Communication route check method (traceroute)

Operation Confirmed Version:
 vSRX Version15.1X49-D105.1

For vSRX , network path can be checked with the traceroute command.

Command for checking routers to be passed through until the destination

The network path check function with the traceroute command is described in this section. Using the traceroute command allows to display a list of routers and network devices to be passed through from one host to another route.

Presumed case for sample setting

  • For virtual server (, execute traceroute to check the network path.

Command to be entered with CLI

user01@vSRX-01> traceroute


Check can be performed with traceroute <IP address> command. For <IP address>, enter the IP address for which the reachability is to be checked.
To use the ping command in terms of interface (ge-0/0/x), the interface must have been assigned to a zone and traceroute must have been allowed by system-services under host-inbound-traffic in terms of the zone.
Zone setting for making traceroute usable in the trust zone
#set security zones security-zone trust host-inbound-traffic system-services ping
Make the settings in terms of the zone to be used.

Operation check result

The execution result below allowed to confirm success of traceroute to virtual server (

user01@vSRX-01> traceroute
traceroute to (, 30 hops max, 60 byte packets
1 (  2.924 ms  2.683 ms  3.291 ms