancel the configured automatic backup function (undo hrp auto-sync config) first.

How can command operation logs be displayed in the log buffer of an AR
By default, only warning logs are displayed in the log buffer. Command operation logs are at the notifications level, which is lower than warning. Therefore, command operation logs will not be displayed in the log buffer. To view command line operation logs in the log buffer, perform the following operations: 1. Run the system-view command to enter the system view. 2. Run the info-center source default channel logbuffer log level notifications command to allow logs of the notifications level to be displayed in the log buffer.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top