How can I find out if a static route is being used?

[IHCowan]

Hi,

I have a 7507 router running IOS 12.1(22c). It has a static route as follows "ip route 10.50.0.0 255.255.255.0 172.30.190.1". 172.30.190.1 is an interface on a PIX firewall that I don't have access to. Noone I work with seems to know about this 10.50.0.0/24 network.

My gut feeling is that it is no longer required. Is there some way I can find out how many times this static route has been used? If not, how could I set up an access list to capture hits on this static route over time?

Thanks in advance for your help, Ian.

[frenzeus · Accepted solution]

Hi,

Yes u can actually just configure an extended access-list permitting any source to the destination 10.50.0.0/24 and apply this access-list to the outgoing interface. After applying the access-list, u can issue the "show access-list" to see if there's any hits going to this destination.

access-list 101 permit ip any 10.50.0.0 0.0.0.255

int fa0/0

ip access-group 101 out

HTH!

[javentre · Accepted solution]

It should read:

access-list 101 permit ip any 10.50.0.0 0.0.0.255

access-list 101 permit ip any any

otherwise ... that nasty implied "deny ip any any" at the end could discard what wasn't specifically allowed above.

[IHCowan]

Hi,

I just wanted to thank-you for your help ... I was able to determine that the static route was not being used and removed it last Fri.

Ian.

[IHCowan]

Hi,

I just wanted to thank-you for your help ... I was able to determine that the static route was not being used and removed it last Fri.

Ian.

[frenzeus]

Ah yes, indeed there is the implicit deny at the very end!

The most important part of all!