Whether the USG2000&5000 support capturing packets

1

You can enable the packet capture function on the USG2000&5000 as follows:
1. Configure the packet capture queue.

[USG] packet-capture all-packet queue 0 interface GigabitEthernet 0/0/1

2. Enable the packet capture function.

[USG] packet-capture startup manual

3. Save packets in the specified queue as file 1.cap on the device. The default directory is hda1:/.

[USG] packet-capture queue 0 to-file 1.cap

4. Use FTP to download file 1.cap from the device, use the packet capture software to open the file, and analyze the captured packets.

5. Clear the packet capture queue and release the memory.

After confirming that the host has completed receiving the packets, delete all packets from the queue.

reset packet-capture queue 0

Other related questions:
Meaning of quintuple packet capture for the USG2000&5000 series
Quintuple packet capture enables the USG2000&5000 series to copy the passing packets and save or display them in a certain format on the USG. If the USG or service is faulty and the fault cannot be located after you check the configuration and statistics, you can enable quintuple packet capture for the USG to capture packets of specified flows for fault analysis.

Whether the USG6000 supports capturing packets
You can enable the packet capture function on the USG6000 as follows: 1. Enable the packet capture function through the CLI as follows: a. Define the packet capture range. In this example, packets from 192.168.1.0 are captured. system-view Enter system view, return user view with Ctrl+Z. [sysname] acl 3000 [sysname-acl-adv-3000] rule permit ip source 192.168.1.0 0.0.0.255 [sysname-acl-adv-3000] quit b. Run the following command to put all IPv4 packets passing the interface and matching ACL 3000 to the packet sending queue. [sysname] packet-capture ipv4-packet 3000 interface GigabitEthernet 1/0/1 c. Start to capture packets. [sysname] packet-capture startup manual d. Save packets in the specified queue as file 1.cap on the device. The default directory is hda1:/. [sysname] packet-capture queue 0 to-file 1.cap e. After packet capture completes, terminate the packet capture process. [sysname] undo packet-capture startup f. Use FTP to download file 1.cap from the device, use the Wireshark to open the file, and analyze the captured packets.

Whether the USG2000&5000 support the Telnet function
By default, the USG2000&5000 have the Telnet function enabled, and users can directly use the initial administrator account admin to log in to the device.

Whether the USG2000&5000&6000 support reflective ACLs
The USG6650 and USG5120 do not support reflective ACLs for now.

Whether the USG2000&5000 series supports threshold learning
No.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top