Skip to main content

Diagnostic Tools

SecureLink provides a set of remote diagnostic commands that you can run directly on edge devices from the web interface. These tools help you troubleshoot connectivity issues, verify network state, and inspect tunnel health without needing SSH access to the device.

warning

Diagnostic tools require the edge device to be online. Commands cannot be sent to or executed on offline devices. Check the Device Status page to confirm the device is reachable before running diagnostics.

Available Commands​

Ping​

Test network reachability from the edge to a target IP address or hostname.

  • Enter a destination IP or hostname.
  • The edge executes the ping and returns round-trip time, packet loss, and latency statistics.
  • Useful for verifying that the edge can reach remote endpoints, gateways, or DNS servers.

Traceroute​

Trace the network path from the edge to a destination.

  • Shows each hop along the route, including IP addresses and round-trip times.
  • Helps identify where packets are being delayed or dropped in the network path.
  • Useful for diagnosing routing issues or identifying unexpected path changes.

DNS Lookup​

Resolve a hostname from the edge's perspective.

  • Enter a hostname to resolve.
  • Returns the resolved IP address(es) and the DNS server used.
  • Useful for verifying that DNS resolution is working correctly on the edge, especially after DNS configuration changes.

Interface Status​

Display the current state of all VPP interfaces on the edge.

  • Shows interface names, admin state (up/down), link state, and current counters.
  • Counters include packets in/out, bytes in/out, errors, and drops.
  • Useful for quickly checking whether interfaces are up and passing traffic.

Route Table​

Display the edge's current routing table.

  • Shows all active routes, including destination networks, next hops, and associated interfaces.
  • Covers both VPP FIB entries and system-level routes.
  • Useful for verifying that expected routes are present after configuration changes or peering updates.

WireGuard Status​

Show the current status of all WireGuard tunnels on the edge.

  • Tunnel state -- Whether the tunnel interface is up.
  • Latest handshake -- When the last successful handshake occurred. A handshake older than a few minutes may indicate connectivity issues.
  • Transfer counters -- Bytes sent and received through each tunnel.
  • Peer details -- Connected peers, their allowed IPs, and endpoint addresses.

Viewing Results​

Diagnostic results are displayed in real time in the UI as the edge executes the command. For commands that produce streaming output (such as ping or traceroute), results appear incrementally as each line of output is received.

Results are displayed in a formatted terminal-style output panel within the device detail page.

tip

When troubleshooting connectivity problems, start with ping to confirm basic reachability, then use traceroute to identify where the path breaks. Check interface status and route table to verify the local configuration before investigating remote issues.